Re: EFS

is there a way to check what is the designated recovery agent ?

"Kerry Brown" <kerry@xxxxxxxxxxxxxxxxxxx*a*m> wrote in message
news:eOkDH%238rFHA.1788@xxxxxxxxxxxxxxxxxxxxxxx
> "Lynn" <MarryLynn@xxxxxxxxx> wrote in message
> news:uyRzC27rFHA.3216@xxxxxxxxxxxxxxxxxxxxxxx
> > Hi,
> > will the domain administrator able to decrypt and view my files even if
i
> > encrypt it with EFS ?
> > thanks
> >
> >
>
> In most cases the answer is yes. The domain administrator is the default
> recovery agent. This may have been changed. In any case in a domain
> environment there is a designated recovery agent who could decrypt the
> files.
>
> Kerry
>
>


.

Relevant Pages

  • Re: EFS
    ... > will the domain administrator able to decrypt and view my files even if i ... > encrypt it with EFS? ... environment there is a designated recovery agent who could decrypt the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Encrypting File System
    ... If you do not have back-ups of the original keys, ... Creating a recovery Agent after the fact will not work. ... There is not and there should not be a way to decrypt the data without ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Recovering encrypted files and folders
    ... >decrypt those files are YOUR user key and the recovery key ... >to extract the keys to decrypt your files. ... The second disk was copies of My Documents. ... >> recovery agent, but it didn't work. ...
    (microsoft.public.win2000.security)
  • Re: Encrypting File System Recovery
    ... created a new recovery agent for the administrator account ... which doesn't have the ability to decrypt my files for the ... >> Admin but since I haven't logged on as an Admin due to ...
    (microsoft.public.win2000.security)
  • Re: EFS
    ... In a Windows 2000 domain there are two people who can decrypt a file. ... in the user profile and managed through the user certificate mmc snapin. ... The Recovery Agent by default is the original administrator account on the ... find out who can decrypt an EFS encrypted file and view the thumbprint of ...
    (microsoft.public.win2000.security)