- Skip to content
- Skip to search
- Skip to login
This content has been archived, and is no longer maintained by Indiana University. Information here may no longer be accurate, and links may no longer be available or reliable.
The Encrypting File System (EFS) is a component of the NTFSfile system on Windows 2000, Windows XPProfessional, and Windows Server 2003; it allows you to encrypt filesstored on your local computer or on a Windows 2000 or 2003 server. Theencryption and decryption process requires either a private key storedin your profile, or a master recovery key stored by a designated"recovery agent"; for more on the master recovery key, see ARCHIVED: At IU, how can I recover Windows encrypted files without a privatekey? The private key is protected with yourpassphrase; without access to the master recovery key,therefore, anyone who gains access to the EFS encrypted file wouldneed to know your passphrase to turn the encrypted data into usableinformation.
Important: As of April 8, 2014, Microsoft nolonger supports Windows XP with security updates. To ensure thehighest security standards, the UITS Support Center no longerregisters Windows XP devices to the IU network. UITS stronglyrecommends that you look into the options for replacing or upgradingyour Windows XP computers for full compatibility with IU systems. SeeAbout end of life for Windows 8.0, 7, Vista, and XP.
To encrypt a file or folder:
- From the Start menu, select Programs or All Programs, then Accessories, and then Windows Explorer.
- Right-click the file or folder you want to encrypt, and then click Properties.
- On the General tab, click Advanced.
- Check Encrypt contents to secure data.
- If you have chosen to encrypt a single file, you can also encrypt the folder that contains it. In the
Encryption Warningwindow, select Encrypt the file and the parent folder. All files created in the encrypted folder will now be automatically encrypted. - If you encrypt a folder instead of a single file, you can encrypt all the contents of the folder as well. Select Apply changes to this folder, subfolders and files.
- If you have chosen to encrypt a single file, you can also encrypt the folder that contains it. In the
To decrypt a file or folder:
- From the Start menu, select Programs or All Programs, then Accessories, and then Windows Explorer.
- Right-click the file or folder you want to decrypt, and then click Properties.
- On the General tab, click Advanced.
- Clear the Encrypt contents to secure data checkbox, and then click OK.
When you decrypt a folder, you must decide whether to decrypt thefolder only or to decrypt the folder and all files and subfolderscontained within it. If you choose to decrypt the folder only, thefiles and subfolders within the folder remain encrypted. However, whenyou add new files and subfolders to the folder, they will not beautomatically encrypted.
This information was adapted from the Microsoft article Encryptor decrypt a folder or file.
Related documents
This is document augh in the Knowledge Base.
Last modified on 2018-01-18 15:39:48.
