Configure Encrypting File System

Introduction

Welcome to the Configure Encrypting File System Practice Lab. In this module you will be provided with the instructions and devices needed to develop your hands-on skills.

Learning Outcomes

In this module, you will complete the following exercises:

• Exercise 1 - Manage EFS in a Windows Active Directory Domain

After completing this lab, you will be able to:

• Enable EFS on domain-joined Windows computers

Exam Objectives

The following exam objectives are covered in this lab:

• Understand encryption - Understand Encrypting File Systems (EFS)

Lab Duration

It will take approximately 60 minutes to complete this lab.

Exercise 1 - Manage EFS in a Windows Active Directory Domain

Encrypting File System (EFS) is a security feature built into Windows that helps secure personal folders and files on a workstation. This is in contrast with BitLocker Drive Encryption that encrypts the entire disk both system and data volume.

Managing EFS for Windows devices attached to an Active Directory Domain is easier as you can use Group Policy to control the network environment, and enhance the recovery of encrypted objects protected by this encryption technology.

In this exercise, you will learn how to enable a user account as an EFS recovery agent. An EFS recovery agent is a privileged user account that can decrypt folders and files that were left behind by network users. It is essential that an EFS recovery agent is designated first before allowing users to encrypt files on their workstations.