Re: EFS

"Lynn" <MarryLynn@xxxxxxxxx> wrote in message
news:uyRzC27rFHA.3216@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
> will the domain administrator able to decrypt and view my files even if i
> encrypt it with EFS ?
> thanks
>
>

In most cases the answer is yes. The domain administrator is the default
recovery agent. This may have been changed. In any case in a domain
environment there is a designated recovery agent who could decrypt the
files.

Kerry


.

Relevant Pages

  • Re: EFS
    ... is there a way to check what is the designated recovery agent? ... The domain administrator is the default ... > environment there is a designated recovery agent who could decrypt the ...
    (microsoft.public.windowsxp.help_and_support)
  • EFS - how to recover
    ... Your right in saying that due to the Recovery Agent being ... EFS can be your best friend or your worst enemy ... The Domain Administrator was ... >encrypted and the domain user account deleted. ...
    (microsoft.public.windowsxp.security_admin)
  • Newbee EFS cant decrypt
    ... I have a test folder that I decrypted about a year ago and suddenly I ... Sure enough I can't decrypt it either. ... I never made a recovery key using cypher, ... and I also am the domain administrator. ...
    (microsoft.public.win2000.security)
  • Re: recovery agent keys/certs
    ... To decrypt a file two things are needed a) read permissions ... Create the recovery agent before users encrypt files so that you ... Backing up EFS certificates will allow for later ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Laptop Security - Microsoft EFS
    ... When you use EFS, ... who can also decrypt the respective persons info. ... If the private key for the recovery agent sits on the very computer you are ... trying to protect, then you may as well not encrypt anything, because it's ...
    (Security-Basics)