Re: What account can decrypt the file?

From: Dmitriy Kopnichev (kopn_at_hotbox.ru)
Date: 11/06/03 

Date: Thu, 6 Nov 2003 09:23:07 +0300

Yes. This is an En-Us English version of XP Pro.
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:O6BWvXApDHA.2444@TK2MSFTNGP09.phx.gbl...
> I believe what efsinfo.exe is saying.
> There is an account on each machine, System, that also
> is known as the name of the machine with $ at the end
> (this is what a domain knows it as).
> However, as I recall, you did use the scheduled task trick
> and from the cmd windows receive running as System (which
> efsinfo say has decrypt capability - something I find wierd)
> try using cipher.exe to decrypt the file (right?) and this did
> not work. I am stumpted, as it seems you have an encrypted
> file with no accounts allowed to decrypt (System does not
> really make sense to me).
> Out of curiosity, is this an En-Us English version of XP Pro?
>
> --
> Roger Abell
> Microsoft MVP (Windows Server System: Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> news:%23dIFBP4oDHA.1096@TK2MSFTNGP11.phx.gbl...
> > The efsinfo.exe says:
> > Users who can decrypt (the file):
> > NT AUTHORITY\SYSTEM (ME$(ME$@WORKGROUP))
> > What account can decrypt the file?
> > "Data Recovery Agents For This File As Defined By Recovery Policy" is
> > "Administrator" is written in "Encryption Details for" the file window
in
> > "Advanced Attributes" window.
> > The only user Name in "Users Who Can Transparently Access This File" in
> > "Encryption Details for" the file is "ME$(ME$@workgroup)". "ME" was my
> > computer name before renaming. The renaming was made for joining the
> domain.
> > "Workgroup" was my workgroup name. There was not a Local user with "ME"
> name
> > before joining the domain.
> >
> >
>
>

Relevant Pages

  • Re: How to get full access to all contents?
    ... Will I retain access to needed network folders if I rename my computer back ... Properties" window? ... "Roger Abell" wrote in message ... > that you are supposed to be able to decrypt it then it will ...
    (microsoft.public.windowsxp.security_admin)
  • cannot decrypt files
    ... formatted my C drive and re-installed windows XP Pro. ... can't decrypt these files! ... using win explorer, I get an error message "error adding ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to get full access to all contents?
    ... What account can decrypt the file? ... "Roger Abell" wrote in message ... > For the file to have an associated recovery agent ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to get full access to all contents?
    ... "Roger Abell" wrote in message ... > code 5 is probably access failure ... > in this case since you do not have EFS capability to decrypt ...
    (microsoft.public.windowsxp.security_admin)
  • Re: previously encrypted files
    ... The recovery agent created under the new instance of XP ... data and simply decrypt it on their own machine with their recovery agent. ... > been simply copied back to the local machines from their ... > previous instance of XP PRO. ...
    (microsoft.public.windowsxp.security_admin)
Quantcast