Re: Denied Access to Encrypted Files After You Change Your Password

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 03/07/03 

From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Fri, 7 Mar 2003 05:52:43 -0700

Hi,

Let's see if someone from MS picks up on your post now.

I believe that you have said the magic info, non-English version,
and, we have now ruled out the common stuff and know this
all happened at SP1. 

-- 
Roger 
"Jonathan Man" <jonathan.man@ap.joneslanglasalle.com> wrote in message news:04b501c2e477$6abeb740$a201280a@phx.gbl...
> Thanks for replying, Roger
> 
> The user used his local account with local administrator 
> rights to encrypt the files, after the problem occurs we 
> asked him to change the password back to original. But he 
> still cannot access the files, and all the certificates in 
> the encrypted folder are invalid.
> Remark: He is using a simplified chinese verion of Windows 
> XP Professional.
> 
> Jonathan.
> 
> >-----Original Message-----
> >Have them try changing it back in the same way that 
> >they changed it.
> >
> >If their account is an administrator then it has two 
> >available ways to change its password.  One it to 
> >set a new password - as only administrators can do 
> >for any account.  The other is to change its password 
> >in the way that any account can of its own password.
> >Using the administrative password reset will always 
> >break the account's access to its EFS encrypted data.
> >
> >Once the problem is resolved, advise your users to 
> >make, and maintain current, a password reset disk
> >using the User Accounts control panel applet.  You 
> >might also want to consider setting up a recovery 
> >agent on your user's machines as a part of your 
> >system oversight.
> >
> >-- 
> >Roger Abell
> >MS MVP (Security, Windows), MCDBA,  MCSE both
> >Associate Expert - Windows XP ExpertZone
> >http://www.microsoft.com/windowsxp/expertzone
> >
> >"Jonathan Man" <jonathan.man@ap.joneslanglasalle.com> 
> wrote in message news:003c01c2e461$df198ef0
> $a001280a@phx.gbl...
> >> Hi, I've a user here who has problem accessing the 
> >> encrypted files after changing his password. According 
> to 
> >> the KB article 316994 
> >> http://support.microsoft.com/default.aspx?scid=kb;en-
> >> us;316994
> >> 
> >> it suggested to upgrade to SP1, however, the computer 
> is 
> >> already had XP SP1 installed. Can anyone kindly help?
> >> 
> >> Many Thanks
> >> Jonathan.
> >.
> >

Relevant Pages

  • Re: Denied Access to Encrypted Files After You Change Your Password
    ... The user used his local account with local administrator ... rights to encrypt the files, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Login as local admin
    ... schema admins, enterprise admins and the other groups mentioned, but the ... installing SBS SP1. ... So if i basically ensure that my domain administrator account is a member ... The article does not reference "local" administrator (as far as I ...
    (microsoft.public.windows.server.sbs)
  • Re: Can not access encrypted file Win 2000 Pro
    ... You have to use the account that have encrypted the file's or the administrator account from that machine on that you encrypt the file's, if this account has the right to decrypt. ...
    (microsoft.public.win2000.file_system)
  • Re: Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... policy to rename the account although it is not really necessary or useful. ... Did I check Group Policies for references to the Administrator ... Failed to perform redirection of folder Desktop. ...
    (microsoft.public.windows.server.general)
  • Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... one referencing the original administrator account: ... specific policy setting that was flagged with a big, ... I used an incorrect procedure to rename the ...
    (microsoft.public.windows.server.general)