Encrypting User Data with EFS in Windows Server 2016

Donate Us : paypal.me/MicrosoftLab Encrypting User Data with EFS in Windows Server 2016 1. Prepare - DC21 : Domain Controller, IP 10.0.0.21 | DC22 : Certificates Server, IP 10.0.0.22 | WIN1091, WIN1092 : Domain Member (IP 10.0.0.91, 10.0.0.92) 2. Step by step : Encrypting Data for HiepIT account with EFS - DC22 : Install "Active Directory Certificate Services" + Server Manager - Manage - Add Roles and Features - Next to Server Roles : Select "Active Directory Certificate Services" - Add Features - Next to Role Services : Select "Certification Authority" and "Certificate Enrollment Policy Web Service" - Add Features - Install + Notifications - Congifure Active Directory Certificate Services on the distination server - Role Service : Select "Certification Authority" - Setup Type : Enterprise CA - Next to CA Name : Common name for this CA : PNS-CA - Configure - DC21 : Delete certificate default + Server Manager - Tools - Group Policy Management - Default Domain Policy - Edit… - Computer Configuration - Policies - Windows Settings - Security Settings - Public key Policies - Encrypting File System - Delete : Administrator + Start - cmd - gpupdate /force - WIN1091 : logon using HiepIT account. Update policy, Request certificate and create a floder share. Start - cmd - gpupdate /force + Create and share a folder named DATA, create a file text named report.txt local drive C: + WIN1092 : Logon using VietIT account. Start - \\10.0.0.91\DATA - Double-click report.txt === OK + Start - mmc - File - Add/Remove Snap-in...- Certificates - Add - Right-click Personal - All Tasks - Request New Cerfiticate… - Select Basic EFS - Enroll + Right-click report.txt - Genernal tab - Advanced… - Check "Encrypt contents to secure data" - Choose " Encrypt the file and its parent folder (recommended)"- OK - WIN1092 : Logon using VietIT account. + Start - cmd - gpupdate /force + Start - \\10.0.0.91\DATA - Double-click report.txt === Access is denied + Logon using account HiepIT. Start - \\10.0.0.91\DATA - Double-click report.txt === OK