How come EFS has locked me out of my files?

[Tim Daborn]

Hi,

I have a folder with some very important files which are encrypted using EFS
via the advanced properties dialog on the folder. There has been working
fine for quite a few months.

This evening I changed both my user and the administrative passwords.

When logged in as the user I then saw the option ‘manage your file
encryption certificates’ and in the subsequent window, I went to the help
topic ‘what is Encryption File System?’ I then read the topic ‘Back up your
key to prevent data loss.’

Following the instructions I exported my personal certificates using the
certificates manager. In the export wizard it did say that the private keys
could not be found - but I exported the certificates anyway to the default
file type. I also did this as the user which originally created the folder
half expecting to supply the Administrative password if required.

I then found I did not have access to the folder. If I try and move a file
out of the folder the system asks me for the Administrative password.
Regardless of whether I enter the old and new password the message appears
‘Destination folder access denied.’

What should I do to gain access back to my folder?

Thank you.

 

[H Brown]

Hi,

I have a folder with some very important files which are encrypted using
EFS
via the advanced properties dialog on the folder. There has been working
fine for quite a few months.

This evening I changed both my user and the administrative passwords.

When logged in as the user I then saw the option ‘manage your file
encryption certificates’ and in the subsequent window, I went to the help
topic ‘what is Encryption File System?’ I then read the topic ‘Back up
your
key to prevent data loss.’

Following the instructions I exported my personal certificates using the
certificates manager. In the export wizard it did say that the private
keys
could not be found - but I exported the certificates anyway to the default
file type. I also did this as the user which originally created the
folder
half expecting to supply the Administrative password if required.

I then found I did not have access to the folder. If I try and move a
file
out of the folder the system asks me for the Administrative password.
Regardless of whether I enter the old and new password the message appears
‘Destination folder access denied.’

What should I do to gain access back to my folder?

Thank you.

Just hold your horses. When you changed the password for the standard user
account it sounds as though you changed it from the/an admin account. If
so, that user loses all access to all of encrypted files.
By doing the change from admin to a standard user through an admin account
you made the master key inaccessible for that account.

Change your password back to the old password and that will decrypt the
master key.
Once you are back in control of things, remember Only change passwords or
names of accounts logging on to the account you are going to change.

H Brown

 

[Tim Daborn]

Many thanks.

I thought that if I did the reverse of one of the 2 actions, I would get
back my files. But I wasn't sure which action to take so I stopped until I
got some advice.

Changing the password back did the trick.

Thanks again.

 

[H Brown]

Your welcome
H Brown

Many thanks.

I thought that if I did the reverse of one of the 2 actions, I would get
back my files. But I wasn't sure which action to take so I stopped until I
got some advice.

Changing the password back did the trick.

Thanks again.