RE: Questions regarding EFS

At Saturday, March 04, 2006 12:38 AM, Sebastian "En3pY" Zdrojewski
wrote:

AFAIK the process for adding more encryptors to the EFS process is
more likely the process used to add a "Recovery Agent" for the user,
so that if the user account got corrupted, or an administrator forces
the user's password (both cases makes the encrypted files
unrecoverable) the Recovery Agent can recover the information. If I
remember well on XP the default user marked as Recovery Agent is the
Administrator user account, while on Server platforms this function
is not explicitly defined (that is: no recovery agent is defined for
a user's encryption certificate).

I may be wrong, but I am sure I have studied it this way.

Having seen Laura's posts in the past, I'd trust her hands-on experience
vs. your "studied it this way" any day.

Especially since a trivial Google landed the following:

How to Share Files Using Encrypting File System (via TechNet)
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sharefile
sefs.mspx

--
Devin L. Ganger Email: deving@xxxxxxxxxx
3Sharp LLC Phone: 425.882.1032 x 109
15311 NE 90th Street Cell: 425.239.2575
Redmond, WA 98052 Fax: 425.702.8455
(e)Mail Insecurity: http://blogs.3sharp.com/blog/deving/

---------------------------------------------------------------------------
---------------------------------------------------------------------------

Relevant Pages

  • Recovery Agent on Standalone System
    ... file while logged into the Administrator account and used that .cer file as ... all encrypted files somehow. ... If you delete all user file encryption certificates from a user account, ... had something to do with my Recovery Agent attempt. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: decrypt help...
    ... You create the recovery agent "before" you have ... problems working with encrypted files - not after you experience trouble. ... is that i had encrypted some files with that old user account. ...
    (microsoft.public.windowsxp.help_and_support)
  • R: Questions regarding EFS
    ... certificates into AD from an external source. ... the user's password (both cases makes the encrypted files ... unrecoverable) the Recovery Agent can recover the information. ... Administrator user account, while on Server platforms this function is ...
    (Focus-Microsoft)
  • Re: EFS Recovery Agents cant recover
    ... If I encrypt a file with a normal user account, I then see the user account ... as the owner and the DRA account as the Recovery Agent (Thumbprint match on ... Data Recovery Agent for the file. ...
    (microsoft.public.windows.server.general)
  • Re: Unable to Decrypt Files Previously Encrypted with same certifi
    ... Kerry ... >>> The password for the user account has been recently changed. ... >> a default recovery agent set up. ... >> It is a complicated service with many pitfalls to snag the unwary. ...
    (microsoft.public.windowsxp.general)