Do I need another certificate?

G

Guest

I’m the administrator to the PC. XPpro, sp2, updated whenever security or
system updates are available.

A friend configured 2 years (or more) ago a folder (e.g. called “eventâ€) in
a partition (F:\), so that me only can store, read, edit and delete files or
subfolders in this folder.
He explained me at that time the dependencies of inheriting permissions etc.
When he finished, the folder turned green as well as all the subfolders and
files.
Now I had an OS crash (+/-6 weeks ago), cause unknown, but I suspect a photo
program. It was so bad, that I could not repair, nor restore the system. I
have the original OEM disk, from which the OS was originally loaded > 3 Years
ago.

I had to install XP “over†the existing, but defect OS. I have the OS and
only the most important (e.g. printer, graphic) on C:\. When I over installed
XP, I used the same admin password and names as > 3 years ago, of course.
I managed to get all back from the unsecured folders and files.
Now I cannot access any folder or file in “F:\eventâ€. All is still in green
letters.
Then I started with parent name F:\Properties\Security: I checked if the
administrator is still there, who is allowed to change security settings, all
fine.
Then I went to “event†\Properties\Security: , same procedure, all fine.
All folder names and subfolder names changed then to black, when I closed
that sub menu. Only the file names remain in green. When I try to uncheck in
“advanced Attributes†the “encrypt contents to secure data†and following
clicking on Apply, I get a message that access is denied and clicking ignore
or/and ignore all , changes not the attribute status of the files.
This is despite the security window of the file allowing the administrator
to change the settings.
Oh yes, I changed also the settings in the local auditing policy, to allow
the administrator to change those settings.
When I add a new file to any subfolder or to the “event†folder, the file
remains accessible.

I found in a (all) files\Properties\Advanced (where the encryption is
checked) \details the following entry:
Encryption details for F:\events\filename
Users who can Transparently access this File: ColumnUsername :
Name(Name@computername)
Column Certificate Thumbprint : a 40 digit access code, consisting of
letters and figures.
The username and code is in clear characters/numbers.
Obviously here is the key to the entry.
I cannot find the thumbprint certificate. The MMC is empty.

WHERE I have to add my name (again), because there is an ADD option, which
points to a location, which is empty (grayed-out, the MMC?). Or get a
certificate, which I can add via the ADD option.
This PC is the host to another client PC. No other network connection –
besides occasionally the Internet – exist.
I don’t know what to try/do next. Help is very much appreciated.
Thanks
Nopfusch



Menu item or description (not bold)

Name : names or characters entered in white fields (bold
 
G

Guest

nopfusch said:
I’m the administrator to the PC. XPpro, sp2, updated whenever security or
system updates are available.

A friend configured 2 years (or more) ago a folder (e.g. called “eventâ€) in
a partition (F:\), so that me only can store, read, edit and delete files or
subfolders in this folder.
He explained me at that time the dependencies of inheriting permissions etc.
When he finished, the folder turned green as well as all the subfolders and
files.
Now I had an OS crash (+/-6 weeks ago), cause unknown, but I suspect a photo
program. It was so bad, that I could not repair, nor restore the system. I
have the original OEM disk, from which the OS was originally loaded > 3 Years
ago.

I had to install XP “over†the existing, but defect OS. I have the OS and
only the most important (e.g. printer, graphic) on C:\. When I over installed
XP, I used the same admin password and names as > 3 years ago, of course.
I managed to get all back from the unsecured folders and files.
Now I cannot access any folder or file in “F:\eventâ€. All is still in green
letters.
Then I started with parent name F:\Properties\Security: I checked if the
administrator is still there, who is allowed to change security settings, all
fine.
Then I went to “event†\Properties\Security: , same procedure, all fine.
All folder names and subfolder names changed then to black, when I closed
that sub menu. Only the file names remain in green. When I try to uncheck in
“advanced Attributes†the “encrypt contents to secure data†and following
clicking on Apply, I get a message that access is denied and clicking ignore
or/and ignore all , changes not the attribute status of the files.
This is despite the security window of the file allowing the administrator
to change the settings.
Oh yes, I changed also the settings in the local auditing policy, to allow
the administrator to change those settings.
When I add a new file to any subfolder or to the “event†folder, the file
remains accessible.

I found in a (all) files\Properties\Advanced (where the encryption is
checked) \details the following entry:
Encryption details for F:\events\filename
Users who can Transparently access this File: ColumnUsername :
Name(Name@computername)
Column Certificate Thumbprint : a 40 digit access code, consisting of
letters and figures.
The username and code is in clear characters/numbers.
Obviously here is the key to the entry.
I cannot find the thumbprint certificate. The MMC is empty.

WHERE I have to add my name (again), because there is an ADD option, which
points to a location, which is empty (grayed-out, the MMC?). Or get a
certificate, which I can add via the ADD option.
This PC is the host to another client PC. No other network connection –
besides occasionally the Internet – exist.
I don’t know what to try/do next. Help is very much appreciated.
Thanks
Nopfusch

Menu item or description (not bold)

Name : names or characters entered in white fields
01 March 2007

02.March 2007
after I posted the above thread, I started reading this forum "Windows XP
Security and Administration".
It seems to be a Windows XP problem, that after a crash or crash repair, the
de-cryption of crypted files is irreparable, with 'normal' means.
Thanks to a thread (7.7.2006) I got an addres for recovering software. For
100 US the 1768 files were restored in less than 10 minutes.
Thanks for the tip.
nopfusch
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top