I'm the 1/2 time IT person for a small company. We run a MS environment using a Server 2003 Domain Controller, MS Storage Server 2003, and Exchange 2003.
It finally occurred to them that I as an admin can pretty much see everything including sensitive personnel data.
I need a simple (average employee here is 55+) way to be able to store, share and email files between top level execs that is not viewable by someone with Domain Admin credentials. Ideally the solution would:
- Allow me to save files to an encrypted folder
- Allow me to send an encrypted file to another staff member and allow them to open it.
- Allow some form of key backup so when the forget their key or get hit by a bus the key is recoverable.
Any suggestions on how to do this in a manner that is simple for the end user to work with?