none
DFS-R & Encryption

    Question

  • I understand that DFS-R doesn't work with EFS but it does with BitLocker.  What about application level encrypting?  We are looking to implement a write-once, read many file replication solution.  

    In my scenario, an end-user web application writes files to the local disk.  These files are encrypted within the application before writing to disk (exact methodology unknown).  I was thinking DFS would be ideal for this but need clarification on the limitations surrounding file level encryption on an DFS-R implementation.

    The back-end AD schema is 2003 R2, running at 2000 Mixed mode functional level.  The file hosting servers will be either 2008 R2 or 2012 pending further research.

    Thanks in advance.

    Friday, June 21, 2013 6:57 PM

Answers

  • Hi,

    DFS Replication does replicate files that are encrypted by using non-Microsoft software, but only if it does not set the FILE_ATTRIBUTE_ENCRYPTED attribute value on the file.

    See:

    http://technet.microsoft.com/en-us/library/cc773238(v=ws.10).aspx


    TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tnmff@microsoft.com.

    • Marked as answer by BlitzSonik Monday, June 24, 2013 12:27 PM
    Monday, June 24, 2013 12:08 PM
    Moderator

All replies

  • Hi,

    DFS Replication does replicate files that are encrypted by using non-Microsoft software, but only if it does not set the FILE_ATTRIBUTE_ENCRYPTED attribute value on the file.

    See:

    http://technet.microsoft.com/en-us/library/cc773238(v=ws.10).aspx


    TechNet Subscriber Support in forum |If you have any feedback on our support, please contact tnmff@microsoft.com.

    • Marked as answer by BlitzSonik Monday, June 24, 2013 12:27 PM
    Monday, June 24, 2013 12:08 PM
    Moderator
  • Excellent!  TY.  I read that FAQ but some how missed that.
    Monday, June 24, 2013 12:27 PM