How come EFS has locked me out of my files?

Hi,

I have a folder with some very important files which are encrypted using EFS
via the advanced properties dialog on the folder. There has been working
fine for quite a few months.

This evening I changed both my user and the administrative passwords.

When logged in as the user I then saw the option ‘manage your file
encryption certificates’ and in the subsequent window, I went to the help
topic ‘what is Encryption File System?’ I then read the topic ‘Back up your
key to prevent data loss.’

Following the instructions I exported my personal certificates using the
certificates manager. In the export wizard it did say that the private keys
could not be found - but I exported the certificates anyway to the default
file type. I also did this as the user which originally created the folder
half expecting to supply the Administrative password if required.

I then found I did not have access to the folder. If I try and move a file
out of the folder the system asks me for the Administrative password.
Regardless of whether I enter the old and new password the message appears
‘Destination folder access denied.’

What should I do to gain access back to my folder?

Thank you.

"Tim Daborn" <> wrote in message
news:52ED59CB-1158-43C9-A190-...
> Hi,
>
> I have a folder with some very important files which are encrypted using
> EFS
> via the advanced properties dialog on the folder. There has been working
> fine for quite a few months.
>
> This evening I changed both my user and the administrative passwords.
>
> When logged in as the user I then saw the option ‘manage your file
> encryption certificates’ and in the subsequent window, I went to the help
> topic ‘what is Encryption File System?’ I then read the topic ‘Back up
> your
> key to prevent data loss.’
>
> Following the instructions I exported my personal certificates using the
> certificates manager. In the export wizard it did say that the private
> keys
> could not be found - but I exported the certificates anyway to the default
> file type. I also did this as the user which originally created the
> folder
> half expecting to supply the Administrative password if required.
>
> I then found I did not have access to the folder. If I try and move a
> file
> out of the folder the system asks me for the Administrative password.
> Regardless of whether I enter the old and new password the message appears
> ‘Destination folder access denied.’
>
> What should I do to gain access back to my folder?
>
> Thank you.
Just hold your horses. When you changed the password for the standard user
account it sounds as though you changed it from the/an admin account. If
so, that user loses all access to all of encrypted files.
By doing the change from admin to a standard user through an admin account
you made the master key inaccessible for that account.

Change your password back to the old password and that will decrypt the
master key.
Once you are back in control of things, remember Only change passwords or
names of accounts logging on to the account you are going to change.

H Brown

Many thanks.

I thought that if I did the reverse of one of the 2 actions, I would get
back my files. But I wasn't sure which action to take so I stopped until I
got some advice.

Changing the password back did the trick.

Thanks again.

"H Brown" wrote:

>
> "Tim Daborn" <> wrote in message
> news:52ED59CB-1158-43C9-A190-...
> > Hi,
> >
> > I have a folder with some very important files which are encrypted using
> > EFS
> > via the advanced properties dialog on the folder. There has been working
> > fine for quite a few months.
> >
> > This evening I changed both my user and the administrative passwords.
> >
> > When logged in as the user I then saw the option ‘manage your file
> > encryption certificates’ and in the subsequent window, I went to the help
> > topic ‘what is Encryption File System?’ I then read the topic ‘Back up
> > your
> > key to prevent data loss.’
> >
> > Following the instructions I exported my personal certificates using the
> > certificates manager. In the export wizard it did say that the private
> > keys
> > could not be found - but I exported the certificates anyway to the default
> > file type. I also did this as the user which originally created the
> > folder
> > half expecting to supply the Administrative password if required.
> >
> > I then found I did not have access to the folder. If I try and move a
> > file
> > out of the folder the system asks me for the Administrative password.
> > Regardless of whether I enter the old and new password the message appears
> > ‘Destination folder access denied.’
> >
> > What should I do to gain access back to my folder?
> >
> > Thank you.
> Just hold your horses. When you changed the password for the standard user
> account it sounds as though you changed it from the/an admin account. If
> so, that user loses all access to all of encrypted files.
> By doing the change from admin to a standard user through an admin account
> you made the master key inaccessible for that account.
>
> Change your password back to the old password and that will decrypt the
> master key.
> Once you are back in control of things, remember Only change passwords or
> names of accounts logging on to the account you are going to change.
>
> H Brown
>
>
>

Your welcome
H Brown

"Tim Daborn" <> wrote in message
news:B5241B0F-CBCC-4398-BD15-...
> Many thanks.
>
> I thought that if I did the reverse of one of the 2 actions, I would get
> back my files. But I wasn't sure which action to take so I stopped until I
> got some advice.
>
> Changing the password back did the trick.
>
> Thanks again.
>
> "H Brown" wrote:
>
>>
>> "Tim Daborn" <> wrote in message
>> news:52ED59CB-1158-43C9-A190-...
>> > Hi,
>> >
>> > I have a folder with some very important files which are encrypted
>> > using
>> > EFS
>> > via the advanced properties dialog on the folder. There has been
>> > working
>> > fine for quite a few months.
>> >
>> > This evening I changed both my user and the administrative passwords.
>> >
>> > When logged in as the user I then saw the option ‘manage your file
>> > encryption certificates’ and in the subsequent window, I went to the
>> > help
>> > topic ‘what is Encryption File System?’ I then read the topic ‘Back up
>> > your
>> > key to prevent data loss.’
>> >
>> > Following the instructions I exported my personal certificates using
>> > the
>> > certificates manager. In the export wizard it did say that the private
>> > keys
>> > could not be found - but I exported the certificates anyway to the
>> > default
>> > file type. I also did this as the user which originally created the
>> > folder
>> > half expecting to supply the Administrative password if required.
>> >
>> > I then found I did not have access to the folder. If I try and move a
>> > file
>> > out of the folder the system asks me for the Administrative password.
>> > Regardless of whether I enter the old and new password the message
>> > appears
>> > ‘Destination folder access denied.’
>> >
>> > What should I do to gain access back to my folder?
>> >
>> > Thank you.
>> Just hold your horses. When you changed the password for the standard
>> user
>> account it sounds as though you changed it from the/an admin account. If
>> so, that user loses all access to all of encrypted files.
>> By doing the change from admin to a standard user through an admin
>> account
>> you made the master key inaccessible for that account.
>>
>> Change your password back to the old password and that will decrypt the
>> master key.
>> Once you are back in control of things, remember Only change passwords or
>> names of accounts logging on to the account you are going to change.
>>
>> H Brown
>>
>>
>>