EFS in Windows is connected with user (only user has acces to certificate to decrypt data). This should still be valid for 2008 http://www.mywebhostingblog.net/aspnet-web-hosting/secure-ms-sql-2005-database-with-efs-encryption/