Re: Unable to decrypt some files

From: Ondrej Sevecek (ondrej.sevecek@centrum.cz)
Date: 11/26/02 

From: "Ondrej Sevecek" <ondrej.sevecek@centrum.cz>
Date: Tue, 26 Nov 2002 07:45:21 +0100

no way if the computer wasn't in domain, I think. Default EFS recovery agent
private key has been lost, so you can try to break 3DES. I suppose, if it
was possible, it would made some sec.hole into MS.

"Hassan Karawya" <hassankarawya@hotmail.com> wrote in message
news:1703301c29515$4c94fec0$89f82ecf@TK2MSFTNGXA01...
> Hi ...
> A user without administrative privileges re-installed
> windows 2000 over previous one after encrypting some
> files, so the local administrator profile was changed and
> any one including administrator never be able to open
> these files .. pls help us ASAP3

Relevant Pages

  • Re: How secure is personal certificate store in W2K?
    ... > security of the private key associated with the certificate. ... > because the private key is encrypted with the user's password. ... My requirement is to protect very sensitive data even against Administrators ... Administrator sets up COM+ application. ...
    (microsoft.public.platformsdk.security)
  • Re: restore window blank
    ... Unless, by messing with the administrator, we have just lost them from ... professional computer repair shop since ... MS-MVP Windows - Shell/User ...
    (microsoft.public.windowsxp.basics)
  • Re: Recovery agent problem ????
    ... Administrator doesn't have ACL access to the file. ... The certificate is not in the Administrator's user ... certificate and its corresponding private key. ... > If in the generated file by user1 I add user2 as other ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How secure is personal certificate store in W2K?
    ... If the Administrator can run the application which can ... >> because the private key is encrypted with the user's password. ... > store a certificate with private key without password. ... > (only COM+ account can read or decrypt this data). ...
    (microsoft.public.platformsdk.security)
  • Re: EFS
    ... by default your recovery agent is your domain administrator. ... Did you try to export the private key of your recovery agent after you ... > Is this the local administratoror the domain administrator. ...
    (microsoft.public.security)