Re: Encryption

Roger

The file permission is set to everyone. I wasn't able to view the file at
first but after importing the key from the copied-to machine, I was able to
read it.

How come we can do it the this way, but not otherwise?

Scratching head.. ;)
Richard

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:eP00TTpgHHA.1008@xxxxxxxxxxxxxxxxxxxxxxx
When you restore the backup, by default it will attempt to
set the permissions as they existed on the source folder.
If these are only grants to non-builtin groups, then none of
them would be recognized on the machine where restored.

We need to make sure NTFS permissions are not in the way,
as the access denied message from lack of NTFS grant is the
same as is used for failures to decrypt.
And, we need to shift to speaking for files, not folders, as
per other recent reply post.

Roger

"Richard" <richardbee@xxxxxxxxxxx> wrote in message
news:ujaM3mngHHA.4064@xxxxxxxxxxxxxxxxxxxxxxx
Hi Roger

i encrypted a folder with a file in copied-to machine. Then I backup
using
ntbackup to copied-from machine.

Then I restore the folder to copied-from machine and I am not allowed to
view the file even from the copied-to machine.

This is really making me scratch my head :)

Richard


"Richard" <richardbee@xxxxxxxxxxx> wrote in message
news:%23uVacPlgHHA.3960@xxxxxxxxxxxxxxxxxxxxxxx
I can encrypt and decrypt on the copied-to machine. I will try the
reverse
way and see what happens.

Richard

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:OVT%23IckgHHA.3412@xxxxxxxxxxxxxxxxxxxxxxx
On the copied-to machine, can you encrypt and decrypt?
Can you move an encrypted file the other way, from the
copied-to to the copied-from of prior trial?

Roger

"Richard" <richardbee@xxxxxxxxxxx> wrote in message
news:ufJg0$jgHHA.4892@xxxxxxxxxxxxxxxxxxxxxxx
Hi Roger

I tried all options when importing the key (without password) and
still
can't open the folder.

What can be wrong?

Richard

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:O2SHRlPgHHA.284@xxxxxxxxxxxxxxxxxxxxxxx
copy via ntbackup is good; W2k to W2k is good (note that
XP and W2k do not share common algorithm unless you
take steps to degrade the XP).
The private key import for W2k I do not clearly recall at
this time. With XP one is presented with a choice to have
all accesses for use of the private key to need to prompt,
and that will not work - one has to import so that the key
can be used without user confirmation.
As you have transferred the files in valid fashion between
same OS machines, and assuming NTFS permissions are
not in the way (denial/failure message appears the same),
and you have examined the thumbprints such as with the
efsutil tool, things should be working if the private key
import was done correctly.


"Richard" <richardbee@xxxxxxxxxxx> wrote in message
news:OEIldGMgHHA.4064@xxxxxxxxxxxxxxxxxxxxxxx
Sorry missed a question.

Both are using Win2000 pro. I copied the file over over vpn
using
ntbackup.exe

Richard

"Roger Abell [MVP]" <mvpNoSpam@xxxxxxx> wrote in message
news:e4RvlVLgHHA.4552@xxxxxxxxxxxxxxxxxxxxxxx
What operating systems are involved?
How was the copy done?
When the EFS private key was imported into the account's
personal store, did you allow it to be used without prompting?


"Richard" <richardbee@xxxxxxxxxxx> wrote in message
news:u%23eIpN9fHHA.4980@xxxxxxxxxxxxxxxxxxxxxxx
Hi

I encrypted a folder and copied it to another computer. Then
I
exported
the
cert/key to the other computer. On that computer, I imported
the
cert/key
into the personal and trusted store for certificates. I am
not
able
to
read
the file in the folder.

I check the serial # and thumbprint of the both the cert and
it
tallys.

How do I overcome this issue?

Many thanks in advance
Richard




















.

Relevant Pages

  • Re: Encryption
    ... set the permissions as they existed on the source folder. ... i encrypted a folder with a file in copied-to machine. ... The private key import for W2k I do not clearly recall at ...
    (microsoft.public.win2000.security)
  • Re: Encryption
    ... i encrypted a folder with a file in copied-to machine. ... Then I restore the folder to copied-from machine and I am not allowed to ... I tried all options when importing the key and ... The private key import for W2k I do not clearly recall at ...
    (microsoft.public.win2000.security)