Denied access to Encrypted file

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I'm testing EFS to ensure data recoverability, and get a
"Access is denied" message on one of my encrypted files now.

Here's what I did:
-Created an encrypted file in an encrypted folder as User#1
-Exported a certificate as User#1
-As User#2:Used the Import Certificate wizard to give them
access to the encrypted file.
- As User#2: Changed the name of the encrypted file.
- Now User#1 gets "Access denied" when trying to open the file.

I suppose if User#1 imports the saved Certificate/key he'll
be able to re-access the file, but this, needless to say,
makes me skeptical of using EFS. Any idea on how it happened?

Thanks in advance,

Kclark

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

You are doing well exporting and saving certificates when you use EFS.
EFS files were originaly not meant for sharing. In fact EFS version on
Win2000 does not allow sharing. If you wish to share encrypted files, please
check this info:
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prnb_efs_apgp.asp

Note. URL may wrap.

Dusko Savatovic


"kclark" <anonymous@discussions.microsoft.com> wrote in message
news:2deb01c4ec57$41b5f450$a401280a@phx.gbl...
> I'm testing EFS to ensure data recoverability, and get a
> "Access is denied" message on one of my encrypted files now.
>
> Here's what I did:
> -Created an encrypted file in an encrypted folder as User#1
> -Exported a certificate as User#1
> -As User#2:Used the Import Certificate wizard to give them
> access to the encrypted file.
> - As User#2: Changed the name of the encrypted file.
> - Now User#1 gets "Access denied" when trying to open the file.
>
> I suppose if User#1 imports the saved Certificate/key he'll
> be able to re-access the file, but this, needless to say,
> makes me skeptical of using EFS. Any idea on how it happened?
>
> Thanks in advance,
>
> Kclark