Re: Re: EFS Issue

From: Kerry Brown (kerry_at_kdbNOSPAMsystems.c*o*m)
Date: 04/29/05 

Date: Fri, 29 Apr 2005 07:52:56 -0700

"Mouse4440" <DoNotEmail@WindowsForumz.com> wrote in message
news:3_1183971_590abcb1375a568d59e74bf288c16868@windowsforumz.com...
> "Jupiter Jones MVP" wrote:
> > Was there a Designated Recovery Agent on the domain?
> > If not, the data is most likely gone for good.
> >
> > See the bottom of this page for ways to help prevent data loss
> > with EFS in
> > the future:
> > http://www3.telus.net/dandemar/encrypt.htm
> >
> > --
> > Jupiter Jones [MVP]
> > http://www3.telus.net/dandemar
> > In memory of our dear friend, MVP Alex Nichol
> > http://www.dts-l.org
> >
> >
> > "Mouse4440" <UseLinkToEmail@WindowsForumz.com> wrote in
> > message
> > news:3_1177687_c7f35c781fba764475392afee945baeb@windowsforumz.com...
> > > Recently I used RIS (Remote Installation Service) to
> > reinstall a
> > > clients workstation because it had been upgraded and had
> > different
> > > versions of Office installed and just generally had issues,
> > but what I
> > > didn't know is that the user had Encrypted files on another
> > drive (USB
> > > External Hard Drive) so after I reinstalled the OS the
> > Computer
> > > account is not the same as before and he can no longer
> > access the
> > > files that were on the other drive. I have tried several of
> > the free
> > > downloadable recovery packages Advanced EFS recovery and
> > others but
> > > have had no luck, the recovery agent displays that no user
> > is able to
> > > decrypt the files and the user account has not changed
> > because the
> > > user is in a domain. I have tried logging in as local admin,
> > domain
> > > admin, but still no luck. anyone know of anything I can do.
> > and no
> > > the user didn't export the keys.
> > >
> > > --
> > > Posted using the http://www.windowsforumz.com interface, at author's
> > > request
> > > Articles individually checked for conformance to usenet
> > standards
> > > Topic URL:
> > > http://www.windowsforumz.com/Security-Admin-EFS-Issue-ftopict365344.html
> > > Visit Topic URL to contact author (reg. req'd). Report
> > abuse:
> > > http://www.windowsforumz.com/eform.php?p=1177687
>
> I’m not sure, I logged in as admin on the local machine and as the
> domain admin and the windows recovery thing display no recovery agent
> present. is this something that user had to setup or is an automatic
> thing?
>

With XP you have to setup the recovery agent. Win2k worked differently. If
he was logged on locally when he encrypted the files you are probably out of
luck. If he was logged on as a domain user you will have to figure out if
there is a recovery agent and who it is. Export the recovery key and import
it on the machine with the files on it. You may also have to take ownership
of the files on the USB drive first.

http://support.microsoft.com/default.aspx?scid=kb;en-us;887414

http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Default.asp?url=/resources/documentation/windows/xp/all/reskit/en-us/prnb_efs_lnfx.asp

Kerry

Relevant Pages

  • encrypted file
    ... someone encrypted a file on there computer in the domain, is the domain admin ... setup by default to be the recovery agent or is there something i have to ... Prev by Date: ...
    (microsoft.public.windows.server.active_directory)
  • Re: EFS Recovery Agent
    ... If you setup it up the previous install backup administrator ... In a standalone environment the recovery agent is not setup by default, ... and now cannot get to encrypted info. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Re: Re: EFS Issue
    ... > there is a recovery agent and who it is. ... He was a domain user but the key was on the system partition and the ... local admin and domain admin. ...
    (microsoft.public.windowsxp.security_admin)