I configured a gpo to allow efs exclusively with smartcards on a vista box in
a windows 2003 domain with a single domain running win2k3 sp1.
The DRA is also using an EFS recovery certificate that is on a smartcard.
I use the same box both for the user encrypting the file and the DRA trying
to recover/restore the file.
When I try recovering the file with the DRA designated user I'm prompted to
insert a smartcard but when I inset the DRA smartcard I get a error message
stating that the "wrong card is inserted."
When I insert the user's card everything works fine.
Checking the file encryption properties lists the designated DRA certificate
as the recovery certificate (certificate thumbprint) as detailed in the
appropriate admx file
Any Ideas?
--
Yariv Bashan
MSecurity