URGENT HELP

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

DEAR ALL,

I HAVE SOMETHING HAPPEN TO MY USERS.

I HAVE 5 USERS, ALL OF THEM IS UNDER THE SAME WORKGROUP, AND ALL OF THEM IS
WINDOWS XP-PRO SP2.

THEY ARE IN DIFFERENT WORKGROUP, THAN MY ORIGINAL WORKGROUP, BECAUSE THE 5
USERS ARE FROM ANOTHER CONSULTANT COMPANY AND THEY ARE WORKING FOR PERIODE OF
8 MONTHS.

ANYWAY, ONE OF THE USERS, HE WAS WORKING ON HIS PC, AND USED TO SAVE HIS
FILES - EITHER IF ITS WORD OR EXCEL, ON ONTHER FOLDER.

HE USED TO LOGIN TO HIS PC WITH THE USER NAME ( YTR) AND THIS USERS IS FROM
ADMINISTRATIVE GORUP.

FOR SOME RESOANS, THIS USERS HE MAKE ENCRYPTED FILE SYSTEM OVER THIS FOLDER
AND ALL OF THE FILES WHICH IS UNDER THIS FOLDER.

AFTER SOMETIME, THIS USERS WE DISCOVER TAHT HE FORMATE HIS PC COMPLETELY ,
EXCEPT THE PARTITION WHICH IS INCLUDE HIS FOLDER - THE ONE WHICH WAS
ENCRYPTED-.

AFTER HE FORMATE HIS PC COMPLETELY, HE CREATE THE SAME USER ON THE MACHINE ,
AND THEN HE TRIED TO OPEN THE FILES, NAD HE DISCOVER THAT HE IS UNABLE TO
OPEN , AND WINDOWS DISPLAY ERRO MESSAGE THAT INDICATE HE DOES NOT HAVE A
COMPLETE PREVILGES .

I LOOKED TO PERMISSION AND I FOUND THAT , EVEN THE USER HIM SELF IS HAVE
FULL CONTROL OVER THIS FOLDER AND ALSO EVERYONE HAVE THE SAME PERMISSION .

HOWVER HE IS UNABLE TO OPEN THE FILE.

ONCE I TRIED TO UNCHECK THE MARK FOR EFS, I FOUND THAT ITS DISPLAY ERROR
MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS DENIED.

CAN ANY ONE TELL ME HOW CAN I OPEN THE FILES AND LET ME SEE IT?

THE MAIN THING WE FORMATE THE PC COMPLETELY.

I DO NOT KNOW IF I AM CORRECT ON THIS PLAN, WHICH IS THE FOLLOWING:-

1- As LONG AS THEY ARE 5 USERS, AND ALL OF THEM ARE UNDER THE SAME
WORKGROUP, CAN I COPY THE CERTIFICATE FROMT HE OTHER USER AS WELL AND THEN
TRY TO REMOVE THE ENCRIPTION.

I WAS TRYING EVEN TO CHANGE THE OWNERSHIP, BUT ITS COULD NOT WORK.

PLEASE ADVICE ME .

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

In article <E252CA2F-F04C-4BF5-B356-3058CE02131A@microsoft.com>,
MedoinEgypt@discussions.microsoft.com says...
> ANYWAY, ONE OF THE USERS, HE WAS WORKING ON HIS PC, AND USED TO SAVE HIS
> FILES - EITHER IF ITS WORD OR EXCEL, ON ONTHER FOLDER.
>
> HE USED TO LOGIN TO HIS PC WITH THE USER NAME ( YTR) AND THIS USERS IS FROM
> ADMINISTRATIVE GORUP.
>
> FOR SOME RESOANS, THIS USERS HE MAKE ENCRYPTED FILE SYSTEM OVER THIS FOLDER
> AND ALL OF THE FILES WHICH IS UNDER THIS FOLDER.
>
> AFTER SOMETIME, THIS USERS WE DISCOVER TAHT HE FORMATE HIS PC COMPLETELY ,
> EXCEPT THE PARTITION WHICH IS INCLUDE HIS FOLDER - THE ONE WHICH WAS
> ENCRYPTED-.
>
> AFTER HE FORMATE HIS PC COMPLETELY, HE CREATE THE SAME USER ON THE MACHINE ,
> AND THEN HE TRIED TO OPEN THE FILES, NAD HE DISCOVER THAT HE IS UNABLE TO
> OPEN , AND WINDOWS DISPLAY ERRO MESSAGE THAT INDICATE HE DOES NOT HAVE A
> COMPLETE PREVILGES .
>
> I LOOKED TO PERMISSION AND I FOUND THAT , EVEN THE USER HIM SELF IS HAVE
> FULL CONTROL OVER THIS FOLDER AND ALSO EVERYONE HAVE THE SAME PERMISSION .
>
> HOWVER HE IS UNABLE TO OPEN THE FILE.
>
> ONCE I TRIED TO UNCHECK THE MARK FOR EFS, I FOUND THAT ITS DISPLAY ERROR
> MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS DENIED.
>
> CAN ANY ONE TELL ME HOW CAN I OPEN THE FILES AND LET ME SEE IT?

