Understanding how EFS works is the key to securing your environment. Here are a few resources to get you started.

MICROSOFT
The Microsoft article "Best Practices for Encrypting File System"

The Microsoft Windows 2000 Server Resource Kit
The Microsoft white paper "Step-by-Step Guide to Encrypting File System (EFS)"

SECURITY ADMINISTRATOR
You can obtain the following articles from Security Administrator’s Web site at http://www.secadministrator.com.

John Howie
"Securing Win2K with Certificate Services," September 2001, InstantDoc ID 22113

Randy Franklin Smith
Access Denied, "Recover Files Encrypted with EFS," October 2001, InstantDoc ID 22318

Access Denied, "Using EFS with and Without AD," October 2001, InstantDoc ID 22319

Ken Spencer
"Using Win2K Certificate Services to Configure a Standalone CA, Part 2," February 2002, InstantDoc ID 23654

"Using Win2K Certificate Services to Configure a Standalone CA, Part 1," January 2002, InstantDoc ID 23373

WINDOWS & .NET MAGAZINE
You can obtain the following articles from Windows & .NET Magazine’s Web site at http://www.winnetmag.com.

Robert McIntosh
Windows 2000 Ready, "Windows 2000’s Encrypting File System," January 2001 Web Exclusive, InstantDoc ID 19721

Mark Russinovich
NT Internals, "Inside Encrypting File System, Part 2," July 1999, InstantDoc ID 5592

NT Internals, "Inside Encrypting File System, Part 1," June 1999, InstantDoc ID 5387