Re: Which EFS certificate used?

Take a look at this article: http://technet2.microsoft.com/windowsserver/en/library/04122595-5d30-4b19-945a-b6e4bb33bd6f1033.mspx?mfr=true You are looking for registry:

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\EFS\CurrentKeys that contains certificate hash that is used for encryption.

Hope this helps

Martin



Marv Sun wrote:
Folks,

If my workstation (running XP) has multiple certificates that are qualified for EFS encryption, which one will be selected when a file is enabled for EFS? It seems there are no choices for user to select manually.

Thanks in advance for your kind feedback.

Marvin
.

Relevant Pages

  • Re: Please help : Adminstrator password consistancy ????
    ... PS some common encryption utilities are listed here: ... Configure the BIOS to require a password, ... > sure anyone who needs to boot from floppy knows the password. ... > You could also use Windows XP with EFS encryption, ...
    (microsoft.public.win2000.security)
  • Re: Administrator Access
    ... The only possible way is encryption of the files and even then it would need ... W2K offers EFS encryption, ... administrator on a non domain machine and the original administrator account ... Even if file are EFS encrypted on a server share they may be ...
    (microsoft.public.win2000.security)
  • Re: XP Pro File Encryption
    ... If the user has exported/deleted his private key, ... that the EFS encryption is only as strong as his password ... > when the user logs on and automatically encrypted when the user logs off. ... > like the way PGP or Winrar file encryption works. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: NTFS Encryption, Old Master, Fresh Install
    ... > If EFS encryption is involved, ... > forever lost unless 1) you previously exported and ... > saved the encryption key from the encrypting account, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: can not decrypt
    ... restorable copy of the old SP install ... that was made after you started using EFS encryption ... have the exported EFS keys from the old XP install ...
    (microsoft.public.windowsxp.security_admin)