Since he didn't backup his encryption key you can not recover the files
- at least not through any normal means that I know of.

EFS IS A BAD THING, DON'T USE IT.

--

spam999free@rrohio.com
remove 999 in order to email me

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

ok,

thanks for your reply,

but i want to know the answer for these questions, please help me,

1- is there anyway to solve this situation, either if i am using 3rd Party
software, or is there any thing i can do it to let this files to open and
delete the encryption ?

2- in the future, how can i make the backup for the Keys and how can i
restore them , in order to make a good plan for that , please help me , can
you please .

3- can i make a copy from the key of the other user who in the same
workgroup, or the key for the Administrator of the domain to solve this
Problem, can I ? if so can you tell me the required steps to solve this
situation as soon as possible ?

4- can i use the Administrator account of my Workgroup, and do the same
steps like step no 3, please help me

Please help me.

"Leythos" wrote:

> In article <E252CA2F-F04C-4BF5-B356-3058CE02131A@microsoft.com>,
> MedoinEgypt@discussions.microsoft.com says...
> > ANYWAY, ONE OF THE USERS, HE WAS WORKING ON HIS PC, AND USED TO SAVE HIS
> > FILES - EITHER IF ITS WORD OR EXCEL, ON ONTHER FOLDER.
> >
> > HE USED TO LOGIN TO HIS PC WITH THE USER NAME ( YTR) AND THIS USERS IS FROM
> > ADMINISTRATIVE GORUP.
> >
> > FOR SOME RESOANS, THIS USERS HE MAKE ENCRYPTED FILE SYSTEM OVER THIS FOLDER
> > AND ALL OF THE FILES WHICH IS UNDER THIS FOLDER.
> >
> > AFTER SOMETIME, THIS USERS WE DISCOVER TAHT HE FORMATE HIS PC COMPLETELY ,
> > EXCEPT THE PARTITION WHICH IS INCLUDE HIS FOLDER - THE ONE WHICH WAS
> > ENCRYPTED-.
> >
> > AFTER HE FORMATE HIS PC COMPLETELY, HE CREATE THE SAME USER ON THE MACHINE ,
> > AND THEN HE TRIED TO OPEN THE FILES, NAD HE DISCOVER THAT HE IS UNABLE TO
> > OPEN , AND WINDOWS DISPLAY ERRO MESSAGE THAT INDICATE HE DOES NOT HAVE A
> > COMPLETE PREVILGES .
> >
> > I LOOKED TO PERMISSION AND I FOUND THAT , EVEN THE USER HIM SELF IS HAVE
> > FULL CONTROL OVER THIS FOLDER AND ALSO EVERYONE HAVE THE SAME PERMISSION .
> >
> > HOWVER HE IS UNABLE TO OPEN THE FILE.
> >
> > ONCE I TRIED TO UNCHECK THE MARK FOR EFS, I FOUND THAT ITS DISPLAY ERROR
> > MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS DENIED.
> >
> > CAN ANY ONE TELL ME HOW CAN I OPEN THE FILES AND LET ME SEE IT?
>
> Since he didn't backup his encryption key you can not recover the files
> - at least not through any normal means that I know of.
>
> EFS IS A BAD THING, DON'T USE IT.
>
> --
>
> spam999free@rrohio.com
> remove 999 in order to email me
>

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

In article <15ACDF2D-953B-4F0D-8DDC-5B5FEE1F3E21@microsoft.com>,
MedoinEgypt@discussions.microsoft.com says...
> ok,
>
> thanks for your reply,
>
> but i want to know the answer for these questions, please help me,
>
> 1- is there anyway to solve this situation, either if i am using 3rd Party
> software, or is there any thing i can do it to let this files to open and
> delete the encryption ?

There are third-party tools, but I've never used them, so I can't
recommend any.

> 2- in the future, how can i make the backup for the Keys and how can i
> restore them , in order to make a good plan for that , please help me , can
> you please .

There are many Microsoft documents on their website about EFS, just read
a few.

> 3- can i make a copy from the key of the other user who in the same
> workgroup, or the key for the Administrator of the domain to solve this
> Problem, can I ? if so can you tell me the required steps to solve this
> situation as soon as possible ?

If the computer with the files was a domain member in the network, then
you can recover the files as an administrator of the domain - at least
that's the way it reads in the Microsoft articles.

> 4- can i use the Administrator account of my Workgroup, and do the same
> steps like step no 3, please help me

No, the SID is different on every computer in a "Workgroup".

> Please help me.

If you're really in a bind, call Microsoft Support and pay for real,
quality support - the cost may be worth what you recover.


--

spam999free@rrohio.com
remove 999 in order to email me