Bvckup2 is one such software (great software, but only supports local network source/destinations). The trick is using an EFS specific API from Microsoft. There are certainly other apps that have successfully backed up EFS files without decrypting them.
MOZYPRO SUPPORT FILESYSTEMERROR2 MANUAL
While it might be possible for backup software with sufficient privileges to handle this key backup automatically, I'm certainly OK with having to do a one-time manual export of a recovery agent key to a file that could then be backed up along with all the other files.īut all of that is moot if the software refuses to backup EFS encrypted files at all. In a Windows domain scenario, the best solution would likely be backing up the recovery agent's private key (since the default recovery agent is the admin account on the first domain controller). Of course the EFS certificates would need to be backed up. ↪David Gugick I'm not expecting some magic solution. I would like to ask why you are using EFS, are you using it for more than one user, and whether Bitlocker encryption would suffice in its place since it's whole-drive encryption - and we support it? I know the team is looking at options and if something is found during their research, they will re-prioritize. At this point I do not think it would be realistic that it will be added in a time-frame you need it (if at all). The requirement, as you noted, has been pushed to 7.4, which is some time off. It's possible some of these other products do what you need, but I haven't come across that information. I saw your earlier post about MozyPro, but when I check other products like CrashPlan, Carbonite, Acronis, and Veeam, I see information which would suggest that it's not supported on those platforms either.
In my opinion, this adds additional complexity you may not want to absorb.
But the caveat here is that in order to restore files to a system other than the one that was used for the backup would require you had the certificates and would have to back them up. You can restrict the image to just the folders needed using the Exclude Option. The easiest way around this might be to perform an image backup instead. I assume if you're using EFS at the user level, you have a reason for doing so. Windows prevents such access, as you're aware. ↪Davison The solution is not an easy one for file / folder backups that need to access EFS encrypted files created by users other than the service account that is running the backup service.
0 kommentar(er)
