Re: EFS nightmare

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/28/04

  • Next message: Lanwench [MVP - Exchange]: "Re: POP-UPS!!"
    Date: Sat, 27 Mar 2004 21:28:13 -0700
    
    

    You need to have a domain environment in order to
    access EFS files stored on a remote computer.

    I am not sure why you said you used cipher /r as that is
    what is used to generate a new recovery agent cert/key

    Without a common domain for the machines about the best
    that you will be able to do is to export the cert/key from
    one account on machine A, and then import this into an
    account on machine B and into an account on machine C.
    Then, wrapper up an encrypted file using NTbackup in order
    to move it from one machine to another, when after it is restored
    to unwrapper it you will be able to access it (assuming the same
    OS at the same service pack level).

    -- 
    Roger
    "WiseMan" <wisemanat@hotmail.com> wrote in message
    news:eYUf422EEHA.2416@TK2MSFTNGP12.phx.gbl...
    > Greetings,
    > ok guys i'm calm i'm easy you make me wish that english was my first
    > language but what can i do, i have nothing to do with it but if things
    will
    > keep go wrong with me like usual i will stop using computers.
    > i will try askin another question and i hope this time will be fully
    > understood! i am goin to simplify the problem in plane english as much as
    i
    > can:
    > i have 3 computers all connected to one local network.
    > one of the 3 pcs is the server and uses the built-in administrator account
    > with password.
    > the second one is called "pc-two" which use an administrator account
    called
    > "two" with no password
    > the third one called "the fat pc". it uses an administrator account with
    > password.
    > now suppose i creat a regular text file called test.txt in the fat pc, i
    > then
    > encrypted it then i made it shard (read only). this file wont be
    accessable
    > from the pc-two ofcourse. ok what i should do now? yes u will advice me to
    > use
    > the command line to transfere the certificate and the private key to that
    > computer
    > Cipher/R: filename ....done
    > i went to the pc-two and install the two files (.CER and .PFX) ....done!!
    > with a big stupid smile on my face i double clicked the test.txt file
    > Oops nothing happend, nothin but the same ugly message "can't open the
    file"
    > restarting the computer didn't work
    > login in as built-in administrator and install the certificate again
    didn't
    > work too
    > now what? some one please tell me it's just CRAZY :(((((((
    >
    >
    

  • Next message: Lanwench [MVP - Exchange]: "Re: POP-UPS!!"

    Relevant Pages

    • Re: HELP---------HELP
      ... In a domain environment there are documents that reference using the ... Administrator account to recover them, but I'm not sure as I didn't read ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Admin Login
      ... > How to Add the Administrator Account to the Welcome Screen ... Reboot the computer. ... >> Is the computer in a domain environment? ... >> How can I force the Administrator Login to appear in the Welcome ...
      (microsoft.public.windowsxp.customize)
    • Re: Admin Login
      ... > How to Add the Administrator Account to the Welcome Screen ... >> Is the computer in a domain environment? ... >> How can I force the Administrator Login to appear in the Welcome ... >> I simply want both to display if possible. ...
      (microsoft.public.windowsxp.customize)
    • Impersonate to attach SSL certificate
      ... Administrator account on my machine for the ASPNET user ... but when I try 2 send the certificate with my ... X509Certificate cert; ... The code fails at the above line when using impersonation ...
      (microsoft.public.dotnet.framework.aspnet.security)
    • Re: Publishing Windows Server 2003 Certificates in Win2k Active Directory
      ... The administrator account is special in that the CA cannot write to the ... > I've installed an Enterprise CA on a Windows Server 2003 (RTM, ... > The CA computer account is a member of the "Cert Publishers" group. ... > Certificate Services could not publish a Certificate for request 10 to the ...
      (microsoft.public.win2000.security)