Implement Windows' encrypting file system
This article takes a deeper look into what it takes to roll out EFS in your organization.
The first question to ask yourself when looking at deploying EFS is whether or not to integrate it with a Microsoft PKI. This is a fundamental question that should be determined before moving forward. EFS does not require a PKI, but it does provide for EFS key recovery and makes it much easier to share encrypted files with other users because users' EFS public keys can be automatically published to Active Directory. Assuming that you are going to build a PKI or you already have one follow the steps here to configure your PKI for EFS.
[ Read more ]