What are some best practices to follow when utilizing the Encrypting File System?

Question

What will be an ideal response?

Answer 1

The best practices for using EFS as recommended by Microsoft include the following:
* Move files for encryption into specifically designated folders flagged for encryption. This is easier than managing encrypted files that are scattered in different locations. When a user needs to ensure a file is encrypted, she only needs to move that file to the designated folder location, to make sure it is encrypted.
* It is safer for an application to work on a file in an encrypted folder rather than to work on a file that is individually encrypted and not in an encrypted folder. When working on the individually encrypted file, the application may not ensure the saved result is encrypted. In contrast, if the file is in an encrypted folder, it will stay encrypted after it is saved by the application.
* Workstation users and server administrators should consider encrypting the My Documents or Documents folders on their systems (\Users\accountname\My Documents or \Users\accountname\Documents).
* Users and server administrators should frequently export certificates and private keys to portable media and store the media in a secure place.