RE: Recovery Agent cannot recover encrypted files



Hi Richard

Greetings from Copenhagen Denmark

I have about the same problem. My net bank key and all my documents tells me
I have no access.

I am administrator on a stand alone XP SP2 IE 7.0.5330.11

By installing a public digital signature I by accident deleted all other
certificates. Those certificates were the Self made certificates by
encryption software. All my backups are too encrypted and not by my choice.
So I can not get to any of it.

Help hint : microsoft seem to have a hotfix you have to apply for. After
installing the hotfix you write a new policy script as an INF file, that
should gain you access again. I am waiting to receive my hotfix


"Richard R" wrote:

Hi

Im testing efs on a standalone windows 2003 server and am having a problem
recovering encrypted files. Situation is as follows:

1. Created user efs_recovery and added to administrators group
2. Logged in as user and ran cipher /r:cert.pfx
3. In "Local Security Policy" Went to the "public key Policies/EFS" section
and ran the "Add data recovery Agent" wizard. Added the cert i created using
the cipher command which added the efs_recovery user as a recovery agent.
4. Logged onto the server as USER2 who is also an administrator. Went to
some random folder and encrypted the folder and it's contents. When i go to
"Properties/Advanced/Details" the user i created (efs_recovery) is in the
list of Recovery Agents.
5. Log in as efs_recovery and go to the folder that i previously encrypted.
"Properties/Advanced" and untick the "Encrypt contents to secure data"
checkbox.

This is when i get the error:

An error occured applying attributes to the file

Access is Denied


Anyone got any ideas on this. Im kind of drawing a blank.

Thanks

Richard

.



Relevant Pages

  • Re: cant read folder - dell please help.
    ... I believe I'm running as the administrator. ... I do not see any securities tab to click to take ownership of the folder? ... Go to the security tab and click advanced. ... > encryption certificate or a Recovery Agent from the installation under ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: HELP---------HELP
    ... workgroup, or the key for the Administrator of the domain to solve this ... THIS USERS HE MAKE ENCRYPTED FILE SYSTEM OVER THIS FOLDER ... > | MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS DENIED. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to open secured files
    ... folder, other users even administrator can’t see the contents of these files. ... > I have tried with mmc and consoles and tried to import encryption and ... Why so much complications in Microsoft for a user. ...
    (microsoft.public.win2000.general)
  • Re: Encryption Problem
    ... If you did not back-up the encryption key or the Recovery Agent and ... Then my internal H/D died. ... this particular folder remains "access denied". ... > Do I need to use the "add recovery agent" process as ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Folder Encryption
    ... Go to Help and Support and type in "Recovery Agent" and there will be ... > my file system to NTFS last night... ... so that I understand encryption more fully? ... >>> a folder on my computer, ...
    (microsoft.public.windowsxp.security_admin)