How do you use the Data Recovery Agent?

[Guest]

Just log in as the DRA right? but it is not working for me.
When i use efsinfo /y i get nothing at all, even though i have imported the
DRA cert into the certifications on the local machine using the mmc plug in.

please help

 

[Guest]

You don't say what it is you are trying to do--install a recovery policy or
recover a file. To install a recovery policy, you must add the certificate
to your local group policy. It will then apply to new files that you encrypt
or previously-encrypted files that you modify. To recover a file, you must
first import the .pfx file for your recovery certificate into your Personal
certificates store. Note that the only files that you can recover are those
to which the policy applied.

More details are here:
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx

Thanks.
Pat

 

[Steven L Umbach]

As Pat said you must import the .pfx file for the RA that contains the RA
private key and will prompt you for a password before you can open it. Also
you can access the properties of a file and look in advanced - details to
see if any RA are associated with the file and the thumbprint for the
certificate that must match the thumbprint of the RA certificate being used.
The RA must also have full control permissions to the file in order to
decrypt them. --- Steve