I just finished installing all the needed servers/services on a single test server in a lab, and am finding it difficult to determine the correct steps to perform for file share encryption.
Is there a best practice guide or a checklist somewhere? I need steps on what needs to be done for:
- users/groups
- computers/shares
- what kind of keys should be used and where
- setting up the policies to use the correct keys for the correct users
for example if I have 2 AD groups, each with 3 users like so:
- HR
-HRUser01 (Manager)
-HRUser02
-HRUser03
- FINANCE
-FINUser01 (Manager)
-FINUser02
-FINUser03
With folder structure like this:
data\HR\Word All HR users can decrypt
\Excel and encrypt Office folders
\Personnel Only HRUSer01 (Manager) can decrypt and encrypt
\FIN\Word All FIN users can decrypt
\Excel and encrypt Office folders
\Payroll Onlu FINUser01 & HRUser01 can decrypt and encrypt
The Administrator help document is hard to follow and does not give a big picture overview of the process to fully understand what needs to be done.
Someone really needs to buld a Suggested test document to wlaks a user through the various steps and common real-world scenarios.
I appreciate any help anyone can provide
This thread was automatically locked due to age.