Windows 10: Problems with EFS on a shared folder of a domain file server

hi, I have a physical machine with Windows 2019 srv std on which, using the Hyper-virtualization platform, I have 2 servers with Windows 2022 std server operating system: one acting as a domain controller and the other acting as a file server.On the file server I have a shared folder that I encrypted with EFS using a single certificate that I generated on the server itself with the Administrator user I didn't create any CA.Then I exported the certificate with the private key and for all users I accessed with their domain credentials in remote desktop on the file server and installed the expo

:)

 

?? How do I PW protect Folders in windows

hmmm?
Sharing files and folders overview You can share the files and folders stored on your computer, on a network, and on the Web. The method you choose depends on whom you want to share files with, and what computer they will use to access the files.

When you share files or folders, they are not as protected as they are when you do not share them. People with access to your computer or your network might be able to read, copy, or change files that are in a shared folder. You should always be aware that the files and folders that you share are available to other people and be sure to monitor your shared files and folders on a regular basis.

Important

If your computer is not joined to a domain, you can use the Network Setup Wizard to automatically turn file and printer sharing on or off. To start the Network Setup Wizard, click Start, click Control Panel, click Network and Internet Connections, and then click Network Setup Wizard.
If you both use the same computer

You can put the files you want to share in the Shared Documents folder. Files stored in the Shared Documents folder or its subfolders are always available to other users on your computer.

Step-by-step procedure
Note

If you are connected to a network domain, the Shared Documents, Shared Pictures, and Shared Music folders are not available.
If both computers are on the same network

You can share a folder or drive on your computer with others on the network. You can also control whether the files in the shared folder can be modified by other users.

If your computer is connected to a network domain, use this procedure:

Step-by-step procedure
If your computer is connected to a workgroup, use this procedure:

Step-by-step procedure
Note

If you are connected to a network domain, you will need to set the Access control for the folder or drive after sharing it. For more information, go to To set, view, change, or remove file and folder permissions.
If you want to share your files online

You can publish pictures and documents on the Web using the Web Publishing Wizard. The files will be stored in a private, online folder that you manage.

Step-by-step procedure

If you don't want others to access your files

You can prevent other users from accessing your folders and the files they contain. When your computer is connected to a domain, this is called setting permissions for your file or folder. When your computer is connected to a workgroup, this is called making your folders private.

If your computer is connected to a network domain, use this procedure:

Step-by-step procedure
If your computer is connected to a workgroup, use this procedure:

Step-by-step procedure

'HELP' it can be your friend *Smile

 

File sharing help

So, I just got finished setting up Windows 2016 Data Center on my home server (bare metal).
I have everything setup and able to join the Domain with my computers ( windows 10 pro).
My problem is I am unable to get my laptop ( windows 8.1) and my home theater system ( both not on the domain) to see my shared folders on the server.
Have tried turning off firewall, turning on file sharing and right clicking on the folders and sharing with everyone from the server.
Does anyone know a way to do this or will I be unable to share those across the network without them being on the domain.

Thanks in advance,

 

File sharing help

On the server click Start, type Computer Management or right click start and choose Computer Management from the utility menu.

Bring up the management console, select Shared Folders > Shares.

Are your shares in there? If so what permissions did you give them. Permissions are given to domain users and domain groups when you setup a Windows domain. Now that doesn't mean that other systems have to be joined to the domain but might need to access by using credentials with the username "domain\username" or "domain\security group".

If you want your home theater system to see the shared folders, you need to setup the share permissions to also include Everyone. While this is strongly not suggested in a domain environment, sometimes it is also tough to avoid. Seeing that it appears you're doing this as a home lab type of setup you should be alright.

Can you access the server via UNC path on your laptop? Open File Explorer, in the address bar type: \\your-server-name

If so can you see any shares? Does it ask for a password if you try to access the server and/or shares you can see? If you need your home theater system to see the folder you need to give it open access.

To confirm share settings, right click the folder you want to share, click Properties. Click the Share tab, then click the Advanced Sharing button. Check the box to "Share this folder". Next click permissions and confirm Everyone is checked with at least Read permissions.

If you will need more permissions then you can choose to do so here with the simpler permission options before having to dig into NTFS permissions. Hopefully read-only will get the job done for Everyone and you can select a security group or specific user or domain admin to have Change and/or Full Access permissions to the share over the network.

Let me know if that helps. *Toast :toast: