RE: encrypted files to ntfs

["David Gillett" <gillettdavid () fhda edu>]

  THAT approach relies on the local administrator being the default
recovery agent for EFS.  When the OS has been reinstalled, the new
local administrator account is *not* the account that was recovery
agent for the files when they were encrypted.
  There IS a workaround, but I think it involves exporting a particular
certificate from the local administrator account BEFORE reinstalling
the OS....

  [My recommendation to people is that they ignore EFS unless they are
using domain accounts, which will survive a local OS reinstall.]

David Gillett


> -----Original Message-----
> From: stephen at unix dot za dot net [mailto:stephen () unix za net]
> Sent: July 25, 2003 04:13
> To: Gerard Vignes
> Cc: security-basics () securityfocus com
> Subject: Re: encrypted files to ntfs
>
>
>
> there is a way, it was covered in my MSCE course, havent had 
> to do it in 2
> years, so for the life of me cant remember exactly how..
>
> it involves taking ownership of files and then decrypting, 
> sorry i cant
> think off hand exactly how :/   i'll skim thru my msce book 
> over the w/e
>
> On Thu, 24 Jul 2003, Gerard Vignes wrote:
>
> > Been There Done That
> >
> > My Net Admin told me "You should have backed up the key.  
> Without that,
> > there is nothing you can do".
> >
> > I was able to recover (some stuff) from older, nonencrypted backups.
> >
> >
> > > From: "sherban carlogea" <mebus () rdslink ro>
> > > To: <security-basics () securityfocus com>
> > > Subject: encrypted files to ntfs
> > > Date: Thu, 24 Jul 2003 18:07:53 +0300
> > >
> > > i have done a big mistake ...i have encrypted in windows 
> xp some personal
> > > files ....and i was haing some troubles with window, and 
> reinstall it
> > > now, the big problem .. is their any way to recover my 
> crypted file ?
> > > mebus
> >
> > -------------------------------------------------------------
> --------------
> > -------------------------------------------------------------
> ---------------
> > >
> >
> > _________________________________________________________________
> > The new MSN 8: advanced junk mail protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> --------------------------------------------------------------
> -------------
> >
> --------------------------------------------------------------
> --------------
> >
>
>
> --------------------------------------------------------------
> -------------
> --------------------------------------------------------------
> --------------

---------------------------------------------------------------------------
----------------------------------------------------------------------------