How to get full access to all contents?

[Dmitriy Kopnichev]

ms-its:C:\WINDOWS\Help\ntcmds.chm::/cipher.htm and cipher help don't say
anything about Users Who Can Transparently Access a File or Data Recovery
Agents For a File.

NGs trimmed to security_admin

But what does cipher say ? The same ?
For the file to have an associated recovery agent
of Administrator it seems you had to have configured
a recovery agent (in XP). Was this machine a clean
install or an upgrade from W2k ??

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

"Data Recovery Agents For This File As Defined By Recovery Policy" is
"Administrator" is written in "Encryption Details for" the file window in
"Advanced Attributes" window.

http://support.microsoft.com/default.aspx?scid=kb;en-us;308993&Product=winxp Administrator.

I

tried to decrypt the file under the Administrator account and got

the
same

 

[Michael Solomon \(MS-MVP Windows Shell/User\)]

OK Roger, I think I got a little lost in this thread!

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

Sure, I understand, but we already covered that ground
back toward the beginning of this (? he has started so many)
thread.

--
Roger

I'm inclined to agree, Roger. Sometimes, however, when what is supposed to
work doesn't, it's worth a shot to try something that might be a cause but
isn't directly indicated. I didn't feel there was any harm in exploring the
option though I'm not sure if he can even take ownership of encrypted files.

That said, something he had said about changing the computer or workgroup
name, sorry I don't recall, triggered me to reconsider the possibility

of

a
file ownership issue.

--
Michael Solomon MS-MVP
Windows Shell/User
Backup is a PC User's Best Friend
DTS-L.Org: http://www.dts-l.org/

http://support.microsoft.com/default.aspx?scid=kb;en-us;308993&Product=winxp Administrator.

I

tried to decrypt the file under the Administrator account and got

the
same

 

[Roger Abell]

While logged in as an admin schedule a cmd prompt
to open in a couole minutes using task scheduler.
When the cmd prompt opens, it is running as System
(which is the local identity known to the domain
as machinename$).
There is no way I know of to actually log in as that
account, as you do not know the password.

 

[Roger Abell]

Sorry, I was being brain dead. The utility to use is
efsinfo.exe
that is part of the Support\Tools optional install on
the XP CD.
efsinfo /?
for usage info.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

ms-its:C:\WINDOWS\Help\ntcmds.chm::/cipher.htm and cipher help don't say
anything about Users Who Can Transparently Access a File or Data Recovery
Agents For a File.

NGs trimmed to security_admin

But what does cipher say ? The same ?
For the file to have an associated recovery agent
of Administrator it seems you had to have configured
a recovery agent (in XP). Was this machine a clean
install or an upgrade from W2k ??

http://support.microsoft.com/default.aspx?scid=kb;en-us;308993&Product=winxp

 

[Dmitriy Kopnichev]

I know all passwords used at my computer.

While logged in as an admin schedule a cmd prompt
to open in a couole minutes using task scheduler.
When the cmd prompt opens, it is running as System
(which is the local identity known to the domain
as machinename$).
There is no way I know of to actually log in as that
account, as you do not know the password.

 

[Dmitriy Kopnichev]

Should I rename my computer to ME? Will I retain access to domain resources?

 

[Dmitriy Kopnichev]

"Computer name changes
The following error occurred attempting to rename the computer to "ME":
Multiple connection to a server or shared resource by the same user, using
more than one user name, are not allowed. Disconnect all previous
connections to the server or shared resource." I haven't used more than one
user name. I have only one domain user name. How to disconnect all previous
connections to the server or shared resource?
Should I rename my computer to "ME" and become a member of "Workgroup"
instead of our domain?

 

[Dmitriy Kopnichev]

I became a member of the workgroup "WORKGROUP", renamed my computer to "ME",
scheduled a cmd prompt to open, tried to decrypt the file in the cmd prompt
and got the "Access denied" response.

 

[Dmitriy Kopnichev]

The efsinfo.exe says:
Users who can decrypt:
NT AUTHORITY\SYSTEM (ME$(ME$@WORKGROUP))
What account can decrypt the file?

NGs trimmed to security_admin

But what does cipher say ? The same ?
For the file to have an associated recovery agent
of Administrator it seems you had to have configured
a recovery agent (in XP). Was this machine a clean
install or an upgrade from W2k ??

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

"Data Recovery Agents For This File As Defined By Recovery Policy" is
"Administrator" is written in "Encryption Details for" the file window in
"Advanced Attributes" window.

http://support.microsoft.com/default.aspx?scid=kb;en-us;308993&Product=winxp Administrator.

I

tried to decrypt the file under the Administrator account and got

the
same