|
Home > Archive > alt.certification.mcse > November 2003 > Antw: Re: Quick Question about encryption
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Antw: Re: Quick Question about encryption
|
|
|
| Hi!
Dont forget the SID!
My english is not so well, but....
If you use EFS Windows will use a Certificate. This Certificate is local
saved and only local Admins could decrypt files with this Cerificate. If its
lost you never could decrypt this files.
There is a tool to do this, but pleas dont ask me where it is.
cu
That is also my understanding.
But what i am wondering is if when someone encrypts a file / folder, it
puts
some sort of key unique to that installation of Windows, which only the
administrator / creator of the computer is able to decrypt.
Thanks,
"Fuse News" <tim_mclean_j@hotmail.com> wrote in message
news:3fc3b40e$0$22753$a0465688
@nnrp.fuse.net...[color=blue]
>
> "Denis Cooper" <denis@fivebirchhouse.eclipse.co.uk> wrote in message
> news:1069788175.878145@ananke.eclipse.net.uk...
reading[color=blue]
> up
> version
> folder.
what[color=blue]
> i
privlages,[color=blue]
> My understanding:
> The default Administrator account created when you load Win2k is the
> recovery agent for the PC and is able to decrypt any encrypted file on
the
> file system. Is that correct anyone?
>
>
| |
| Fuse News 2003-11-26, 11:25 am |
|
"Viper" <viper6543@gmx.de> wrote in message
news:bq0f27$6ne$06$2@news.t-online.com...
> Hi!
>
> Dont forget the SID!
>
> My english is not so well, but....
>
> If you use EFS Windows will use a Certificate. This Certificate is local
> saved and only local Admins could decrypt files with this Cerificate. If
its
> lost you never could decrypt this files.
>
> There is a tool to do this, but pleas dont ask me where it is.
>
> cu
>
> That is also my understanding.
>
> But what i am wondering is if when someone encrypts a file / folder, it
> puts
> some sort of key unique to that installation of Windows, which only the
> administrator / creator of the computer is able to decrypt.
>
> Thanks,
>
> "Fuse News" <tim_mclean_j@hotmail.com> wrote in message
> news:3fc3b40e$0$22753$a0465688
@nnrp.fuse.net...
> reading
> what
> privlages,
> the
>
>
>
>
Where is it? ;-> Anyway, I'm not sure wither of us has really answered your
question yet. Do you mean a PC that dual boots 2 different versions of
Windows2k? Like, Win2k and Win2kSP3? If so, I would say that logging into
Win2k and encrypting a folder, then booting to Win2kSP3 and trying to
decrypt with that Admin account will NOT work because the Recovery Agent
certificate is associated with the SID of the Win2k Admin account. This
theory is, as of yet, untested.
T
|
|
|
|
|