Hi all;
I'm using windows XP which I used it to encrypt the files. When I encrypt
it, the files and folder turns to green. I really amazed with it. But when
my computer have problems which I had to format it, I cannot access again
the files and it says you don't have access priviledge on it.
I cannot do it. I need some advice on it.
Please respond to me as soon as possible.
thanks

Regards
Jefrisalas

Re: Need help on my security files by Shawn

Shawn
Wed Aug 27 02:16:27 CDT 2003

If you have access to the original user profile that was logged on to when
the file was encrypted, Microsoft PSS has a tool to recover the data.
Otherwise you will not be able to get the files back.

More information on how this works:

309408 Troubleshooting the Data Protection API (DPAPI)
http://support.microsoft.com/?id=309408

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.


"Hj Jefri Al Salas" <jefrisalas@brunet.bn> wrote in message
news:u8wAHWGbDHA.1580@tk2msftngp13.phx.gbl...
> Hi all;
> I'm using windows XP which I used it to encrypt the files. When I encrypt
> it, the files and folder turns to green. I really amazed with it. But when
> my computer have problems which I had to format it, I cannot access again
> the files and it says you don't have access priviledge on it.
> I cannot do it. I need some advice on it.
> Please respond to me as soon as possible.
> thanks
>
> Regards
> Jefrisalas
>
>



Re: Need help on my security files by Bill

Bill
Wed Aug 27 09:45:23 CDT 2003

This is a good article, because it lays out the gotchas pretty clearly.

I wish that there were a version of this article written from an end-user's
perspective, however. The article as it appears seems to be oriented toward
developers, but the information in it, such as:
----------------------------------------------------------------------
You Cannot Access DPAPI Confidential Information After Reinstalling Windows
on a Stand-Alone Computer
By design, you cannot access DPAPI confidential information after you
install Windows on a stand-alone computer. The instance of the user that was
present on the original copy of Windows is destroyed after you re-install
the operating system without upgrading. Any new user that is created with
the same name has a different security principal in a different security
database. The new user does not have access to decrypt the DPAPI
confidential information of the original user. The user cannot access their
confidential information by using the user master key.

The original copy of Windows helps protect its copy of the master key with
confidential data that is known only to that copy of Windows. If you replace
the operating system, this confidential data cannot be accessed . The user
cannot access their confidential information by using the backup master key.
-------------------------------------------------------------
is very clearly stated and would be useful to end-users.


"Shawn Rabourn (MS)" <shawnrab@online.microsoft.com> wrote in message
news:uI80qsGbDHA.1384@TK2MSFTNGP10.phx.gbl...
> If you have access to the original user profile that was logged on to when
> the file was encrypted, Microsoft PSS has a tool to recover the data.
> Otherwise you will not be able to get the files back.
>
> More information on how this works:
>
> 309408 Troubleshooting the Data Protection API (DPAPI)
> http://support.microsoft.com/?id=309408
>
> --Shawn
> This posting is provided "AS IS" with no warranties and confers no rights.
>
>
> "Hj Jefri Al Salas" <jefrisalas@brunet.bn> wrote in message
> news:u8wAHWGbDHA.1580@tk2msftngp13.phx.gbl...
> > Hi all;
> > I'm using windows XP which I used it to encrypt the files. When I
encrypt
> > it, the files and folder turns to green. I really amazed with it. But
when
> > my computer have problems which I had to format it, I cannot access
again
> > the files and it says you don't have access priviledge on it.
> > I cannot do it. I need some advice on it.
> > Please respond to me as soon as possible.
> > thanks
> >
> > Regards
> > Jefrisalas
> >
> >
>
>



Re: Need help on my security files by Shawn

Shawn
Wed Aug 27 11:33:34 CDT 2003

We wrote it with the intent of writing it for end users. :)

It's not a bad mix of complex and simple in my completely biased opinion.

We appreciate the feedback.

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.


