In news:AEB21461-6574-4F7D-AC8D-(E-Mail Removed),
Ralf <(E-Mail Removed)> had this to say:
My reply is at the bottom of your sent message:
> Hi Galen,
>
> good idea but it wasn't the solution.
>
>
>
> "Galen" wrote:
>
>> In news:B55ADED9-2564-499A-A2EB-(E-Mail Removed),
>> Ralf <(E-Mail Removed)> had this to say:
>>
>> My reply is at the bottom of your sent message:
>>
>>> Hi Galen,
>>>
>>> this seems not the problem. In an test envirement it works fine to
>>> decrypt the file without taking ownership of this file if the user
>>> is a file recovery agent.
>>>
>>> Any other ideas
>>>
>>> Ralf
>>>
>>> "Galen" wrote:
>>>
>>>> In news:A88B642A-630F-436E-90E5-(E-Mail Removed),
>>>> Ralf <(E-Mail Removed)> had this to say:
>>>>
>>>> My reply is at the bottom of your sent message:
>>>>
>>>>> Whenever I try to decrypt a user's file I get access denied.
>>>>> The thumbprint in the recovery certificate and the thumbprint in
>>>>> the encryption details dialog on the file match, but I still get
>>>>> access denied when trying to de-crypt.
>>>>>
>>>>> Ralf
>>>>
>>>> Do you have ownership of the file? That's what I'd guess I suppose.
>>>>
>>>> HOW TO: Take Ownership of Files:
>>>> http://support.microsoft.com/default...b;en-us;268019
>>>>
>>>> Galen
>>>> --
>>>>
>>>> "You know that a conjurer gets no credit when once he has explained
>>>> his trick; and if I show you too much of my method of working, you
>>>> will come to the conclusion that I am a very ordinary individual
>>>> after all."
>>>>
>>>> Sherlock Holmes
>>
>> Take a peek here and see if this applies if you don't mind:
>>
>> http://support.microsoft.com/default...;EN-US;Q264064
>>
>> Galen
>> --
>>
>> "You know that a conjurer gets no credit when once he has explained
>> his trick; and if I show you too much of my method of working, you
>> will come to the conclusion that I am a very ordinary individual
>> after all."
>>
>> Sherlock Holmes
Well, I'm afraid I'm out of ideas. The designated recovery agent has the
correct certificate, the agent's able to recover other files without any
problems, and yet when you try to work with these specific files you're
getting an access denied message. I must confess this now goes beyond my
experiences, I've searched quite a bit and read through a section of the
book on EFS and the Recovery Agent and can't seem to think of any additional
reasons for this to happen. It might be something that someone might know in
the .general group of even over in security.crypto perhaps. But, to be
honest, I am out of answers. Sorry about that but, well, I don't know
everything. <g> Hmm... That Dave Patrick guy might know. He knows lots of
good stuffs. He's active in this group so maybe putting a ping with his name
in it into the subject of your answer/response to this might get his
attention. (Really, he seems to know FAR more about 2k than I do so he'd
likely have an alternative answer.) He seems disinclined to get grouchy and
probably won't grouch at either of us. <g>
Galen
--
"You know that a conjurer gets no credit when once he has explained his
trick; and if I show you too much of my method of working, you will
come to the conclusion that I am a very ordinary individual after all."
Sherlock Holmes
Similar Threads
