deleted user remains

G

Guest

I have a shared computer that i set up accounts for users on.

I set up an account for a new user, that was encrypted, and restriced from
other users.

When i deleted that accout a month later, (hitting "delete files" when givin
the option), the files remained.

All of the deleted files temp internet files and cookies became files
available for every user!!!!!!!!!!!!!!
 
S

Steven L Umbach

Well it sounds like something went wrong. Normally files in a user's profile
under documents and settings are available only to the user and maybe users
in the administrators group which may be what is happening in your case if
the users that can access are local administrators. EFS encrypted files by
default would only be able to be decrypted by the user that encrypted the
files though he could have "shared" the ability for others to decrypt the
files if they had needed NTFS permissions to the files. Anyhow if you no
longer want the files then logon as an administrator and delete them. On a
shared computer I suggest that you use cipher /w:c\ [assuming files are on C
drive] afterwards to make sure the files are not recoverable if they have
information you do not want others to see especially if other users are in
the local administrators group. --- Steve
 
G

Guest

That is what is strange. I have since reproduced this issue. i create an
account "User 1" , encryt it, and deny other users access. The i use the
account on the internet. I then go to another admin account, delete the
account "user 1". I get a promt, do i want to delete all files or move them.
I choose, delete them.

the account is gone, the folders remain for everyuser to see

How is that possible?

Steven L Umbach said:
Well it sounds like something went wrong. Normally files in a user's profile
under documents and settings are available only to the user and maybe users
in the administrators group which may be what is happening in your case if
the users that can access are local administrators. EFS encrypted files by
default would only be able to be decrypted by the user that encrypted the
files though he could have "shared" the ability for others to decrypt the
files if they had needed NTFS permissions to the files. Anyhow if you no
longer want the files then logon as an administrator and delete them. On a
shared computer I suggest that you use cipher /w:c\ [assuming files are on C
drive] afterwards to make sure the files are not recoverable if they have
information you do not want others to see especially if other users are in
the local administrators group. --- Steve


Security Help said:
I have a shared computer that i set up accounts for users on.

I set up an account for a new user, that was encrypted, and restriced from
other users.

When i deleted that accout a month later, (hitting "delete files" when
givin
the option), the files remained.

All of the deleted files temp internet files and cookies became files
available for every user!!!!!!!!!!!!!!
 
S

Steven L Umbach

Exactly what do you do when you "encrypt it" and how are you denying other
users access and are those users also local administrators? You also can
delete a users profile by logging on as an administrator, going to system
properties/advanced - user profile settings, selecting the user profile and
then delete. Doing such will only delete any files in the user's profile
under documents and settings\user name folder. -- Steve


Security Help said:
That is what is strange. I have since reproduced this issue. i create an
account "User 1" , encryt it, and deny other users access. The i use the
account on the internet. I then go to another admin account, delete the
account "user 1". I get a promt, do i want to delete all files or move
them.
I choose, delete them.

the account is gone, the folders remain for everyuser to see

How is that possible?

Steven L Umbach said:
Well it sounds like something went wrong. Normally files in a user's
profile
under documents and settings are available only to the user and maybe
users
in the administrators group which may be what is happening in your case
if
the users that can access are local administrators. EFS encrypted files
by
default would only be able to be decrypted by the user that encrypted the
files though he could have "shared" the ability for others to decrypt the
files if they had needed NTFS permissions to the files. Anyhow if you no
longer want the files then logon as an administrator and delete them. On
a
shared computer I suggest that you use cipher /w:c\ [assuming files are
on C
drive] afterwards to make sure the files are not recoverable if they have
information you do not want others to see especially if other users are
in
the local administrators group. --- Steve


message
I have a shared computer that i set up accounts for users on.

I set up an account for a new user, that was encrypted, and restriced
from
other users.

When i deleted that accout a month later, (hitting "delete files" when
givin
the option), the files remained.

All of the deleted files temp internet files and cookies became files
available for every user!!!!!!!!!!!!!!
 
