Re: How to get full access to all contents?

From: Dmitriy Kopnichev (kopn_at_hotbox.ru)
Date: 10/28/03


Date: Tue, 28 Oct 2003 17:08:53 +0300

The only user Name in "Users Who Can Transparently Access This File" in
"Encryption Details for" the file is "ME$(ME$@workgroup)". The "Recovery
Agent Name" is Administrator. "ME" was my computer name before renaming. The
renaming was made for joining the domain. "Workgroup" was my workgroup name.
There was not a Local user with "ME" name before joining the domain. The
error message is the same when I try to open the file under the Local
"Administrator" account. Importing a private key saved before joining the
domain haven't helped.
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:ulcMXpUnDHA.2064@TK2MSFTNGP11.phx.gbl...
> You are dealing with an EFS issue it appears.
> Did you try using cipher yet ?
>
> --
> Roger Abell
> Microsoft MVP (Windows Server System: Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> news:eZN3YcSnDHA.2404@TK2MSFTNGP12.phx.gbl...
> > Could the NTFS permissions denial begin to appear because of the
computer
> > renaming?
> > "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> > news:ehWd8qOnDHA.1764@tk2msftngp13.phx.gbl...
> > > When you look at the file's properties Security dialog
> > > is anything checked for any group in the Deny column ?
> > > You must highlight each group listed one at a time and
> > > then look at what is Granted/Denied.
> > > An account that is only in Administrators group is
> > > actually also in other things to which there can be
> > > NTFS Grants/Denies, like Authenticated Users,
> > > Network, Interactive, Everyone. . . .
> > > Not having EFS authorization appears as if it is a
> > > NTFS permissions denial. You should use the cipher
> > > commandline utility to examine the thumbprint info of
> > > the file to see what accounts are allowed to decrypt it.
> > >
> > > --
> > > Roger Abell
> > > Microsoft MVP (Windows Server System: Security)
> > > MCSE (W2k3,W2k,Nt4) MCDBA
> > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > news:eykgm5MnDHA.2848@TK2MSFTNGP10.phx.gbl...
> > > > How to become sure that there is no Deny for any group. The file is
> EFS
> > > > protected. But I can open other EFS protected files.
> > > > "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> > > > news:##sRquJnDHA.1084@tk2msftngp13.phx.gbl...
> > > > > This means that you have full control and it is inherited from
> > > > > some higher directory.
> > > > > Are you sure that there is no Deny for some group, and if
> > > > > there is make sure your account is not a member of the group.
> > > > > Deny overrides a Grant.
> > > > >
> > > > > --
> > > > > Roger Abell
> > > > > Microsoft MVP (Windows Server System: Security)
> > > > > MCSE (W2k3,W2k,Nt4) MCDBA
> > > > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > > > news:um7vwqGnDHA.2080@TK2MSFTNGP10.phx.gbl...
> > > > > > I'm the Owner of the file and have full access, but the
"Effective
> > > > > > permissions" are all checked and grayed for me.
> > > > > > "Kelly" <kelly@mvps.org> wrote in message
> > > > > > news:eCVc2iGnDHA.2000@TK2MSFTNGP12.phx.gbl...
> > > > > > > Without knowing more, see if this helps:
> > > > > > >
> > > > > > > EXE and LNK Fix for Windows XP - Line 12
> > > > > > > http://www.kellys-korner-xp.com/xp_tweaks.htm
> > > > > > >
> > > > > > > To use the Regedit: Save the REG File to your hard disk.
Double
> > > click
> > > > > it
> > > > > > > and answer yes to the import prompt. REG files can be viewed
in
> > > > Notepad
> > > > > by
> > > > > > > right clicking on the file and selecting Edit.
> > > > > > >
> > > > > > > --
> > > > > > > All the Best,
> > > > > > > Kelly
> > > > > > >
> > > > > > > MS-MVP Win98/XP
> > > > > > > [AE-Windows® XP]
> > > > > > >
> > > > > > > Troubleshooting Windows XP
> > > > > > > http://www.kellys-korner-xp.com
> > > > > > >
> > > > > > > Top 10 Frequently Asked Questions and Answers
> > > > > > > http://www.kellys-korner-xp.com/top10faqs.htm
> > > > > > >
> > > > > > >
> > > > > > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > > > > > news:uRnCDcGnDHA.1096@TK2MSFTNGP11.phx.gbl...
> > > > > > > > Hello
> > > > > > > > I get "Windows cannot access the specified device, path, or
> > file.
> > > > You
> > > > > > may
> > > > > > > > not have appropriate permissions to access the item." when I
> > > > > > double-click
> > > > > > > a
> > > > > > > > file. I'm the only owner of the computer. How to get full
> access
> > > to
> > > > > all
> > > > > > > > contents?
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: Domain x Workspace
    ... environment is a simple matter of joining the computer to the domain. ... the domain as a domain administrator, from System Properties - Computer Name. ... having you reformat, and reinstall the OS, as a security measure. ... is a bad relationship policy. ...
    (microsoft.public.windowsxp.network_web)
  • Re: WAS unable to log in to XP Pro
    ... Renaming the Computer is what I tried to do, but I think I might have typed ... incorrectly too many times and disabled the logon entirely. ... on as this user to any other PC and as the Administrator at any other PC is ... I was able to get onto Windows but no ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local Administrator
    ... > Is the PC actually a member of the domain, it would need to be to add the ... Logging in the domain and joining the computer to the domain are not the ... >> Administrator) but I don't have the domain available in the Locations ...
    (microsoft.public.windowsxp.general)
  • Re: cannot run exe applications
    ... It did not work by renaming the extention with .scr. ... editing has been disabled by your administrator. ... I tried doing the same on my PC and notepad opened instead of the registry ...
    (microsoft.public.windowsxp.general)
  • Re: Determine attacker IP?
    ... Well seeing how they are trying to attack using the "administrator" account ... "Renaming administrator offers little protections." ... Also the best way to stop this is to rename the ...
    (microsoft.public.windows.server.sbs)