Re: making administrator account the DRA in XP Profession



Yes the RA must be logged onto a computer where the RA private key exists to
decrypt files as the RA. The .cer file contains the certificate and only the
public key. The .pfx file would contain the private key. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316 --- EFS
best practices
http://www.microsoft.com/technet/prodtechnol/winxppro/support/dataprot.mspx
--- detailed info on EFS recovery.

"alexm" <alexm@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CED09171-F5B5-4E90-8BE8-AEF3365A9B00@xxxxxxxxxxxxxxxx
> First, I apologize; this question is rather simple, and has already been
> addressed. But I still can't get it to work.
>
> I encyrpt files with EFS on a user account on my standalone XP Pro
> workstation. I wish to be able to access to them from the admin account.
> I
> therefore wish to enable the admin account as a data recovery agent. I
> have
> done the following, while logged on to the admin account:
> used cipher /R:filename
> to generate a certificate (and private key)
> used gpedit to add this certificate to the encryption policy.
>
> However, I still cannot decrypt newly created files from the admin
> account;
> there seems to be another step I need to complete. Perhaps, I need to
> import
> the private key I created into the admin account.
>
> Can anyone tell me what I need to do, and tell me or point me to how?
>
> Thanks!


.



Relevant Pages

  • RE: EFS multiple certificates associated with single user
    ... As long as you have an EFS certificate and private key in your Personal ... for certificate "A," you should still be able to decrypt files that were ...
    (microsoft.public.windowsxp.security_admin)
  • Re: "Access is Denied" Error Message When Encrypting or Decrypting Files or Folders
    ... might try to use cipher command to decrypt files. ... > I have a NONtrusted personal root certificate that I ... and a private key that corresponds to that ... > The associated EFS private ...
    (microsoft.public.security)
  • Re: making administrator account the DRA in XP Profession
    ... >> therefore wish to enable the admin account as a data recovery agent. ... >> the private key I created into the admin account. ... > In order to designate the Administrator as a DRA, ... > be the DRA, not the local Administrator. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: making administrator account the DRA in XP Profession
    ... I encyrpt files with EFS on a user account on my standalone XP Pro workstation. ... I therefore wish to enable the admin account as a data recovery agent. ... I need to import the private key I created into the admin account. ... and even then, it is the Domain Administrator who can be the DRA, not the local Administrator. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)

Quantcast