Re: How to get full access to all contents?

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 10/31/03


Date: Thu, 30 Oct 2003 21:25:05 -0700

Sorry, I was being brain dead. The utility to use is
efsinfo.exe
that is part of the Support\Tools optional install on
the XP CD.
efsinfo /?
for usage info.

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
news:%23AgwI1unDHA.2244@TK2MSFTNGP12.phx.gbl...
> ms-its:C:\WINDOWS\Help\ntcmds.chm::/cipher.htm and cipher help don't say
> anything about Users Who Can Transparently Access a File or Data Recovery
> Agents For a File.
> "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> news:Oef3ywtnDHA.2848@TK2MSFTNGP10.phx.gbl...
> > NGs trimmed to security_admin
> >
> > But what does cipher say ?  The same ?
> > For the file to have an associated recovery agent
> > of Administrator it seems you had to have configured
> > a recovery agent (in XP).  Was this machine a clean
> > install or an upgrade from W2k ??
> >
> > -- 
> > Roger Abell
> > Microsoft MVP (Windows Server System: Security)
> > MCSE (W2k3,W2k,Nt4)  MCDBA
> > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > news:OMy00%23qnDHA.2776@tk2msftngp13.phx.gbl...
> > > "Data Recovery Agents For This File As Defined By Recovery Policy" is
> > > "Administrator" is written in "Encryption Details for" the file window
> in
> > > "Advanced Attributes" window.
> > > "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
> > > news:OPh6T9onDHA.2676@TK2MSFTNGP11.phx.gbl...
> > > > I believe that we earlier resolved that it is not an
> > > > NTFS permissions issue.
> > > > Administrator is a recovery agent only in Windows 2000.
> > > > Windows XP has no recovery agent until one is configured
> > > > or the machine is joined to an Active Directory.
> > > >
> > > > -- 
> > > > Roger Abell
> > > > Microsoft MVP (Windows Server System: Security)
> > > > MCSE (W2k3,W2k,Nt4)  MCDBA
> > > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > > news:%23qW2iBknDHA.1488@TK2MSFTNGP12.phx.gbl...
> > > > > "the following people can decrypt an encrypted file.
> > > > > Any user who was designated as a recovery agent" is written in the
> > > > >
> > > >
> > >
> >
>
http://support.microsoft.com/default.aspx?scid=kb;en-us;308993&Product=winxp
> > > > > The user who was designated as a recovery agent is the
> Administrator.
> > I
> > > > > tried to decrypt the file under the Administrator account and got
> the
> > > same
> > > > > error message "Error Applying Attributes
> > > > > An error occurred applying attributes to the file:
> > > > > Path:\Filename
> > > > > Access is denied"
> > > > > "Michael Solomon (MS-MVP Windows Shell/User)" <user@#notme.com>
> wrote
> > in
> > > > > message news:uTjJagZnDHA.2536@tk2msftngp13.phx.gbl...
> > > > > > I don't know if you've seen this or if it will help but you
might
> > want
> > > > to
> > > > > > have a look at the following Knowledge Base Article:
> > > > > >
> > > > >
> > > >
> > >
> >
>
http://support.microsoft.com/default.aspx?scid=kb;en-us;308993&Product=winxp
> > > > > >
> > > > > > --
> > > > > > Michael Solomon MS-MVP
> > > > > > Windows Shell/User
> > > > > > Backup is a PC User's Best Friend
> > > > > > DTS-L.Org: http://www.dts-l.org/
> > > > > >
> > > > > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > > > > news:uZduWqInDHA.2456@TK2MSFTNGP09.phx.gbl...
> > > > > > > The fixes didn't help.
> > > > > > > "Kelly" <kelly@mvps.org> wrote in message
> > > > > > > news:eCVc2iGnDHA.2000@TK2MSFTNGP12.phx.gbl...
> > > > > > > > Without knowing more, see if this helps:
> > > > > > > >
> > > > > > > > EXE and LNK Fix for Windows XP - Line 12
> > > > > > > > http://www.kellys-korner-xp.com/xp_tweaks.htm
> > > > > > > >
> > > > > > > > To use the Regedit:  Save the REG File to your hard disk.
> Double
> > > > click
> > > > > > it
> > > > > > > > and answer yes to the import prompt. REG files can be viewed
> in
> > > > > Notepad
> > > > > > by
> > > > > > > > right clicking on the file and selecting Edit.
> > > > > > > >
> > > > > > > > --
> > > > > > > > All the Best,
> > > > > > > > Kelly
> > > > > > > >
> > > > > > > > MS-MVP Win98/XP
> > > > > > > > [AE-Windows® XP]
> > > > > > > >
> > > > > > > > Troubleshooting Windows XP
> > > > > > > > http://www.kellys-korner-xp.com
> > > > > > > >
> > > > > > > > Top 10 Frequently Asked Questions and Answers
> > > > > > > > http://www.kellys-korner-xp.com/top10faqs.htm
> > > > > > > >
> > > > > > > >
> > > > > > > > "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> > > > > > > > news:uRnCDcGnDHA.1096@TK2MSFTNGP11.phx.gbl...
> > > > > > > > > Hello
> > > > > > > > > I get "Windows cannot access the specified device, path,
or
> > > file.
> > > > > You
> > > > > > > may
> > > > > > > > > not have appropriate permissions to access the item." when
I
> > > > > > > double-click
> > > > > > > > a
> > > > > > > > > file. I'm the only owner of the computer. How to get full
> > access
> > > > to
> > > > > > all
> > > > > > > > > contents?
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: How to get full access to all contents?
    ... > "Roger Abell" wrote in message ... >> Administrator is a recovery agent only in Windows 2000. ... >>> The user who was designated as a recovery agent is the Administrator. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to get full access to all contents?
    ... "Roger Abell" wrote in message ... > Administrator is a recovery agent only in Windows 2000. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to get full access to all contents?
    ... For the file to have an associated recovery agent ... of Administrator it seems you had to have configured ... Microsoft MVP (Windows Server System: ... > "Roger Abell" wrote in message ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Event ID 6032
    ... So are these files actually on the SBS box, or on the workstation? ... The Recovery Agent does not need ownership, but it has to be the ... Administrator account by default, but it would not have to be. ... decrypt the files by reversing the process in which you encrypted them. ...
    (microsoft.public.windows.server.sbs)
  • Re: Data Recovery Agent
    ... > Well you need a recovery agent. ... > If you want it to be administrator logon as administrator. ... > administrator has a certificate that will enable him EFS function. ... > administrator (e.g. create an empty text file and encrypt it; ...
    (microsoft.public.windowsxp.security_admin)