You have an external USB hard drive with a folder
D:\Work\encrypted with EFS, and you want to copy a few files from it to your colleague Bob's computer
You plug the external USB hard drive on his computer
You open the
.pfxfile on his computer, unlocking the files (Should I use the
.pfxfile created while encrypting or another file?)
You can copy the data to Bob's computer, and even uncheck the Encrypt contents to secure data on his computer, thus he will be able to use the file even if he doesn't have the encryption key anymore
Once the files are copied, you don't want Bob to keep full access to your hard drive anymore (especially
D:\Private\), how to remove the authorization granted when opening the
.pfxfile on Bob's computer?
How to handle such a situation?
Of course, a power user could have a mechanism to copy secretly the PFX file (in the same way a power user could have a key logger when you enter a password). But still, removing the authorization granted by a PFX file could prevent all non-power-users to have the data if they just plug the disk on their computer. That's enough for my requirements.