EFS encryption on network share 1

[snootalope]

We use Windows Server 2003 Standard Edition here (and the standard may be the issue)

I'm attempting to apply encryption (properties of the file, advanced, encrypt...) to a file on a mapped drive/network share. I'm a domain admin, full rights to the directory I'm trying to apply the encryption in, as well as an admin on the server the file actually resides on.

So, I try and apply the encryption and get:

"An error occured applying attributes to the file:"

(File Path)

"The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation."

My machine is set to "Trust this computer for delegation to any service (Kerberos Only)" in the machine properties in ADUC.

I found a reference that I need to set the delegation for my user account as well, but I can't find where this is done. I check the account tab of my user account, but there isn't anything there stating trust this account for delegation.

Is this possible with windows 2003 standard? If so, what am I missing here?

 

[itsp1965]

You didn't mention anything regarding certificates in your thread. Have you checked this article

http://www.windowsecurity.com/articles/Implementing-EFS-Windows-Server-2003-Domain.html

 

[snootalope]

ah.. one thing I missed that your link gave me was "the remote server must be trusted for delegation.." I was just enabling delegation on my PC instead of the remote storage server. That did the trick.

Thanks!