HOW TO: Share Access to an Encrypted File in Windows XP (308991)

SUMMARY

This article describes how to share access to a file that is stored by using Microsoft Windows XP Encrypting File System (EFS). Encryption is the process of converting data into a format that cannot be read by others. You can use the Windows XP EFS to automatically encrypt your data when it is stored on the hard disk.

back to the top

How to Share Access to Encrypted Files

NOTE: You must be a member of the administrators group or the user that encrypted the file in to add users to it. If you are not authorized to add users to an encrypted file, you receive the following error message: You can retain the security of file encryption while allowing specific users access to your encrypted files. To allow access to your encrypted files:

1. Right-click the encrypted file, and then click Properties.
2. Click the General tab (if it is not already selected), and then click Advanced.
3. Click Details, and then click Add.
4. Select the user you want to share access to the encrypted file with, and then click OK.
5. When you are finished adding users, click OK three times.

back to the top

Troubleshooting

• Encrypted files are not accessible from Macintosh clients.
• You may be unable to open documents that other users store in your encrypted folder. When a user creates a document in an encrypted folder, only the user that created the document can open it unless they grant access to other users. Because of this, a folder that you encrypt may later contain files that you cannot open. If you require access to these files, ask the creators of these files to add your user account to the list of users with whom the encrypted files are shared.
• The EFS documentation indicates that a user who is granted share access to an EFS encrypted file must also have NTFS Write permission for the file in order to edit it. However, if the file is a Microsoft Office document, the user must have Modify permission for the file in order to edit document. Modify permission includes Write permission.

back to the top