I would like to enable EFS on a shared folder located on a server from a client computer.
I have a workstation running WinXP Pro SP2 fully patched and up-to-date named 'Workstation' and a server running Win2003 SP1 fully patched and up-to-date named 'Server' both members of a native 2003 Active Directory structure.
I have change access on a shared folder (ServerFolder mapped to Z:) and I want to create a subfolder (Z:Encrypted) with the encrypted attribute.
EFS is allowed on the server. I can encrypt a folder locally on the server.
Without trusting delegation on the server I get the following error message on the Workstation: Z:Encrypted 'The requested operation requires delegation to be enabled on the machine.' I agree
When I setup a trust like described by MS (http://technet2.microsoft.com/WindowsServer/en/library/3eaa0062-4759-4b3e-bb7d-c2531e7452b91033.mspx):
Trust this computer for delegation to specified services only - Use Kerberos Only
Service Type: cifs , Computer: Server
Service Type: protectedstorage, Computer: Server
I still get the same error message 'The requested operation requires delegation to be enabled on the machine'.
Do I forget anything (patience for replication, reboot...)? Does anyone have some clue? any tip?
Thank you in advance