Why can't my users encrypt files on a Windows 2000 domain controller (DC)?

A. Users will be unable to encrypt files on a DC if all the following conditions are true:

• Users have roaming profiles.
• You configure the DCs with the "Delete cached copies of roaming profiles" setting.
• The servers aren't running Win2K Service Pack 3 (SP3) or later.

Users can still encrypt files on member servers but will receive an error when they attempt to encrypt files on file shares hosted by DCs. To resolve this error, apply Win2K SP3 or later.