> Thanks for the response - No password reset disk is available. So I guess I
> need I need to reset the admin password. Any suggestions?
[quoted text clipped - 53 lines]
> > > > those files?
> > > > Thanks afor any and all help -- HT
Thanks Loads Dave,
This was the ticket. I got in. This is a neat tool for desparate times.
I have a related question and I hope you or someone else can clarify this
for me.
I know that if I try to reset my domain user's password as the local
administrator, I could could lose some files if they exist, especially the
EFT files. This client opted to change a valid user's password on their
network and have me login as them rather than give me my own userid. I would
be petrified if I lose some EFT file that the regular user (who is on a
leave) lost one of their files. That is why I saved all of my work on their
desktop in a folder.
When I get to the client's office on Monday and try to rejoin the laptop to
the domain provided my userid has the rights to do that, then I hope that I
will be o.k.
The core of my question is, if the domain administrator changes the password
of a domain user, are the user's EFT files o.k.? I don't recall seeing as a
system admin the same warning at changing a password as I see when I am
logged in to the local machine as an admin.
Thanks
> search this group and probably the general microsoft.public.security group,
> sometime within the last week someone would have undoubtedly posted the link
[quoted text clipped - 85 lines]
> > > > > those files?
> > > > > Thanks afor any and all help -- HT
Kerry Brown - 24 Apr 2005 02:12 GMT
> Thanks Loads Dave,
> This was the ticket. I got in. This is a neat tool for desparate times.
[quoted text clipped - 24 lines]
>
> Thanks
Did you mean EFS? Here's an overview of EFS. It's a long link so it may wrap
in your newsreader and break the link.
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/Def
ault.asp?url=/resources/documentation/Windows/XP/all/reskit/en-us/prnb_efs_nzmz.
asp
As long as they have a default recovery agent set up for the domain they can
unencrypt any files encrypted by a domain user.
Kerry
>> search this group and probably the general microsoft.public.security
>> group,
[quoted text clipped - 102 lines]
>> > > > > those files?
>> > > > > Thanks afor any and all help -- HT
Dave - 24 Apr 2005 12:30 GMT
you don't want to change the password of the domain user, it wouldn't work
even if you did... since the machine is not on the domain any domain account
can't be used, the os will always try to validate with a dc which it can't
get to. when you get back to the domain you login as the local
administrator and rejoin it to the domain, you will also need a domain admin
to supply a valid domain password for that operation. then the domain
account will work again. the problem is not that the password has changed,
it is that by removing the machine from the domain you made it flush the
cached domain info that had the password for the user so it could validate
his login when the dc wasn't available temporarily.
> Thanks Loads Dave,
> This was the ticket. I got in. This is a neat tool for desparate times.
[quoted text clipped - 108 lines]
> > > > > > those files?
> > > > > > Thanks afor any and all help -- HT