"Bill Sanderson" <Bill_Sanderson@msn.com.plugh.org> wrote in message
news:OO25WnKbDHA.2372@TK2MSFTNGP10.phx.gbl...
> This is a good article, because it lays out the gotchas pretty clearly.
>
> I wish that there were a version of this article written from an
end-user's
> perspective, however. The article as it appears seems to be oriented
toward
> developers, but the information in it, such as:
> ----------------------------------------------------------------------
> You Cannot Access DPAPI Confidential Information After Reinstalling
Windows
> on a Stand-Alone Computer
> By design, you cannot access DPAPI confidential information after you
> install Windows on a stand-alone computer. The instance of the user that
was
> present on the original copy of Windows is destroyed after you re-install
> the operating system without upgrading. Any new user that is created with
> the same name has a different security principal in a different security
> database. The new user does not have access to decrypt the DPAPI
> confidential information of the original user. The user cannot access
their
> confidential information by using the user master key.
>
> The original copy of Windows helps protect its copy of the master key with
> confidential data that is known only to that copy of Windows. If you
replace
> the operating system, this confidential data cannot be accessed . The user
> cannot access their confidential information by using the backup master
key.
> -------------------------------------------------------------
> is very clearly stated and would be useful to end-users.
>
>
> "Shawn Rabourn (MS)" <shawnrab@online.microsoft.com> wrote in message
> news:uI80qsGbDHA.1384@TK2MSFTNGP10.phx.gbl...
> > If you have access to the original user profile that was logged on to
when
> > the file was encrypted, Microsoft PSS has a tool to recover the data.
> > Otherwise you will not be able to get the files back.
> >
> > More information on how this works:
> >
> > 309408 Troubleshooting the Data Protection API (DPAPI)
> > http://support.microsoft.com/?id=309408
> >
> > --Shawn
> > This posting is provided "AS IS" with no warranties and confers no
rights.
> >
> >
> > "Hj Jefri Al Salas" <jefrisalas@brunet.bn> wrote in message
> > news:u8wAHWGbDHA.1580@tk2msftngp13.phx.gbl...
> > > Hi all;
> > > I'm using windows XP which I used it to encrypt the files. When I
> encrypt
> > > it, the files and folder turns to green. I really amazed with it. But
> when
> > > my computer have problems which I had to format it, I cannot access
> again
> > > the files and it says you don't have access priviledge on it.
> > > I cannot do it. I need some advice on it.
> > > Please respond to me as soon as possible.
> > > thanks
> > >
> > > Regards
> > > Jefrisalas
> > >
> > >
> >
> >
>
>



Re: Need help on my security files by Bill

Bill
Wed Aug 27 12:20:54 CDT 2003

As somebody who needs the "simple" end of things, I agree.

Now to figure out how to get the information referenced in a way that would
enable end users of EFS to find it, ideally as they begin to consider
implementation.


