 




<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Windows EFS encryption on an Excel file&#8230;</title>
	<atom:link href="http://itknowledgeexchange.techtarget.com/itanswers/windows-efs-encryption-on-an-excel-file/feed/" rel="self" type="application/rss+xml" />
	<link>http://itknowledgeexchange.techtarget.com/itanswers/windows-efs-encryption-on-an-excel-file/</link>
	<description></description>
	<lastBuildDate>Mon, 20 May 2013 05:26:00 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	
	<item>
		<title>By: mortree</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/windows-efs-encryption-on-an-excel-file/#comment-40850</link>
		<dc:creator>mortree</dc:creator>
		<pubDate>Thu, 14 Sep 2006 00:13:44 +0000</pubDate>
		<guid isPermaLink="false">#comment-40850</guid>
		<description><![CDATA[Oooh! on reading again -- yes corrupt. In fact you might want to do a checkdisk because it sounds like directory level problems. I originally thought you were talking lock up only with Excel...though I thought Excel would detect encryption and prompt you about it (provide acocunt with permissions).

But on a bright note it sounds like your user had to rely on local encryption. Therefore the copy stored on file server is almost certainly unecrypted -- all assuming he was relying on EFS instead of some non-Microsoft solution like PGP.

So go locate a backup tape or the Recycle Bin for that folder.]]></description>
		<content:encoded><![CDATA[<p>Oooh! on reading again &#8212; yes corrupt. In fact you might want to do a checkdisk because it sounds like directory level problems. I originally thought you were talking lock up only with Excel&#8230;though I thought Excel would detect encryption and prompt you about it (provide acocunt with permissions).</p>
<p>But on a bright note it sounds like your user had to rely on local encryption. Therefore the copy stored on file server is almost certainly unecrypted &#8212; all assuming he was relying on EFS instead of some non-Microsoft solution like PGP.</p>
<p>So go locate a backup tape or the Recycle Bin for that folder.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: mortree</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/windows-efs-encryption-on-an-excel-file/#comment-40851</link>
		<dc:creator>mortree</dc:creator>
		<pubDate>Thu, 14 Sep 2006 00:07:01 +0000</pubDate>
		<guid isPermaLink="false">#comment-40851</guid>
		<description><![CDATA[First question: Have considered that the file is simply corrupt? 

The second question is -- was the encryption done with XP EFS?

If this encrytion was done with domain certificates you can try logging with the user domain account for automatic decryption. Might have to reset a pasword.

Also an EFS file should have automatically decrypted when moving over the network to the file server and to the new client computer. So there may be the case that the file on the server might not even have been encrypted at that point. In any case look at older backup tapes for an uncorrupted copy. Or even the server recovery bin if it hasn&#039;t bee too long.

In any case when moving it to its final destination, the user would have had to reencrypt the file manually or by copying it to a folder with encryption set. Chances are the encryption key is off the domain account or worst case on the current local machine. You can try the Recovery Agent process either of the Domain or the local machine.


Note:
If the file server is set for encryption by remote clients (Computer Trusted for Delegation unless it is WebDAV server), the file might might have been reencrypted. But I am pretty sure that uses Domain User account certificate info rather than local computer keys as could well have been the case before. Do you still have the user account? Well there is still the Domain Designated recovery agent procedure if you have a tape copy.


]]></description>
		<content:encoded><![CDATA[<p>First question: Have considered that the file is simply corrupt? </p>
<p>The second question is &#8212; was the encryption done with XP EFS?</p>
<p>If this encrytion was done with domain certificates you can try logging with the user domain account for automatic decryption. Might have to reset a pasword.</p>
<p>Also an EFS file should have automatically decrypted when moving over the network to the file server and to the new client computer. So there may be the case that the file on the server might not even have been encrypted at that point. In any case look at older backup tapes for an uncorrupted copy. Or even the server recovery bin if it hasn&#8217;t bee too long.</p>
<p>In any case when moving it to its final destination, the user would have had to reencrypt the file manually or by copying it to a folder with encryption set. Chances are the encryption key is off the domain account or worst case on the current local machine. You can try the Recovery Agent process either of the Domain or the local machine.</p>
<p>Note:<br />
If the file server is set for encryption by remote clients (Computer Trusted for Delegation unless it is WebDAV server), the file might might have been reencrypted. But I am pretty sure that uses Domain User account certificate info rather than local computer keys as could well have been the case before. Do you still have the user account? Well there is still the Domain Designated recovery agent procedure if you have a tape copy.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: skepticals</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/windows-efs-encryption-on-an-excel-file/#comment-40852</link>
		<dc:creator>skepticals</dc:creator>
		<pubDate>Wed, 13 Sep 2006 11:19:26 +0000</pubDate>
		<guid isPermaLink="false">#comment-40852</guid>
		<description><![CDATA[secprotn,

I can&#039;t even right click and goto properties on these files; the computer locks up for awhile.  Do you think the files may be corrupt?]]></description>
		<content:encoded><![CDATA[<p>secprotn,</p>
<p>I can&#8217;t even right click and goto properties on these files; the computer locks up for awhile.  Do you think the files may be corrupt?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: secprotn</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/windows-efs-encryption-on-an-excel-file/#comment-40853</link>
		<dc:creator>secprotn</dc:creator>
		<pubDate>Wed, 13 Sep 2006 11:13:03 +0000</pubDate>
		<guid isPermaLink="false">#comment-40853</guid>
		<description><![CDATA[If you are using EFS with certificates issued to the user from an internal CA, you should have defined key archival for the issued certifcates. If you did, the user&#039;s EFS key can be recovered from the CA and then imported to another computer. That computer would then have the saem access as the user that encrypted the file.

When you look at the properties of the file under Details-&gt;Advanced, it will tell you the keys that can decrypt the file. Any of the keys listed could be used to decrypt

]]></description>
		<content:encoded><![CDATA[<p>If you are using EFS with certificates issued to the user from an internal CA, you should have defined key archival for the issued certifcates. If you did, the user&#8217;s EFS key can be recovered from the CA and then imported to another computer. That computer would then have the saem access as the user that encrypted the file.</p>
<p>When you look at the properties of the file under Details-&gt;Advanced, it will tell you the keys that can decrypt the file. Any of the keys listed could be used to decrypt</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: skepticals</title>
		<link>http://itknowledgeexchange.techtarget.com/itanswers/windows-efs-encryption-on-an-excel-file/#comment-40854</link>
		<dc:creator>skepticals</dc:creator>
		<pubDate>Wed, 13 Sep 2006 08:55:37 +0000</pubDate>
		<guid isPermaLink="false">#comment-40854</guid>
		<description><![CDATA[It was not part of a domain.  Is there another way of recovering the files?]]></description>
		<content:encoded><![CDATA[<p>It was not part of a domain.  Is there another way of recovering the files?</p>
]]></content:encoded>
	</item>
</channel>
</rss>

<!-- Performance optimized by W3 Total Cache. Learn more: http://www.w3-edge.com/wordpress-plugins/

Page Caching using memcached
Database Caching 6/9 queries in 0.010 seconds using memcached
Object Caching 324/327 objects using memcached

Served from: itknowledgeexchange.techtarget.com @ 2013-05-20 07:16:04 -->