The Encrypting File System (EFS) service provides the core file encryption technology that is used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications are unable to access encrypted files.

This service is installed by default and its startup type is Manual. When you select a file or folder to encrypt with EFS, the service will start, and its startup type is changed to Automatic.

When the EFS service is started in its default configuration, it logs on by using the Local System account.

The EFS service is dependent upon the following system components:

• Remote Procedure Call (RPC)
• DCOM Server Process Launcher
• RPC Endpoint Mapper