) If you try to view someone??™s encrypted files, you??™ll
get an ???Access is Denied??? error message, as shown in Figure 8-9.
Figure 8-9. Try to access someone else??™s encrypted file, and you??™ll get this error
476 | Chapter 8: Users and Security
Not even administrators can view files encrypted by other users. However, any
administrator can change any other user??™s password, and then subsequently
log in to that user??™s account and view (or unencrypt) any of his protected files.
This means that your files won??™t be totally secure unless you??™re the only administrator
on the machine.
There is a little-known side effect to this fact: if the owner of encrypted files
deletes his or her encryption keys, neither the user nor any administrator
will be able to read the encrypted files until the key is reinstalled. See ???Back
up your encryption certificates,??? later in this chapter, for more information.
The ins and outs of folder encryption
You can also encrypt a folder and all of its contents using the procedure for
files shown earlier. It gets a little more complicated, though, when you mix
and match encrypted and unencrypted files and folders, and it can be difficult
to predict what happens to the folders??™ contents.
Now, if a file in an encrypted folder is moved into an unencrypted folder, the
file becomes unencrypted. The exception is when you??™ve specifically
encrypted the file itself; in this case, the file remains encrypted, no matter
where you put it.
Pages:
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664