EFS, password change denies access to encrypted data

[eric.w...@hertscc.gov.uk]

Hi,
Has anyone had the issue with admin changing users password in Console One
resulting in users not being able to access their encrypted data.

Laptop users are using EFS to encrypt their data.

These users have WinXPPro SP2 and we are running ZfD 6.5SP2.

I have found IR 1 for ZfD 6.5 SP2 which includes TID3003874 "Personal IE
certificates and EFS stop working after password change" however this does
not fix the issue.

Could someone explain in more detail what this fix does as I may have
misunderstood what this fix is.
Regards,
Eric.

[Tony Pedretti]

Eric,

I posted about a similar issue in the client forums a couple weeks ago.
Unfortunately I haven't had to time to look much further into it let
alone open a service request with Novell. But our issue appears to be
quite similar to a previously fixed bug in client 4.90 SP2. We're
currently using ZENworks 6.5 SP1 agents...

Subject: 4.91 SP2 and XP EFS access denied
Newsgroups: novell.support.netware.client.winnt-2x-xp
Message-ID: <uNA%g.18795$0h7....@prv-forum2.provo.novell.com>
Date: Wed, 25 Oct 2006 03:24:10 GMT

You mention that admins are changing users passwords in ConsoleOne. Are
you suggesting that just changing the NDS password is enough to
prevent access to EFS or does that including syncing with a
Windows/domain password?

Thanks,

--
Tony Pedretti

[Craig Wilson]

I know this is an old thread, but I thought it would be best to those who
found it realized that the best method for addressing this issue may be
found here:
http://www.novell.com/support/viewContent.do?externalId=3724689

However the MS article could still be useful for some.

--
Craig Wilson - MCNE, MCSE, CCNA
Novell Support Forums Volunteer Sysop

Novell does not officially monitor these forums.

Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

"ghoskins" <ghos...@no-mx.forums.novell.com> wrote in message
news:ghoskin...@no-mx.forums.novell.com...
>
> I'm having the same problem. I ran acrosss this Microsoft KB and it
> seems to fix the issue. I'm not certain this is the best security
> practices, but it does work.
>
> 'User cannot gain access to certificate functionality after password
> change or when using a roaming profile'
> (http://support.microsoft.com/default.aspx?scid=kb;en-us;331333)
>
>
> --
> ghoskins
> ------------------------------------------------------------------------
> ghoskins's Profile: http://forums.novell.com/member.php?userid=12306
> View this thread: http://forums.novell.com/showthread.php?t=215857
>