"Shawn Rabourn (MS)" <shawnrab@online.microsoft.com> wrote in message
news:eDDK2jLbDHA.2372@TK2MSFTNGP10.phx.gbl...
> We wrote it with the intent of writing it for end users. :)
>
> It's not a bad mix of complex and simple in my completely biased opinion.
>
> We appreciate the feedback.
>
> --Shawn
> This posting is provided "AS IS" with no warranties and confers no rights.
>
>
> "Bill Sanderson" <Bill_Sanderson@msn.com.plugh.org> wrote in message
> news:OO25WnKbDHA.2372@TK2MSFTNGP10.phx.gbl...
> > This is a good article, because it lays out the gotchas pretty clearly.
> >
> > I wish that there were a version of this article written from an
> end-user's
> > perspective, however. The article as it appears seems to be oriented
> toward
> > developers, but the information in it, such as:
> > ----------------------------------------------------------------------
> > You Cannot Access DPAPI Confidential Information After Reinstalling
> Windows
> > on a Stand-Alone Computer
> > By design, you cannot access DPAPI confidential information after you
> > install Windows on a stand-alone computer. The instance of the user that
> was
> > present on the original copy of Windows is destroyed after you
re-install
> > the operating system without upgrading. Any new user that is created
with
> > the same name has a different security principal in a different security
> > database. The new user does not have access to decrypt the DPAPI
> > confidential information of the original user. The user cannot access
> their
> > confidential information by using the user master key.
> >
> > The original copy of Windows helps protect its copy of the master key
with
> > confidential data that is known only to that copy of Windows. If you
> replace
> > the operating system, this confidential data cannot be accessed . The
user
> > cannot access their confidential information by using the backup master
> key.
> > -------------------------------------------------------------
> > is very clearly stated and would be useful to end-users.
> >
> >
> > "Shawn Rabourn (MS)" <shawnrab@online.microsoft.com> wrote in message
> > news:uI80qsGbDHA.1384@TK2MSFTNGP10.phx.gbl...
> > > If you have access to the original user profile that was logged on to
> when
> > > the file was encrypted, Microsoft PSS has a tool to recover the data.
> > > Otherwise you will not be able to get the files back.
> > >
> > > More information on how this works:
> > >
> > > 309408 Troubleshooting the Data Protection API (DPAPI)
> > > http://support.microsoft.com/?id=309408
> > >
> > > --Shawn
> > > This posting is provided "AS IS" with no warranties and confers no
> rights.
> > >
> > >
> > > "Hj Jefri Al Salas" <jefrisalas@brunet.bn> wrote in message
> > > news:u8wAHWGbDHA.1580@tk2msftngp13.phx.gbl...
> > > > Hi all;
> > > > I'm using windows XP which I used it to encrypt the files. When I
> > encrypt
> > > > it, the files and folder turns to green. I really amazed with it.
But
> > when
> > > > my computer have problems which I had to format it, I cannot access
> > again
> > > > the files and it says you don't have access priviledge on it.
> > > > I cannot do it. I need some advice on it.
> > > > Please respond to me as soon as possible.
> > > > thanks
> > > >
> > > > Regards
> > > > Jefrisalas
> > > >
> > > >
> > >
> > >
> >
> >
>
>



Re: Need help on my security files by Vanguard

Vanguard
Wed Aug 27 21:44:18 CDT 2003

"Shawn Rabourn (MS)" <shawnrab@online.microsoft.com> wrote in message
news:uI80qsGbDHA.1384@TK2MSFTNGP10.phx.gbl
> If you have access to the original user profile that was logged on to
> when the file was encrypted, Microsoft PSS has a tool to recover the
> data. Otherwise you will not be able to get the files back.
>
> More information on how this works:
>
> 309408 Troubleshooting the Data Protection API (DPAPI)
> http://support.microsoft.com/?id=309408
>
> --Shawn
> This posting is provided "AS IS" with no warranties and confers no
> rights.
>
>
> "Hj Jefri Al Salas" <jefrisalas@brunet.bn> wrote in message
> news:u8wAHWGbDHA.1580@tk2msftngp13.phx.gbl...
>> Hi all;
>> I'm using windows XP which I used it to encrypt the files. When I
>> encrypt it, the files and folder turns to green. I really amazed
>> with it. But when my computer have problems which I had to format
>> it, I cannot access again the files and it says you don't have
>> access priviledge on it.
>> I cannot do it. I need some advice on it.
>> Please respond to me as soon as possible.
>> thanks
>>
>> Regards
>> Jefrisalas

So exporting the security certificates onto a floppy and locking it away
for when the inevitable reinstall is required doesn't work? It's been a
few months, but I recall that I could use the exported certificate to
import it to gain access to an EFS-encrypted data directory that had
been backed up and then restored off tape. I haven't yet bothered to
get Windows XP (not enough bang for the buck or time) but I would think
EFS in Windows XP is similar to EFS in Windows 2000.

