RE: Is W2K EFS trivial to crack?

From: Frank Heyne (fh@rcs.urz.tu-dresden.de)
Date: 03/18/02


From: "Frank Heyne" <fh@rcs.urz.tu-dresden.de>
To: David.Potesta@vw.com, security-basics@securityfocus.com
Date: Mon, 18 Mar 2002 20:19:50 +0100

On 17 Mar 2002, at 8:32, Potesta, David wrote:

> Unless the laptop is a DC, the user account would not be on that machine so one
> would be unable to change the EFS owner's password.

1.
Not all laptops are members of a domain, and I am not aware of
Microsoft saying that EFS does only work for domain members.

2.
There might be difficulties logging on with a domain account when you
are on the road and not connected to a network (logon script does not
run, for instance).

Frank Heyne



Relevant Pages

  • Re: NTFS File Encryption Question
    ... I am certainly no expert on EFS and the XP implementation, ... know it is tied to the SID of the user account in question. ... >>>What do I need to do to be able to access these files on my laptop? ...
    (microsoft.public.windowsxp.general)
  • RE: Is W2K EFS trivial to crack?
    ... Unless the laptop is a DC, the user account would not be on that machine so ... Is W2K EFS trivial to crack? ... EFS-encrypted files scenario, someone could just reset the administrator ...
    (Security-Basics)
  • Re: Domain vs Wkgrp chngd VB app,now launchs Off.Instl
    ... I was making changes and testing on the laptop at work ... Since I have a 10bT network at home, I thought I would make my life easier ... Office 2000 Installer. ... When a new user account ...
    (microsoft.public.vb.general.discussion)
  • Re: File Folders on network computers have wrong names
    ... User Account Name: Eberle ... Lynn is the laptop that is below it in the network. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Admin password wont work after restore point
    ... EFS is a bit trickier than it looks. ... I ended up booting the laptop in safe mode and resetting the admin password. ... whether the user was a local user account or a domain user even if they have ... The restore went ok, but now it doesn't like the password for the admin ...
    (microsoft.public.windowsxp.security_admin)