locked
EFS on Network Share RRS feed

  • Question

  • Hello Everyone,

    I have a problem with encrypting documents on file share.

    We have clients home folders redirected to server. EFS on local machines is working like a charm

    When we try to encrypt files on the remote server we get error: "the requested operation cannot be completed. the computer must be trusted for delegation and the current user account must be configured to allow delegation."

    We managed to configure computer account to be trusted for delegation. We have 2008r2 domain controllers and forest level, so we dont have check box on user account with allow delegation settings. I have found Microsoft documentation that says: "

    The user must be logged on with a domain account that can be delegated.

    Note Use the Active Directory Users and Computers snap-in to configure delegation options for both users and computers. To trust a computer for delegation, open the computer’s Properties sheet and select Trusted for delegation. To allow a user account to be delegated, open the user’s Properties sheet. On the Account tab, under Account Options, clear the The account is sensitive and cannot be delegated check box. Do not select The account is trusted for delegation. This property is not used with EFS."

    Tnx for help in advance...

    Vuk 

    Monday, July 16, 2012 9:11 AM

All replies