How to use Win7 with encryption

Many people may not know that Windows system comes with file or folder encryption function, this function can also protect some privacy files or folders on the computer. The following small series takes the Win7 system as an example to teach you how to use the built-in encryption tool to encrypt the Win7 folder.

Encrypting Files or Folders

Step 1: Open Windows Explorer or go to Computer (My Computer) and find the folder you want to encrypt.

Step 2: Then right-click on the file or folder you want to encrypt and click on “Properties”.

Encrypted Folder Design

Step 3: On the General tab, click “Advanced”. Check the "Encrypt content to protect data" checkbox, and when done, click “OK”.

Note the following five points during the encryption process:

1. Click “Start →Programs →Accessories", and then click “Windows Explorer&rdquo ;

2. Only files and folders on the NTFS partition volume can be encrypted. The files and folders on the FAT partition volume are invalid.

3. The compressed file or folder can also be encrypted. If you want to encrypt a compressed file or folder, the file or folder will be uncompressed.

4. Files marked as “system” cannot be encrypted, and files located in the systemroot directory structure cannot be encrypted.

5. When encrypting a folder, the system will ask if you want to encrypt its subfolders at the same time. If you select Yes, its subfolders will also be encrypted, and all subsequent files and subfolders added to the folder will be automatically encrypted when added.

Decrypting files or folders

Step 1: Open Windows Explorer.

Step 2: Right-click on the encrypted file or folder and click on “Properties”.

Special files after encryption

Step 3: On the "General" tab, click “Advanced”.

Step 4: Clear the “Encrypt content to protect data” checkbox.

Similarly, we should pay attention to the following issues during the process of decryption:

1. Click “Start →Programs →Accessories",Open“Windows Explorer&rdquo ;

2. When decrypting a folder, the system will ask if you want to decrypt all files and subfolders in the folder at the same time. If you choose to decrypt only the folder, the encrypted files and subfolders in the folder you want to decrypt remain encrypted. However, new files and folders created within the decrypted folder will not be automatically encrypted.

The above is the method of using file encryption and decryption! In the process of using, we may encounter the following problems, here are the following instructions:

1. The advanced button can not be used reason: The Encrypting File System (EFS) can only process files and folders on NTFS file system volumes. If the file or folder you are trying to encrypt is on a FAT or FAT32 volume, the advanced button does not appear in the properties of the file or folder.

Solution:

Convert the volume to an NTFS volume with a conversion utility.

Open a command prompt.

Type: Convert [drive]/fs:ntfs(drive is the drive letter of the target drive)

2. When opening the encrypted file, it will display <;reject access” Message Cause: Encryption The file system (EFS) encrypts the file using a public key certificate, and the private key associated with the certificate is not available on the computer. Solution: Find the private key of the appropriate certificate and use the Certificates snap-in to import the private key to your computer and use it locally.

3. The user encrypts the file based on NTFS, and the solution to the problem that the encrypted file cannot be accessed after reinstalling the system (Note: Be sure to back up the encrypted user's certificate before reinstalling Win2000/XP):

Step 1: Log in to the computer as an encrypted user.

Step 2: Click “Start →Run”, type “mmc”, then click “OK”.

Step 3: On the "Console" menu, click “Add/Remove Snap-in" and click “Add”.

Step 4: Under “Single Management Unit”, click “Certificate", then click “Add”.

Step 5: Click “My User Account”, then click “Complete> (Figure 2, if you encrypt the user is not an administrator, this window will not appear, go directly to One step).

Step 6: Click “Close", then click “OK”.

Step 7: Double-click “Certificate - Current User", double-click “Personal", and then double-click “Certificate”.

Step 8: Click on the “Forecast Purpose"

Step 9: Right-click on the certificate, point to “All Tasks, and then click “Export”.

Step 10: Follow the instructions of the Certificate Export Wizard to export the certificate and related private key in PFX file format (Note: It is recommended to use the “Export Private Key” method to export, so that the certificate is protected by password. In case other people steal it, in addition, the certificate can only be saved to the directory where you have read and write permissions).

4. Save the certificate and save the PFX file. After reinstalling the system, just double-click the certificate file under which user, and import this private certificate to access the folder encrypted by the original user of the certificate under the NTFS system (Note: Encryption on the NTFS partition backed up using the backup recovery function) Folders cannot be restored to non-NTFS partitions).

Finally, this certificate can also be used for the following purposes:

(1) Give different users access to encrypted folders.

Export my certificate in the same way as “export private key", and send the certificate to other users of this machine who need to access this folder. Then he logs in and imports the certificate to gain access to this folder.

(2) On its WinXP machine, restore access to the previous encrypted folder backed up with the "Backup Recovery" program.

Use the "Backup Recovery" program backup for the encrypted folder, then copy the generated Backup.bkf along with this certificate to another WinXP machine and restore it with the "Backup Recovery" program. Come out (note: only restore to NTFS partition). Then import the certificate to access the recovered files.