EFS recovery problem

thiessendg_at_yahoo.com
Date: 05/01/03 

Date: 1 May 2003 06:21:11 -0700

All,

Please note that I have read the FAQ...

Here is my problem, I have a Power User Account. I changed that
account to an Administrator. When I logged in, it forced me to change
the password. I simply changed it to its current password. I did my
thing, logged off, logged in to default admin, changed account back to
PU acct. Log out of Admin, log in to PU acct. and now I cannot access
EFS files.

After reading/research, I log on to account and use control panel to
change my password, change it to the password. Still no access to EFS
files.

Hmmm. Log on to admin, restore files from backup, still no acccess.

Hmmm. Use MMC and try to make sure that default admin is recovery
agent and he is not, no one is. So i try to add Admin acct as
Recovery agent, but, there is no *.cer file on local machine.

Any suggestions?

My understnading was, since the password changed, that is what screwed
up the EFS. But, according the KB article, logging in as user and
changeing password with control panel, I should have access to my EFS
files back.

I have a sinking feeling, but appreciate any suggestions...

Dave

Relevant Pages

  • Re: EFS recovery problem
    ... > groups *should* _not_ effect efs. ... >>A recovery agent will only be of use if it was set up before ... >>and since changing the group memberships of an account should ... Log out of Admin, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Co-Administrator
    ... All the admin needs is one of the ... necessary steps are the designation of a data recovery agent with the EFS ... certificate/key of the administrator account. ... The EFS encrypted files are no longer readable by the Administrator or data ...
    (microsoft.public.windows.server.sbs)
  • Re: EFS access
    ... other account cannot open or copy the EFS files to a different ... Is there a way to use EFS to block even the ... opening of an EFS protected folder from another admin account? ... NTFS permissions, however, can. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS recovery problem
    ... I am not sure at which point your EFS access was broken, ... A recovery agent will only be of use if it was set up before ... Since your account is now set with the same password as before, ... Log out of Admin, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Internet Exploere kiosk mode
    ... You could have a multi shell system and use a hidden hot key that can allow ... you to log off one Power User account and logon on to another administrator ... account with a different shell. ... box and get out of restricted user login and log in as admin. ...
    (microsoft.public.windowsxp.embedded)