Understanding how EFS works is the key to securing your environment. Here are a few resources to get you started.
MICROSOFT
The Microsoft article "Best Practices for Encrypting File System"
The Microsoft Windows 2000 Server Resource Kit
The Microsoft white paper "Step-by-Step Guide to Encrypting File System (EFS)"
SECURITY ADMINISTRATOR
You can obtain the following articles from Security Administrator’s Web site at http://www.secadministrator.com.
John Howie
"Securing Win2K with Certificate Services," September 2001, InstantDoc ID 22113
Randy Franklin Smith
Access Denied, "Recover Files Encrypted with EFS," October 2001, InstantDoc ID 22318
Access Denied, "Using EFS with and Without AD," October 2001, InstantDoc ID 22319
Ken Spencer
"Using Win2K Certificate Services to Configure a Standalone CA, Part 2," February 2002, InstantDoc ID 23654
"Using Win2K Certificate Services to Configure a Standalone CA, Part 1," January 2002, InstantDoc ID 23373
WINDOWS & .NET MAGAZINE
You can obtain the following articles from Windows & .NET Magazine’s Web site at http://www.winnetmag.com.
Robert McIntosh
Windows 2000 Ready, "Windows 2000’s Encrypting File System," January 2001 Web Exclusive, InstantDoc ID 19721
Mark Russinovich
NT Internals, "Inside Encrypting File System, Part 2," July 1999, InstantDoc ID 5592
NT Internals, "Inside Encrypting File System, Part 1," June 1999, InstantDoc ID 5387
