Re: Unable to open secured files

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Dhuri (Dhuri_at_discussions.microsoft.com)
Date: 12/09/04 

Date: Thu, 9 Dec 2004 05:13:02 -0800

Hello Dave
As an administrator I can take the ownership of the folder. But while
copying the files from this folder to other computers or even floppy I get
the message ‘ Cannot copy. Access denied. The source file may be in use.’
I downloaded and executed the efsinfo.exe file from site
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/efsinfo-o.asp
But I could not execute it as I got the message at command prompt and this
is not recognized as an internal or external command.
With built in cipher command my encrypted folder was not detected.
Please note that none of the file attributes in this folder are read only.
Also these files are not corrupt.

"Dave Patrick" wrote:

> You can get it here.
> http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/efsinfo-o.asp
>
> You should be able to take ownership as local administrator on the machine.
> What happens if you copy a file to floppy and try opening on another
> machine?
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "Dhuri" wrote:
> | Hello Dave,
> | I tried with efsinfo from Microsoft TechNet Article ID 243026
> | 'Using Efsinfo.exe to determine information about encrypted files'. But
> this
> | Efsinfo.exe file is not available on my standalone PC. It is clearly
> written
> | in this article that 'Stand-alone Windows 2000 workstations and servers do
> | not display the recovery agent information. The default recovery agent for
> | all stand-alone computers is the local Administrator account.'
> |
> | I couldn't solve this problem using google help.
> |
> | No files in this folder are encrypted or read only. Only the folder is
> | secured. This is applicable to all types of files not just MSoffice files.
> In
> | the above trial if we move some files in user mode who has secured the
> | folder, other users even administrator can't see the contents of these
> files.
> | This appears to be a good feature of folder protection. But how to make
> use
> | of this?
> |
> | Dhuri
> |
> |
> |
> | "dhuri" wrote:
> |
> | > Hello Dave,
> | > Sorry that I couldn't reply immediately. For to weeks I wasn't
> able
> | > to connect to microsoft support forums.
> | > I tried your suggestion , but I couldn't get a solution.
> | > I tried the following:-
> | > This is how one can try the experiment.
> | > 1. I logged off 'Administrator' and changed to power user 'self' having
> log
> | > in password.
> | > 2. I made a folder 'SelfData' and kept some Excel , Word and wordpad
> files.
> | > 3. I right clicked the folder and went to properties.
> | > 4. Under 'security' tab I unchecked the check box 'Allow inheritable
> | > permissions from parent to propagate to this object.'
> | > 5. With this a security dialog flashed asking' you are preventing any
> | > inheritable permissions from propagating to this object. What do you
> want to
> | > do?' I pressed 'Remove' button.
> | > 6. At this time under the 'security' tab no owner was shown. I clicked
> | > 'Advanced' button.
> | > 7. Now a Dialog box 'Access control settings for Network' appeared. In
> this
> | > under 'Permissions' tab I clicked 'Add' and added power user 'self'.
> | > 8. With this a new dialog box appered 'Permission Entry for Network'.
> Under
> | > 'allow' I checked all check boxes and then clicked OK.
> | > 9. Then 'Apply' and 'OK' buttons under ' Access Control Settings for
> | > Network..'
> | > 10. Then I logged off 'self' and changed to 'Administrator'.
> | > 11. I couldn't get direct access to the folder. So under properties I
> took
> | > the ownership of that folder.
> | > 12. I could now see the files in that folder.
> | > 13. Now when I tried to open that particular file say Excel file I got
> the
> | > message ' Excel can not access particular file. The document may be read
> only
> | > or encrypted.'
> | >
> | > I MADE A FOLDER "SelfData2' UNDER ADMINISTRATOR AND LOGGED OFF AND
> CHANGED
> | > TO USER 'self'. I COPIED SOME FILES IN THIS FOLDER AND REPEATED THE
> ABOVE
> | > PROCEDURE. THIS TIME I COULD OPEN THE FILES.
> | >
> | > This appears to be very good security feature. But how to decrypt the
> files.
> | > I have tried with mmc and consoles and tried to import encryption and
> | > recovery certificates. But this didn't work.
> | >
> | > In market there are plethora of third party licensed software for folder
> | > security. Why so much complications in Microsoft for a user.
>
>
>

Quantcast