Re: Denied Access to Encrypted Files After You Change Your Password

From: Jonathan Man (jonathan.man@ap.joneslanglasalle.com)
Date: 03/07/03 

From: "Jonathan Man" <jonathan.man@ap.joneslanglasalle.com>
Date: Thu, 6 Mar 2003 23:01:46 -0800

Thanks for replying, Roger

The user used his local account with local administrator
rights to encrypt the files, after the problem occurs we
asked him to change the password back to original. But he
still cannot access the files, and all the certificates in
the encrypted folder are invalid.
Remark: He is using a simplified chinese verion of Windows
XP Professional.

Jonathan.

>-----Original Message-----
>Have them try changing it back in the same way that
>they changed it.
>
>If their account is an administrator then it has two
>available ways to change its password. One it to
>set a new password - as only administrators can do
>for any account. The other is to change its password
>in the way that any account can of its own password.
>Using the administrative password reset will always
>break the account's access to its EFS encrypted data.
>
>Once the problem is resolved, advise your users to
>make, and maintain current, a password reset disk
>using the User Accounts control panel applet. You
>might also want to consider setting up a recovery
>agent on your user's machines as a part of your
>system oversight.
>
>--
>Roger Abell
>MS MVP (Security, Windows), MCDBA, MCSE both
>Associate Expert - Windows XP ExpertZone
>http://www.microsoft.com/windowsxp/expertzone
>
>"Jonathan Man" <jonathan.man@ap.joneslanglasalle.com>
wrote in message news:003c01c2e461$df198ef0
$a001280a@phx.gbl...
>> Hi, I've a user here who has problem accessing the
>> encrypted files after changing his password. According
to
>> the KB article 316994
>> http://support.microsoft.com/default.aspx?scid=kb;en-
>> us;316994
>>
>> it suggested to upgrade to SP1, however, the computer
is
>> already had XP SP1 installed. Can anyone kindly help?
>>
>> Many Thanks
>> Jonathan.
>.
>

Relevant Pages

  • Re: Denied Access to Encrypted Files After You Change Your Password
    ... all happened at SP1. ... > The user used his local account with local administrator ... > rights to encrypt the files, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cant Modify Local Security Setting - Windows XP SP 2
    ... create a local account on my PC and always log in to that local account ... problem because the system will not refresh the domain policies. ... his instructions were for me to log on to a local administrator level ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Fax Calling Card
    ... As you figured it out in the kb article, " Add a local account name with ... administrator rights" ... > Calling card settings are part of the per-user settings. ...
    (microsoft.public.win2000.fax)
  • Re: Remote access to AD users and computers
    ... administrator [even a local account], you should be able to use Adminpak on your ... Since you have a VPN, ... and be sure to use complex passwords for the administrator ...
    (microsoft.public.win2000.group_policy)
  • Re: Can not access encrypted file Win 2000 Pro
    ... You have to use the account that have encrypted the file's or the administrator account from that machine on that you encrypt the file's, if this account has the right to decrypt. ...
    (microsoft.public.win2000.file_system)