Can't encrypt files

[Guest]

I can't encrypt the decrypted files after reinstalling Windows XP. The system keeps telling me "Access is denied". I've taken the ownership of the whole disk, the whole folders and all of the files, and full control of all the files. I tried to give "SYSTEM" full control to make it work, but it still didn't work. I can compress all the files in this disk perfectly, but I just cannot encrypt them, what's the problem? Many thanks!!

 

[Roger Abell]

You cannot both compress and encrypt, one or the other.
Are you able to encrypt anything at any location in an
NTFS partition ? Is your problem just some places ?

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

I can't encrypt the decrypted files after reinstalling Windows XP. The

system keeps telling me "Access is denied". I've taken the ownership of the
whole disk, the whole folders and all of the files, and full control of all
the files. I tried to give "SYSTEM" full control to make it work, but it
still didn't work. I can compress all the files in this disk perfectly, but
I just cannot encrypt them, what's the problem? Many thanks!!

 

[Guest]

It seems that I can't encrypt any files in that disk(G, but I can encrypt the files in other disks(say J, and after encrypting, I moved them to G:, and they all keep encrypted. But that's too troublesome! In addition, I just want to know why, 'cause I've met this kind of problem twice. And, I am sure that, I CAN compress them, but CANNOT encrypt them ("Access is denied"). Thanks!

 

[Roger Abell]

Are you certain that all of G: is not marked for compression ?

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

It seems that I can't encrypt any files in that disk(G, but I can

encrypt the files in other disks(say J, and after encrypting, I moved them
to G:, and they all keep encrypted. But that's too troublesome! In addition,
I just want to know why, 'cause I've met this kind of problem twice. And, I
am sure that, I CAN compress them, but CANNOT encrypt them ("Access is
denied"). Thanks!

 

[Guest]

Yes, I am sure. I can tell between them from their colors. Compress files are blue, and Encrypted files are green, right? Do you remember the encryped files I moved from J: to G: (I can't encrypt any files in G:, but I can do that in J:, so I encrypted some files in J: and moved them to G: to make a test, the files remain encrypted in G:, G: is sure formated as NTFS)? It seems that they can't be dencrypted there(G too, but they work okay in Jboth encrypt and dencrypt). Have you ever met this situation before?

 

[Roger Abell]

Yes, I am sure. I can tell between them from their colors. Compress files

are blue, and Encrypted files are green, right? Do you remember the encryped
files I moved from J: to G: (I can't encrypt any files in G:, but I can do
that in J:, so I encrypted some files in J: and moved them to G: to make a
test, the files remain encrypted in G:, G: is sure formated as NTFS)? It
seems that they can't be dencrypted there(G too, but they work okay in
Jboth encrypt and dencrypt). Have you ever met this situation before?



Nope, never heard someone else describe this behavior.
There is a tool named efsinfo.exe (part of the optional
support \ tools installation from the CD) that might help
you to collect some more info.

 

[Guest]

I am sorry, but how to use that? I typed "efsinfo /u /r g:\new folder\" or "efsinfo /u /r g:\new folder\", it shows not thing at all, but "efsinfo g:\", it tells "G:.:Not encrypted".

 

[Guest]

Oh, I used this "efsinfo /u /c /s:G:\:" and it worked. All files are "not encrypted" and "Users who can decrypt: XXX\Administrator (Administrator(Administrator@XXX)), No recovery agent is found.". So what should I do now? Many thanks!

 

[Roger Abell]

I would inquire of the files, in orginal location and
then in moved location to see that they are in fact
the same. You should be told about the file (if it is
encrypted) what the thumbprint is of the user key that
is needed to access the file.
If this does not match the unmoved original then we
know something in the copying is fouling things.
If they do match, then we know something in how
they are being accessed after the move is what is
not working correctly.

--
Roger

Oh, I used this "efsinfo /u /c /s:G:\:" and it worked. All files are "not

encrypted" and "Users who can decrypt: XXX\Administrator
(Administrator(Administrator@XXX)), No recovery agent is found.". So what
should I do now? Many thanks!

 

[Guest]

Sorry, I can not quite follow you, could you please explain it again? Thanks!