Re: Can't de-crypt
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 29 Dec 2005 15:29:51 -0600
Yikes. I have never seen efsinfo do that. What I would try is to use efsinfo
on some freshly encrypted test files to see if it does the same thing or not
to try and determine if the problem is using efsino in general or just for
the files you can not access. If you have not done so yet run Check Disk on
that computer selecting to fix file errors automatically.
Certificate Services will not work unless the computer is a Certificate
Authority and that is not needed for EFS nor I seriously doubt it is a
related problem. The command certutil -TCAinfo will dump a lot of
information if the computer is a CA. Changing the administrator password
should not make any difference unless the administrator was the user that
encrypted the files or was the Recovery Agent in that case if the password
was "reset" using Local User and Computers versus being changed like a user
normally would with control-alt-delete or when prompted to then that will
deny access to EFS files that the administrator encrypted and changing it
back could allow access assuming again that the administrator encrypted the
files and the EFS private key is still in the administrator's profile. ---
Steve
"Jason" <Jason@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5EB2FCE7-C70E-43E4-9BF7-F1C9773356F3@xxxxxxxxxxxxxxxx
> Steven,
>
> Thanks again for your guidance. Efsinfo was on the machine but not
> installed
> until I followed your instructions. After loading it, I went into the
> command
> prompt to use it on the affected folders. Unfortunately, that did not
> solve
> our problem.
>
> For all of the same files that I couldn't get Windows to display data for
> a
> User, Recovery Agent, or Thumbprint ("EFSADU - Unable to find the user
> information for the file."), the Efsinfo command line brings up the error
> message: "Overlapped I/O Operation is in Progress." So it was a good try,
> but
> the same result: No encryption data available, hence no way to decrypt.
>
> I did a little more poking around the server, and noticed another odd
> thing.
> When I went into Administrative Tools, Certificate Services, this error
> message popped up: "Cannot manage Certificate Services; The specified
> service
> does not exist as an installed service 0x424 (WIN32: 1060)." Based on the
> amount of information about CS in the kb I suspect it's important, but do
> not
> quite grasp it. Most importantly, I need to know if Certificate Services
> not
> being installed at the time these files were encrypted is causing the
> error
> message, and if so is there any fix for the situation?
>
> One other thing which may have caused a problem. Around the time these
> files
> were encrypted, the Administrator password on the server was changed. (The
> person who did both can't remember which came first.) Could this be a
> factor,
> and would changing the password back help?
>
> Once again, to Steven and anyone else reading this who knows more than I,
> thank you in advance. Your advice is appreciated.
>
>
> "Steven L Umbach" wrote:
>
>> Efsinfo should work. First see if it is on the computer by searching for
>> it
>> and if not install the support tools from the W2003 from the W2003
>> install
>> disk in the support/tools folder or download from the link below. Try
>> using
>> the full path to efsinfo to execute it or copying it to the \windows
>> folder
>> to get it to run. --- Steve
>>
>> http://www.microsoft.com/downloads/details.aspx?familyid=6EC50B78-8BE1-4E81-B3BE-4E7AC4F0912D&displaylang=en
>
.
- Prev by Date: Re: Use of hosts file
- Next by Date: Re: XP account passwords change spontaniously
- Previous by thread: Re: new xp user
- Next by thread: Regedit "Error while opening key"
- Index(es):
Relevant Pages
|
|
