EFS encryption technology makes data more secure (1)

Users who use Windows 2000/XP/Server 2003 must have heard of or have contact with EFS, but because of its complexity, it will lose data if it is not good. Therefore, many people do not use it. In fact, EFS is not as difficult as we imagined. The key is to really play with it. We need to master several key tricks...

EFS: Encrypting File System, encrypted file system. It can help you encrypt files and folders stored on NTFS disk volumes.

NTFS: A disk format supported by Windows 2000/XP/2003 specifically designed for management security features such as network and disk quotas, file encryption. NTFS supports file encryption management to provide users with a higher level of security.

MMC: Short for Microsoft Management Console, an integrated management tool for managing network, computers, services, and other system components. MMC does not perform management functions, but integrates management tools. The main types of tools that you can add to the Control Panel are called snap-ins, and other add-ons include ActiveX controls, links to Web pages, folders, taskpad views, and tasks.

Since EFS's user authentication process is performed when you log in to Windows, you can open any authorized encrypted file as long as the authorized user logs in to Windows. Therefore, EFS is actually transparent to the user. This means that if you encrypt some data, you will not have any restrictions on accessing the data, and there will be no hints, you will not feel it. However, when other unauthorized users attempt to access the encrypted data, they will receive an "access denied" error message to protect our encrypted file.

Tip:

If you want to use EFS to encrypt the file system, you must format the partition of the Windows 2000/XP/Server 2003 encrypted file to NTFS format.

Combat One: Practical EFS Folder Encryption

Step 1: Right-click to select the folder to be encrypted, select "Properties", and then click the "General" tab in the pop-up window. Click "Properties → Advanced" at the bottom, and in the "Compress or Encrypt Properties" column, check "Encrypt content to protect data".

Step 2: Click the "OK" button, go back to the file properties and click the "Apply" button. The "Confirm Property Change" window will pop up, "Use the app for this folder, sub "Folders and files" are marked with "√", and finally click the "OK" button to start encrypting files. In this way, all the files and subfolders that were originally created and newly created in this folder are automatically encrypted.

Step 3: If you want to cancel the encryption, just right click on the folder and uncheck the "Encrypt content to protect the data" check.

Tips

In the command line mode, you can also use the "cipher" command to complete the encryption and decryption of data. Enter "cipher/?" after the command character and press Enter to get specific The method of using the command parameters.

Combat 2: Right-click to easily encrypt and decrypt

Encrypt the file with the above method must be confirmed multiple times, very troublesome, in fact, just modify the registry, you can add "encryption" to the right-click menu of the mouse And the "decrypt" option, you can use the right-click to complete the relevant operations later. Click "Start → Run", enter regedit and press Enter, open the Registry Editor, navigate to [HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Windows/CurrentVersion/Exporer/Advanced], and click "New→DWORD" on the "Edit" menu. Value", then enter EncryptionContextMenu as the key name and set the key value to "1". Exit the registry editor, open the resource manager, arbitrarily select a file or folder on an NTFS partition, right-click to find the corresponding "encryption" and "decrypt" options in the right-click menu, click to complete the encryption /decryption operation.