When I try to apply EFS for the Windows system partition, there's many files error with "access denied". How to override the restriction?
Add a comment
|
1 Answer
You cannot encrypt Windows system files with EFS. The encryption key is tied to your user account and only unlocked after boot & login – but how would you unlock it for booting the OS, if the OS needs to be decrypted first?
If you need full disk encryption, use BitLocker instead. (The TPM requirement can be disabled.) Alternatively see if VeraCrypt supports OS drive encryption for your version.
answered Jul 3, 2017 at 15:03
-
Bitlocker is a pain on Windows 7 without TPM: superuser.com/questions/1225011/…– SamJul 3, 2017 at 15:07
-
@Sam - You cannot accomplish FDE with EFS, end of story, Bitlocker is the FDE solution for Windows– RamhoundJul 3, 2017 at 17:43