Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Allowing access to copy an encrypted file


  • Please log in to reply
8 replies to this topic

#1 califauna

califauna

  •  Avatar image
  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:47 PM

Posted 23 January 2024 - 06:23 PM

Hi all,

 

I have efs encryption enabled on my windows account. I would like to sync  copy of my data to Onedrive, but copy the files/drive in encrypted form, not decrypted form, so it's  never on Onedrive and never leaves the pc in decrypted form. The idea I have had is to install Goodsync synching software on another windows account on the same machine, and not install my efs certificate in that user account, so the software can only see an encrypted version of the files.

 

However, I notice when logging in to this second windows account myself and doing a little testing I can see the files but can't copy-paste any of them. When trying to copy one of them to, say the desktop, I get an error message saying I don't have permission to access the file.

 

How can I set up efs/file rights so that Goodsync has access to the files so it can sync them (perhaps running from a different account on the same machine as suggested), but not see them in decrypted form?


Edited by califauna, 24 January 2024 - 12:06 AM.


BC AdBot (Login to Remove)

 


#2 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,304 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:01:47 PM

Posted 23 January 2024 - 10:26 PM

What version of windows home or pro?

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#3 califauna

califauna
  • Topic Starter

  •  Avatar image
  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:47 PM

Posted 23 January 2024 - 11:08 PM

Windows 10 Pro.

 

I am an admin on my usual account. I can set up the the other account as admin or user.



#4 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,304 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:01:47 PM

Posted 23 January 2024 - 11:17 PM

You can try but that likely won't work as that's how encryption works.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#5 califauna

califauna
  • Topic Starter

  •  Avatar image
  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:47 PM

Posted 08 March 2024 - 03:36 AM

Bump (unsolved).

 

I can't see why in theory this shouldn't be possible. There's nothing physically preventing software copying the encrypted contents of a section of a disk, and thus a file (even if the software sees the thing it is copying as gibberish), allowing that file to later be decrypted by software running in an account which does have the EFS key installed.

 

If this is not possible on Windows for some reason, can anyone offer an explanation (some kind of EFS policy? what this policy is, if it can be removed, why it can't be removed, etc)?


Edited by califauna, 08 March 2024 - 07:11 AM.


#6 wee-eddie

wee-eddie

  •  Avatar image
  • Members
  • 3,966 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ayr, Scotland
  • Local time:02:47 PM

Posted 08 March 2024 - 04:23 AM

I always thought that some encryption programs, also blocked the copying of a file, as added security.


Edited by wee-eddie, 08 March 2024 - 04:24 AM.


#7 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,304 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:01:47 PM

Posted 08 March 2024 - 07:48 AM

It's also tied to the encrypting user and not just the key.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#8 califauna

califauna
  • Topic Starter

  •  Avatar image
  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:02:47 PM

Posted 21 March 2024 - 09:48 PM

Anyone able to answer this question?

 

There is some speculation above about encryption programs blocking copying of files. Windows EFS isn't exactly a 'program' as such though.

 

There's also a claim that I can't achieve copying an encrypted file from a different user account, but no explanation is given for why this should be the case. Also, in my experience copying encrypted files isn't usually blocked like this. Anyone able to confirm/correct this in such use cases, and maybe provide an explanation?



#9 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 35,304 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:01:47 PM

Posted 21 March 2024 - 10:01 PM

I provided you one if any user could decrypt a file providing the secret key than that eoukd defeat the purpose of encryption.

That's how it works.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users