Re: How come EFS has locked me out of my files?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Many thanks.

I thought that if I did the reverse of one of the 2 actions, I would get
back my files. But I wasn't sure which action to take so I stopped until I
got some advice.

Changing the password back did the trick.

Thanks again.

"H Brown" wrote:


"Tim Daborn" <TimDaborn@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:52ED59CB-1158-43C9-A190-689A06194E09@xxxxxxxxxxxxxxxx
Hi,

I have a folder with some very important files which are encrypted using
EFS
via the advanced properties dialog on the folder. There has been working
fine for quite a few months.

This evening I changed both my user and the administrative passwords.

When logged in as the user I then saw the option ‘manage your file
encryption certificates’ and in the subsequent window, I went to the help
topic ‘what is Encryption File System?’ I then read the topic ‘Back up
your
key to prevent data loss.’

Following the instructions I exported my personal certificates using the
certificates manager. In the export wizard it did say that the private
keys
could not be found - but I exported the certificates anyway to the default
file type. I also did this as the user which originally created the
folder
half expecting to supply the Administrative password if required.

I then found I did not have access to the folder. If I try and move a
file
out of the folder the system asks me for the Administrative password.
Regardless of whether I enter the old and new password the message appears
‘Destination folder access denied.’

What should I do to gain access back to my folder?

Thank you.
Just hold your horses. When you changed the password for the standard user
account it sounds as though you changed it from the/an admin account. If
so, that user loses all access to all of encrypted files.
By doing the change from admin to a standard user through an admin account
you made the master key inaccessible for that account.

Change your password back to the old password and that will decrypt the
master key.
Once you are back in control of things, remember Only change passwords or
names of accounts logging on to the account you are going to change.

H Brown



.

Relevant Pages

  • Re: Help with configuration
    ... to redirect their My Documents folder to a share on the fileserver. ... GPo, if it is already redirecting by default? ... account profile is blank, also). ... Your GPO settings do not apply to your Terminal Server. ...
    (microsoft.public.windows.terminal_services)
  • Re: Missing Folders in Documents & Settings for New Users
    ... I renamed the default administrator account <SNIP> I ... Settings folder name, and ProfileImagePath value. ... that you have decided to use, choose Rename, and rename the <user ...
    (microsoft.public.windowsxp.customize)
  • RE: SBS 2K3 R2 and Outlook
    ... The archive file created on the SBS is the folder redirection function. ... | account create a new user profile on client computer. ... | transfer the local user profile to domain user profile. ...
    (microsoft.public.windows.server.sbs)
  • Re: Outlook not sending mail to 1 contact.
    ... outbound boundary SMTP mail server. ... rerouted internally right back into your account. ... The Outbox folder will only be non-empty DURING an e-mail session. ... e-mail client will move the draft of your e-mail into the Outbox folder ...
    (microsoft.public.outlook.general)
  • Re: Advice on Keeping Files Secure
    ... I'd have to apply it to my entire Home folder to be sure I captured ... You enable it for an account, ... that you want to protect, but you also don't want to protect the entire ... The techs will have to use an admin account, ...
    (comp.sys.mac.system)