Zone security is a system that enables you to divide online content into categories, or zones. You can assign specific Web sites to each zone, depending on how much you trust the content of each site. The Web content can be anything from an HTML or graphics file to a Microsoft® ActiveX® control, Java applet, or executable file.
A folder must be on NTFS to be encrypted using EFS.
Found on the ScanState Syntax document at microsoft docs site."Causes the ScanState command to copy the files in the encrypted format. The files will be inaccessible on the destination computer until the EFS certificates are migrated. EFS certificates will be automatically migrated; however, by default USMT fails if an encrypted file is found, unless you specify an /efs option. Therefore you should specify the /efs:copyraw option with the ScanState command to migrate the encrypted file. Then, when you run the LoadState command, the encrypted file and the EFS certificate will be automatically migrated.For example:ScanState /i:migdocs.xml /i:migapp.xml \server\share\migration\mystore /efs:copyrawImportantAll files must be encrypted if the parent folder is encrypted. If the encryption attribute on a file inside an encrypted folder has been removed, the file will be encrypted during the migration using the credentials of the account used to run the LoadState tool. For more information, see Migrate EFS Files and Certificates."
When using the Windows Encrypted File System (EFS), files are encrypted at the user level, meaning that only the user who encrypted the file can access it unless permissions are explicitly granted to others. EFS uses symmetric encryption with a randomly generated file encryption key, which is then protected by the user's password. Additionally, EFS seamlessly integrates with the Windows operating system, allowing users to encrypt files through the file properties dialog without needing additional software. However, it's important to back up encryption keys, as losing them can result in permanent data loss.
EFS stands for Encrypted File System and is used to encrypt folders and files in Windows XP or Vista.This encryption works ONLY when using the Windows NTFS file system!
Access rights to the EFS (Encrypting File System) features and functions on a server are typically granted to users with specific permissions, such as administrators or designated security personnel. These users can manage encryption settings, access encrypted files, and assign rights to other users. Additionally, individual users can have access to their own encrypted files if they have the appropriate decryption keys. Access controls can vary based on organizational policies and the server's configuration.
To grant additional users access rights to your EFS (Encrypting File System) encrypted folders and data files, you need to right-click the encrypted folder or file and select "Properties." Under the "General" tab, click on "Advanced," then select "Details" to manage permissions. You can then add users by clicking "Add" and specifying the user accounts you wish to grant access to. After adding the users, ensure you also share the encryption key with them to enable access to the encrypted data.
Unless you have a backup of your user profile folder before you deleted the EFS certificate, your files are gone.
Encrypting Files System (EFS)
When you move an encrypted file from a Windows system to a Windows 8 or Windows 7 Home Premium computer, the file cannot be decrypted unless the destination system supports the same encryption method and the user has the appropriate decryption key or certificate. Specifically, if the file is encrypted using Windows' Encrypting File System (EFS) and the Home Premium edition does not support EFS, the file will remain inaccessible. Users should ensure they have a backup of the encryption keys or certificates to access the file on a compatible system.
Windows Bit Locker only encrypts individual drives or partitions. Encrypting File System (EFS) however does allow for individual files to be encrypted but for the most part there are many other encryption software tools that allows more diverse options.
EFS Encrypting File System
see http://support.microsoft.com/kb/941674