RE: encrypted files to ntfs

["Skibi de LaPies" <lapies () poczta onet pl>]

-----Original Message-----
From: stephen at unix dot za dot net [mailto:stephen () unix za net]
Sent: Friday, July 25, 2003 1:13 PM
To: Gerard Vignes
Cc: security-basics () securityfocus com
Subject: Re: encrypted files to ntfs



> there is a way, it was covered in my MSCE course, havent had to do it in 2
> years, so for the life of me cant remember exactly how..

> it involves taking ownership of files and then decrypting, sorry i cant
> think off hand exactly how :/   i'll skim thru my msce book over the w/e

<IMHO>
The thing that you are mentioning is talking about DRA (recovery agent).
Usually administrators group have that permission which allows them to do
that. While logging in as administrator (or other DRA agent) one should be
able to decipher the data. AFAICR taking over the file(s) ownership does not
solve the case - if the new owner is not DRA then it can not correctly
decipher the data.
What is other problem is the mentioned 'lost of the encryption key' -
personally I haven't heard about that, so no real idea what to do.
</IMHO>

bests
Scibor Lapies





---------------------------------------------------------------------------
----------------------------------------------------------------------------