Access denied Error when trying to decrypt with Recovery Agent Use

[Guest]

Whenever I try to decrypt a user's file I get access denied.
The thumbprint in the recovery certificate and the thumbprint in the
encryption details dialog on the file match, but I still get access denied
when trying to de-crypt.

Ralf

 

[Galen]

In Ralf <[email protected]> had this to say:

My reply is at the bottom of your sent message:

Whenever I try to decrypt a user's file I get access denied.
The thumbprint in the recovery certificate and the thumbprint in the
encryption details dialog on the file match, but I still get access
denied when trying to de-crypt.

Ralf

Do you have ownership of the file? That's what I'd guess I suppose.

HOW TO: Take Ownership of Files:
http://support.microsoft.com/default.aspx?scid=kb;en-us;268019

Galen
--

"You know that a conjurer gets no credit when once he has explained his
trick; and if I show you too much of my method of working, you will
come to the conclusion that I am a very ordinary individual after all."

Sherlock Holmes

 

[Guest]

Hi Galen,

this seems not the problem. In an test envirement it works fine to decrypt
the file without taking ownership of this file if the user is a file recovery
agent.

Any other ideas

Ralf

 

[Galen]

In Ralf <[email protected]> had this to say:

My reply is at the bottom of your sent message:

Hi Galen,

this seems not the problem. In an test envirement it works fine to
decrypt the file without taking ownership of this file if the user is
a file recovery agent.

Any other ideas

Ralf

Take a peek here and see if this applies if you don't mind:

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q264064&ID=KB;EN-US;Q264064

Galen
--

"You know that a conjurer gets no credit when once he has explained his
trick; and if I show you too much of my method of working, you will
come to the conclusion that I am a very ordinary individual after all."

Sherlock Holmes

 

[Guest]

Hi Galen,

good idea but it wasn't the solution.

 

[Galen]

In Ralf <[email protected]> had this to say:

My reply is at the bottom of your sent message:

Hi Galen,

good idea but it wasn't the solution.

Well, I'm afraid I'm out of ideas. The designated recovery agent has the
correct certificate, the agent's able to recover other files without any
problems, and yet when you try to work with these specific files you're
getting an access denied message. I must confess this now goes beyond my
experiences, I've searched quite a bit and read through a section of the
book on EFS and the Recovery Agent and can't seem to think of any additional
reasons for this to happen. It might be something that someone might know in
the .general group of even over in security.crypto perhaps. But, to be
honest, I am out of answers. Sorry about that but, well, I don't know
everything. <g> Hmm... That Dave Patrick guy might know. He knows lots of
good stuffs. He's active in this group so maybe putting a ping with his name
in it into the subject of your answer/response to this might get his
attention. (Really, he seems to know FAR more about 2k than I do so he'd
likely have an alternative answer.) He seems disinclined to get grouchy and
probably won't grouch at either of us. <g>

Galen
--

"You know that a conjurer gets no credit when once he has explained his
trick; and if I show you too much of my method of working, you will
come to the conclusion that I am a very ordinary individual after all."

Sherlock Holmes

 

[Guest]

Hi Galen,

i think there is a misunderstanding in my problem.

The recovery agent can't decrypt any files.
Even new by users encryptet files can't be decrypted by the recovery agent.

Does this give any new ideas.

Ralf

 

[Galen]

In Ralf <[email protected]> had this to say:

My reply is at the bottom of your sent message:

Hi Galen,

i think there is a misunderstanding in my problem.

The recovery agent can't decrypt any files.
Even new by users encryptet files can't be decrypted by the recovery
agent.

Does this give any new ideas.

Ralf

Was the recovery agent created BEFORE the user?

Take a gander here:

http://www.answers.google.com/answers/threadview?id=569781

Galen
--

"You know that a conjurer gets no credit when once he has explained his
trick; and if I show you too much of my method of working, you will
come to the conclusion that I am a very ordinary individual after all."

Sherlock Holmes