G
Guest
I have EFS problem with XP / XP SP1 & XP SP2. I don't have Active Directory
setup in the office and all XP are standalone workstations. I would like to
enable EFS on laptops. I understand XP does not have DRA setup by default so
I login as admin, create the .CER file and use MMC to set the admin as the
DRA. User can encrypt file and open the file even after password change.
However, when I login as admin and tried to open the EFS file by another
user, I got "access denied" error. When I use Windows Explorer to view the
properties of the file, it said admin is the recovery agent name. The thumb
print# is same as the admin certificate under MMC > Certificate > Personal >
admin.cer file.
In Window 2000 workstation, I used to able to login as admin and open the
EFS file encrypted by all users on the machine.
Am I missing other steps?
Thanks
Che
setup in the office and all XP are standalone workstations. I would like to
enable EFS on laptops. I understand XP does not have DRA setup by default so
I login as admin, create the .CER file and use MMC to set the admin as the
DRA. User can encrypt file and open the file even after password change.
However, when I login as admin and tried to open the EFS file by another
user, I got "access denied" error. When I use Windows Explorer to view the
properties of the file, it said admin is the recovery agent name. The thumb
print# is same as the admin certificate under MMC > Certificate > Personal >
admin.cer file.
In Window 2000 workstation, I used to able to login as admin and open the
EFS file encrypted by all users on the machine.
Am I missing other steps?
Thanks
Che