Re: Need help recovering EFS encryped files

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 05/04/04 

Date: Tue, 4 May 2004 11:41:20 -0700

change the password back

In XP when logged in as an admin there are two ways to change
the password of the logged-in account.
Reset - which does not prompt for current password
Change - which does ask for current password

Reset always breaks access to EFS files for the account whose
password is reset. This is doc'd behavior and prevents and admin
from gaining access to an account's EFS data. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA,  MCSE W2k3+W2k+Nt4
"Bill C." <billybobc1210@yahoo.com> wrote in message 
news:1e75a833.0405032017.1d45c325@posting.google.com...
> Hello,
>
> Desperately seeking help recovering EFS encrypted files that have 
> mysteriously
> become inaccessible.  Doing a little research on the web, I think it has
> something to do with the fact the files were created in an account that 
> had no
> password.  I later added a password.  It seems like I as able to access 
> the
> files just fine after that but it's been a while so I could be mistaken.
> Later I changed the password.  The next night when I logged on none of my 
> EFS
> encrypted files were accessible.  Can't edit, copy or execute.  Delete 
> appears
> to work just fine :(.
>
> Anybody know if these files are recoverable?  Or am I screwed?  Any help
> appreciated.
>
> thanks in advance.
>
> Bill

Relevant Pages

  • Re: No access to encrypted files after Password change
    ... Yea Howard, you are quite right, that would make EFS ... That is expected when the pwd is reset rather than ... >>Change requires that you be logged in as the account ... >>> Microsoft says that once you encrypt ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Need help recovering EFS encryped files
    ... > the password of the logged-in account. ... > Reset - which does not prompt for current password ... > from gaining access to an account's EFS data. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Just after i reset my password
    ... Reset the password back to what it was when EFS ... to make password recovery disks was also provided in XP. ... > files on the computer,from the Administration account. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Password disappears
    ... account password will be reset to empty automatic. ... SBS infected by Trojan horse. ... Configure account lockout policy. ...
    (microsoft.public.windows.server.sbs)
  • RE: Quick question on resetting computer accounts in AD
    ... and recreating the account. ... Is it okay to use the reset account function? ... SBS Server Management console does not have "Reset Account" command to ... In fact, the SBS Server Management console has already integrated ADUC, you ...
    (microsoft.public.windows.server.sbs)