I have a question - This was originally posted by wbafrank as Mondays Question of the Day ....

Q74. Who has the ability to open a file that was encrypted using the Windows 2000 Encrypted File System (EFS)? (Choose all that apply)

A. The user that encrypted the file
B. Domain Administrators
C. Power Users
D. Administrators

Correct Answers: A

Only the user that encrypts a file will be able to open it. However, recovery agents will be able to recover the file in the event that the user that encrypted it loses his/her file encryption certificate. The administrator of the local computer is the default recovery agent unless you are in a domain environment. In a domain environment, the domain administrator is the default recovery agent.
__________________

My Question is this .......... If only the user that encrypted the file can open it, what happens if the user leaves the company under a dark cloud and does not decrypt? We know that the Domain Administrator and the Administrator can act as recovery agents but does this mean that they can open the file too?

__________________
RIP Spike Milligan
"Beauty is in the eye of the beholder - get it out with Optrex."

Report this post to a moderator

quote:

---

Originally posted by cyrano duh
I have a question - This was originally posted by wbafrank as Mondays Question of the Day ....

Q74. Who has the ability to open a file that was encrypted using the Windows 2000 Encrypted File System (EFS)? (Choose all that apply)

A. The user that encrypted the file
B. Domain Administrators
C. Power Users
D. Administrators

Correct Answers: A

Only the user that encrypts a file will be able to open it. However, recovery agents will be able to recover the file in the event that the user that encrypted it loses his/her file encryption certificate. The administrator of the local computer is the default recovery agent unless you are in a domain environment. In a domain environment, the domain administrator is the default recovery agent.
__________________

My Question is this .......... If only the user that encrypted the file can open it, what happens if the user leaves the company under a dark cloud and does not decrypt? We know that the Domain Administrator and the Administrator can act as recovery agents but does this mean that they can open the file too?

---

Good question. A recovery agent can decrypt files. Once the file is decrypted, any user with permissions to read that file can access it. Also, encrypted files can become decrypted if you copy or move the file to a volume that is not an NTFS volumes.

Hope that helps!

__________________
Tech Shark
MCSE 2000
MCSA 2000 Charter Member
A+, Net+

Words to Live by:
"No! Try not. Do, or do not. There is no try!"

Einstein's theory of relativity:
"Put your hands on a hot pan, a second can seem like an hour. Grab hold of a hot woman, an hour can seem like a second... it's all relative!"

Sound Advice:
"You shouldn't take life too seriously. You'll never get out alive!"

Report this post to a moderator

So, are we now saying that the answer should have been A; B; and D?

__________________
RIP Spike Milligan
"Beauty is in the eye of the beholder - get it out with Optrex."

Report this post to a moderator

quote:

---

Originally posted by cyrano duh
So, are we now saying that the answer should have been A; B; and D?

---

No, because the question is asking "who can open an encrypted file?" Only the user that encrypted that file can open it. The only way a recovery agent can open that file is if they decrypt it.

Check out this link for more info.

http://www.microsoft.com/windows200...pt_overview.htm

__________________
Tech Shark
MCSE 2000
MCSA 2000 Charter Member
A+, Net+

Words to Live by:
"No! Try not. Do, or do not. There is no try!"

Einstein's theory of relativity:
"Put your hands on a hot pan, a second can seem like an hour. Grab hold of a hot woman, an hour can seem like a second... it's all relative!"

Sound Advice:
"You shouldn't take life too seriously. You'll never get out alive!"

Last edited by Teck Shark on 04-09-02 at 07:46 PM

Report this post to a moderator

Got it! Cheers.

__________________
RIP Spike Milligan
"Beauty is in the eye of the beholder - get it out with Optrex."

Report this post to a moderator

Good question cryrano.
Nice explanation Teck Shark.

Cheers!

__________________
"I was planning to take over the world, but got distracted by something sparkly..."

Report this post to a moderator

Teck Shark thank you for clarifying this.

__________________
One Exam leads to another! Where will it ever end?

Report this post to a moderator