Re: EFS - Recovery agent

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/28/05


Date: Sun, 27 Mar 2005 17:49:37 -0700

That info you quote is so for Windows 2000.
In Windows XP there is no default recovery agent for
a stand alone system.
You have not mentioned your version of Windows Pro.

Also, the account must have NTFS permissions on the
file to be able to decrypt it.

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"barabba" <barabba72@hotmail.com> wrote in message
news:8ec33ba5.0503271514.1fa0dd3a@posting.google.com...
> Hello all,
>
> Microsoft says, in its Windows 2000 Resource Kit, what follows:
>
> QUOTE
> =====
> By default, the recovery agent account is the highest-level
> Administrator account. On a stand-alone computer, this is the local
> Administrator.
> END QUOTE
> =========
>
> I encrypted a file in a Windows Pro standalone using a regular user.
> Then I logon as local administrator but was denied access to the file.
> So why the local admin cannot decrypt the file ? Shouldn't it be by
> default granted such right ?
>
> Thank you for your time. I'm a bit confused about this.
>
> Bar


Relevant Pages

  • Re: How to get full access to all contents?
    ... > "Roger Abell" wrote in message ... >> Administrator is a recovery agent only in Windows 2000. ... >>> The user who was designated as a recovery agent is the Administrator. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to get full access to all contents?
    ... Administrator is a recovery agent only in Windows 2000. ... > An error occurred applying attributes to the file: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to get full access to all contents?
    ... "Roger Abell" wrote in message ... > Administrator is a recovery agent only in Windows 2000. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to get full access to all contents?
    ... I'm inclined to agree, Roger. ... > Administrator is a recovery agent only in Windows 2000. ... >> The user who was designated as a recovery agent is the Administrator. ...
    (microsoft.public.windowsxp.security_admin)
  • =?Windows-1252?Q?Re:_Desktop_icons_won=B4t_save?=
    ... icons popped right into the spaces they were supposed to. ... That info is for the 28 folder views, size, position, etc. that Windows ... I can only assume that if you click the Reset All Folders button in ...
    (microsoft.public.windowsxp.help_and_support)