http://support.microsoft.com/default.aspx?scid=kb;en-us;242296


--
____________________________________________________________
** Share with others. Post replies in the newsgroup.
** If present, remove all "-nix" from my email address.
____________________________________________________________




Re: Need help on my security files by Hj

Hj
Wed Aug 27 21:54:19 CDT 2003

Hi there;
I appreciate the comments but its says," replace the operating system" I
think is not the same as format the OS.
So in my case I cannot use the green color which I encrypted earlier.
Please comment.
thanks

"Shawn Rabourn (MS)" <shawnrab@online.microsoft.com> wrote in message
news:uI80qsGbDHA.1384@TK2MSFTNGP10.phx.gbl...
> If you have access to the original user profile that was logged on to when
> the file was encrypted, Microsoft PSS has a tool to recover the data.
> Otherwise you will not be able to get the files back.
>
> More information on how this works:
>
> 309408 Troubleshooting the Data Protection API (DPAPI)
> http://support.microsoft.com/?id=309408
>
> --Shawn
> This posting is provided "AS IS" with no warranties and confers no rights.
>
>
> "Hj Jefri Al Salas" <jefrisalas@brunet.bn> wrote in message
> news:u8wAHWGbDHA.1580@tk2msftngp13.phx.gbl...
> > Hi all;
> > I'm using windows XP which I used it to encrypt the files. When I
encrypt
> > it, the files and folder turns to green. I really amazed with it. But
when
> > my computer have problems which I had to format it, I cannot access
again
> > the files and it says you don't have access priviledge on it.
> > I cannot do it. I need some advice on it.
> > Please respond to me as soon as possible.
> > thanks
> >
> > Regards
> > Jefrisalas
> >
> >
>
>



Re: Need help on my security files by Bill

Bill
Thu Aug 28 00:27:58 CDT 2003

It's improved:

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/deploy/CryptFS.asp

"Vanguard" <rztqf6v02-NIX@sneakemail-NIX.com> wrote in message
news:OF3fI5QbDHA.1488@TK2MSFTNGP12.phx.gbl...
> "Shawn Rabourn (MS)" <shawnrab@online.microsoft.com> wrote in message
> news:uI80qsGbDHA.1384@TK2MSFTNGP10.phx.gbl
> > If you have access to the original user profile that was logged on to
> > when the file was encrypted, Microsoft PSS has a tool to recover the
> > data. Otherwise you will not be able to get the files back.
> >
> > More information on how this works:
> >
> > 309408 Troubleshooting the Data Protection API (DPAPI)
> > http://support.microsoft.com/?id=309408
> >
> > --Shawn
> > This posting is provided "AS IS" with no warranties and confers no
> > rights.
> >
> >
> > "Hj Jefri Al Salas" <jefrisalas@brunet.bn> wrote in message
> > news:u8wAHWGbDHA.1580@tk2msftngp13.phx.gbl...
> >> Hi all;
> >> I'm using windows XP which I used it to encrypt the files. When I
> >> encrypt it, the files and folder turns to green. I really amazed
> >> with it. But when my computer have problems which I had to format
> >> it, I cannot access again the files and it says you don't have
> >> access priviledge on it.
> >> I cannot do it. I need some advice on it.
> >> Please respond to me as soon as possible.
> >> thanks
> >>
> >> Regards
> >> Jefrisalas
>
> So exporting the security certificates onto a floppy and locking it away
> for when the inevitable reinstall is required doesn't work? It's been a
> few months, but I recall that I could use the exported certificate to
> import it to gain access to an EFS-encrypted data directory that had
> been backed up and then restored off tape. I haven't yet bothered to
> get Windows XP (not enough bang for the buck or time) but I would think
> EFS in Windows XP is similar to EFS in Windows 2000.
>
> http://support.microsoft.com/default.aspx?scid=kb;en-us;242296
>
>
> --
> ____________________________________________________________
> ** Share with others. Post replies in the newsgroup.
> ** If present, remove all "-nix" from my email address.
> ____________________________________________________________
>
>
>