Question regarding encryption within windows directory

  • Thread starter Thread starter Roger
  • Start date Start date
R

Roger

I'm using XP pro, and want to encrypt a file located within the windows
directory. The file in question is not being used by any process and is
not needed to boot the computer, and is not set to read-only. Whenever I
try to encrypt the file, I get an access denied error. I have full
permissions. What is preventing the encryption?

Roger
 
Roger,

To my understanding i dont think XP will let you
encrypt any file even if its a Picture file, must have
something to do with protecting that drive- so you might
want to move this file out of the windows directory &
place it lets say in your "Documents Directory"
instead....please make sure you fully understand the
concepts of EFS as far too many people have lost important
data as results of not backing up *.PFX files
(key&Certificate) & creating a Recovery Agent.

Hope this helps

Jerry.
 
Actually, I don't recommend encrypting anything outside
your user profile folders anyway.
 
We block with access denied on any attempt to encrypt something under the
windows directory.

Will that file only be run in *your* user context? No other users on the
machine will ever need to run it? The system account won't need to use it?

If all of the answers were "yes", here's the workaround (not supported -
possibly very dangerous):
Move the file to someplace outside the windows directory. Encrypt it.
Move it back.

Caveats: If the file is in use, we also give access denied. If it's a
system file, it may be replaced by the file protection mechanism. If you
don't keep a plaintext copy of the file somewhere safe until you know this
works, you might not even be able to boot (depending on what this is). It's
always a good idea to export your certificate and private key to avoid data
loss.
 
Back
Top