Backup fails due to files being encrypted

ewok wrote:

Encryption shouldn't be a problem since all the backup job sees is data, it doesn't care what's in the file. My guess is that whatever is doing the encryption is giving the output file a set of permissions that prevent the NAS from reading the file. When you decrypt the file, you're probably writing the file with permissions that allow the NAS to read. The first thing I'd do is compare the permissions on an encrypted file to that of a decrypted file.

I compared two files, one encrypted and one unencrypted and see no descripencies between the permissions. I then found this: http://technet.microsoft.com/en-us/library/bb457116.aspx#EFAA

Scroll down to Considerations for Sharing Encrypted Files and look specifically at #3.

Namely:

3.EFS sharing requires that the users who will be authorized to access the encrypted file have EFS certificates. These certificates can be located in roaming profiles or in the user profiles on the computer on which the file to be shared is stored, or they can be stored in and retrieved from Active Directory.


I did save the self-signing certificate from the NAS to the root folder for IE which gets rid of its annoying warning upon login. I also exported it from there and tried to import it into the personal folder so I could add the NAS's certificate as a user allowed read access. Unfortunately, even though it shows successful on the import the certificate is never shown under the user profiles. It's most like due to the NAS not being a legit user in the Active Domain.

Any other ideas? I'm beginning to think the best approach is to move My Documents to a folder on C drive and repoint all the email archives to a non-system-root folder for Outlook. I'm unable to change the group policies but this would side step the encryption for all but the Desktop.