NTFS Explained - EFS Encryption - How it works?

In this video we will understand how encryption works in NTFS. We will take a look at EFS - the service that provides encryption capabilities to NTFS.
1:09 - Encrypting a file and observing internal changes in NTFS.
2:49 - Trying out the cipher.exe command
3:17 - Conceptual overview of EFS
5:25 - The role of Asymmetric encryption
10:42 - How to provide an user access to an encrypted file?
11:37 - The need for a recovery certificate
13:03 - Installing a recovery agent
14:59 - Summary

[@WikiSteve]

This is some stellar explanatory video! Shared with my students.

[@bu115hit]

Dude,
God bless your soul.
Most detailed explanation I have ever seen.
Please post more videos

[@aadhargupta4693]

Good Explanation

[@infosecurity5690]

Great tutorial 👍👍
Thanxxxxxxxxxxxx

[@jdgregson]

Great explanation, thanks! One question though. Does the user have to interact with the file again before the recovery certificate will be applied? My research indicates that an admin can add a recovery agent and recovery certificate and then force it to apply using "cipher /u". However, in my testing I could not get the recovery certificate to apply to any files until the user that originally encrypted the file opened it or viewed the encryption details.

[@johnhancock4048]

Does anyone know how to add a new EFS user to an entire folder instead of just 1 file at a time? Thanks

[@diyinfosec]

forum.notebookreview.com/threads/using-efs-and-cipher-exe-to-automate-adding-local-users-to-encrypted-files.726948/

[@abdulrahmanotb4170]

Dear, when I opened the properties of the file and wanted to secure the file the option is hided why I cannot click the check

[@diyinfosec]

Not sure of the exact issue. It might be that: File is already encrypted or EFS is disabled at Group policy level. Also, as a side note, in NTFS you can either encrypt or compress the file but not both. This is likely a design decision done not to cause lag in real-time file access.

[@informacionsocialbranders6723]

en español pd