Re: EFS

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 11/18/05


Date: Thu, 17 Nov 2005 18:23:46 -0700


"Ponch" <wavdp@belgacom.net> wrote in message
news:%23fv2w5d6FHA.3120@tk2msftngp13.phx.gbl...
> Hello,
>
> I want to implement efs on some dir's on my laptops
> The laptops are part of a windows2003 domain (sbs2003)
> When i encrypt folders on my laptop and i look to the encryption details
> of a file in that encrypted directory, i can see that the Administrator is
> Data Recovery Agent.
> Is this the local administrator(laptop) or the domain administrator.
> If i want to export the private key from the domain administrator via the
> certificated export wizard, i can only export the certificate and not
> the private key from de administrator
> I can only choose => no do not export the private key.
> i cannot select yes, export the private key.
>
> Suggestions?

To clarify from Brian's post . . .

log in as "the" administrator however it may have later been
renamed at the original DC that promoted to define the domain.

>
> Good articles about EFS ( XP, 2003)
>



Relevant Pages

  • EFS
    ... The laptops are part of a windows2003 domain ... When i encrypt folders on my laptop and i look to the encryption details ... Is this the local administratoror the domain administrator. ... If i want to export the private key from the domain administrator via the ...
    (microsoft.public.windows.server.general)
  • EFS
    ... The laptops are part of a windows2003 domain ... When i encrypt folders on my laptop and i look to the encryption details ... Is this the local administratoror the domain administrator. ... If i want to export the private key from the domain administrator via the ...
    (microsoft.public.windows.server.general)
  • EFS
    ... The laptops are part of a windows2003 domain ... When i encrypt folders on my laptop and i look to the encryption details ... Is this the local administratoror the domain administrator. ... If i want to export the private key from the domain administrator via the ...
    (microsoft.public.security)
  • Re: Data Recovery Agent
    ... Also, the thing I was able to get out of the FAQ is that I must designate a DRA BEFOREHAND I begin encrypting docs, is this correct? ... Also, my current user account is already an Administrator, so is it still necessary for me to log in as Administrator proper? ... > administrator has a certificate that will enable him EFS function. ... > administrator (e.g. create an empty text file and encrypt it; ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Event ID 6032
    ... And no WebDAV share on the SBS partition that houses the My Docs folder, ... such as the users that are allowed to decrypt the file. ... by default the Administrator account should be the recovery agent. ... to encrypt, you should just be able to un-click the box to decrypt. ...
    (microsoft.public.windows.server.sbs)