G

Guest

to encrypt the file, i am rigtht click, properties, advanced, "encrypt
contents to secure date"

then i am clicking properties, sharing, and removing all users, except the
"user a" from the list of allowed users.

when i delete the user, i am using control panel, users, delete user



Steven L Umbach said:
Exactly what do you do when you "encrypt it" and how are you denying other
users access and are those users also local administrators? You also can
delete a users profile by logging on as an administrator, going to system
properties/advanced - user profile settings, selecting the user profile and
then delete. Doing such will only delete any files in the user's profile
under documents and settings\user name folder. -- Steve


Security Help said:
That is what is strange. I have since reproduced this issue. i create an
account "User 1" , encryt it, and deny other users access. The i use the
account on the internet. I then go to another admin account, delete the
account "user 1". I get a promt, do i want to delete all files or move
them.
I choose, delete them.

the account is gone, the folders remain for everyuser to see

How is that possible?

Steven L Umbach said:
Well it sounds like something went wrong. Normally files in a user's
profile
under documents and settings are available only to the user and maybe
users
in the administrators group which may be what is happening in your case
if
the users that can access are local administrators. EFS encrypted files
by
default would only be able to be decrypted by the user that encrypted the
files though he could have "shared" the ability for others to decrypt the
files if they had needed NTFS permissions to the files. Anyhow if you no
longer want the files then logon as an administrator and delete them. On
a
shared computer I suggest that you use cipher /w:c\ [assuming files are
on C
drive] afterwards to make sure the files are not recoverable if they have
information you do not want others to see especially if other users are
in
the local administrators group. --- Steve


message
I have a shared computer that i set up accounts for users on.

I set up an account for a new user, that was encrypted, and restriced
from
other users.

When i deleted that accout a month later, (hitting "delete files" when
givin
the option), the files remained.

All of the deleted files temp internet files and cookies became files
available for every user!!!!!!!!!!!!!!
 
S

Steven L Umbach

"Share" permissions only manage what users have access to the share from
network computers and in no way control access to users that logon locally.
For that you need to modify NTFS permissions that you see in the properties
of a folder/file under security when simple file sharing is disabled. Open
Windows Explorer and go to tools/folder options view and uncheck the last
option for use simple file sharing.

As far as encrypting files you seem to indicate that you are encrypting
individual files and not in the folder properties where the files live which
is how it should be done since then any file created in the folder will then
be encrypted. Also you should never encrypt the entire user profile but can
encrypt folders in it such as my documents, etc. --- Steve


Security Help said:
to encrypt the file, i am rigtht click, properties, advanced, "encrypt
contents to secure date"

then i am clicking properties, sharing, and removing all users, except the
"user a" from the list of allowed users.

when i delete the user, i am using control panel, users, delete user



Steven L Umbach said:
Exactly what do you do when you "encrypt it" and how are you denying
other
users access and are those users also local administrators? You also can
delete a users profile by logging on as an administrator, going to system
properties/advanced - user profile settings, selecting the user profile
and
then delete. Doing such will only delete any files in the user's profile
under documents and settings\user name folder. -- Steve


Security Help said:
That is what is strange. I have since reproduced this issue. i create
an
account "User 1" , encryt it, and deny other users access. The i use
the
account on the internet. I then go to another admin account, delete
the
account "user 1". I get a promt, do i want to delete all files or move
them.
I choose, delete them.

the account is gone, the folders remain for everyuser to see

How is that possible?

:

Well it sounds like something went wrong. Normally files in a user's
profile
under documents and settings are available only to the user and maybe
users
in the administrators group which may be what is happening in your
case
if
the users that can access are local administrators. EFS encrypted
files
by
default would only be able to be decrypted by the user that encrypted
the
files though he could have "shared" the ability for others to decrypt
the
files if they had needed NTFS permissions to the files. Anyhow if you
no
longer want the files then logon as an administrator and delete them.
On
a
shared computer I suggest that you use cipher /w:c\ [assuming files
are
on C
drive] afterwards to make sure the files are not recoverable if they
have
information you do not want others to see especially if other users
are
in
the local administrators group. --- Steve


message
I have a shared computer that i set up accounts for users on.

I set up an account for a new user, that was encrypted, and
restriced
from
other users.

When i deleted that accout a month later, (hitting "delete files"
when
givin
the option), the files remained.

All of the deleted files temp internet files and cookies became
files
available for every user!!!!!!!!!!!!!!
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top