NTFS encryption too "persistent"

On my PC's HDD I have some files encrypted by Windows Vista. Used "folder
encryption" that is in one of folder properties selected "Encrypt data..."

Folder is shown in green in explorer respectively.

In the beginning, when I copied any files from this encrypted folder to
another
location (e.g. USB HDD) files became automatically decrypted, i.e. I could
read those files from USB HDD on any other PC.

But now something changed. Though I did not make any changes to security or
file system settings, files copied from encrypted folder to USB HDD stay
encrypted. That is - I can read them only on PC where I copied them to USB
HDD. On other PCs where I connect USB HDD files are not accessible.

How can I change it back? I need files copied from encrypted folder to USB
HDD to decrypt automatically, because it's backup procedure and I need them
accessible on any other PC. How can I stop encryption attribute to be copied
together with file?

 

When you encrypt data on your computer you will lose data if you store your
encryption key on a smart card and the smart card is damaged. You should
have backed up your encryption certificate and key. Since more than one
person uses your files, and you use a smart card to encrypt files, you
should create a file recovery certificate. This link will tell you how to do
that.




--
The Real Truth
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




"sunorain" <sunorain@discussions.microsoft.com> wrote in message
news:9AD9CD18-A428-45B3-B8A3-C45A9C984A08@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> On my PC's HDD I have some files encrypted by Windows Vista. Used "folder
> encryption" that is in one of folder properties selected "Encrypt data..."
>
> Folder is shown in green in explorer respectively.
>
> In the beginning, when I copied any files from this encrypted folder to
> another
> location (e.g. USB HDD) files became automatically decrypted, i.e. I could
> read those files from USB HDD on any other PC.
>
> But now something changed. Though I did not make any changes to security
> or
> file system settings, files copied from encrypted folder to USB HDD stay
> encrypted. That is - I can read them only on PC where I copied them to USB
> HDD. On other PCs where I connect USB HDD files are not accessible.
>
> How can I change it back? I need files copied from encrypted folder to USB
> HDD to decrypt automatically, because it's backup procedure and I need
> them
> accessible on any other PC. How can I stop encryption attribute to be
> copied
> together with file?
> <!--colorc--><!--/colorc-->

 

Irrelevant. I don't need to grant access to encrypted file. I just need them
DECRYPTED when they are copied. And it worked untill very recent....

"The Real Truth MVP" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> When you encrypt data on your computer you will lose data if you store your
> encryption key on a smart card and the smart card is damaged. You should
> have backed up your encryption certificate and key. Since more than one
> person uses your files, and you use a smart card to encrypt files, you
> should create a file recovery certificate. This link will tell you how to do
> that.<!--colorc--><!--/colorc-->

 

You are forgetting the purpose of what encryption is. It is working the way
it is supposed to work. Maybe you did something or someone did something and
not know it so it is not irrelevant in order to read those files they need
to be decrypted to do that you need to have a recovery certificate installed
on all the other computers that cannot read the file.

--
The Real Truth
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




"sunorain" <sunorain@discussions.microsoft.com> wrote in message
news:9AD9CD18-A428-45B3-B8A3-C45A9C984A08@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> On my PC's HDD I have some files encrypted by Windows Vista. Used "folder
> encryption" that is in one of folder properties selected "Encrypt data..."
>
> Folder is shown in green in explorer respectively.
>
> In the beginning, when I copied any files from this encrypted folder to
> another
> location (e.g. USB HDD) files became automatically decrypted, i.e. I could
> read those files from USB HDD on any other PC.
>
> But now something changed. Though I did not make any changes to security
> or
> file system settings, files copied from encrypted folder to USB HDD stay
> encrypted. That is - I can read them only on PC where I copied them to USB
> HDD. On other PCs where I connect USB HDD files are not accessible.
>
> How can I change it back? I need files copied from encrypted folder to USB
> HDD to decrypt automatically, because it's backup procedure and I need
> them
> accessible on any other PC. How can I stop encryption attribute to be
> copied
> together with file?
> <!--colorc--><!--/colorc-->

 

sunorain wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> On my PC's HDD I have some files encrypted by Windows Vista. Used
> "folder encryption" that is in one of folder properties selected
> "Encrypt data..."
>
> Folder is shown in green in explorer respectively.
>
> In the beginning, when I copied any files from this encrypted
> folder to another
> location (e.g. USB HDD) files became automatically decrypted, i.e.
> I could read those files from USB HDD on any other PC.
>
> But now something changed. Though I did not make any changes to
> security or file system settings, files copied from encrypted
> folder to USB HDD stay encrypted. That is - I can read them only on
> PC where I copied them to USB HDD. On other PCs where I connect USB
> HDD files are not accessible.
>
> How can I change it back? I need files copied from encrypted folder
> to USB HDD to decrypt automatically, because it's backup procedure
> and I need them accessible on any other PC. How can I stop
> encryption attribute to be copied together with file?<!--colorc--><!--/colorc-->

Things you should understand about EFS (above and beyond just the best
practices and how not to lose your data.)

... Copying a file into an encrypted folder encrypts the file, but moving it
into the folder leaves the file encrypted or unencrypted, just as it was
before you moved the file.

... If encrypted files are moved on the same type of file system (NTFS)
they stay encrypted

... if users add files to an encrypted folder the new files are automatically
encrypted.

... Moving or copying EFS files to another file system removes the
encryption, but backing them up preserves the encryption (with native
tools for sure - cannot say otherwise with any confidence.)

... If you copy your files to a CD/DVD to back them up, they will be
decrypted.

... If you send encrypted files through e-mail, the copy sent will not be
encrypted.

Nothing has changed with the EFS you are using that I am aware of. Sounds
more like you have changed the way you are doing something or the format of
the external drive.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way

 

"Shenan Stanley" wrote:<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Seriously - you should learn to cross-post. This is the third of these I
> have found from you.<!--colorc--><!--/colorc-->

I will, sorry for this. Just needed solution fast, and still nothing, just
empty talks and
meaningless trivial statements....
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> Things you should understand about EFS (above and beyond just the best
> practices and how not to lose your data.)<!--colorc--><!--/colorc-->

I asked very simple and very "solitary" question - it's nice that you quote
EFS manual in response (I've read it already), but it's not what's needed on
forum, really.

<!--coloro:blue--><span style="color:blue <!--/coloro-->
> ... If encrypted files are moved on the same type of file system (NTFS)
> they stay encrypted<!--colorc--><!--/colorc-->

I think I explained in plain language it was not like that. Main drive was
NTFS, USB HDD was NTFS and still copying from main HDD to USB HDD
automatically decrypted files and on USB HDD they were decrypted. I don't
know why and how but this is why I'm here....

 

There is nothing wrong, it is working the way it is supposed to work. There
is nothing to fix. Somebody apparently converted that usb drive to NTFS. If
you want to open those files on another system then do what I said in my
other post.

--
The Real Truth
*WARNING* Do NOT follow any advice given by the people listed below.
They do NOT have the expertise or knowledge to fix your issue. Do not waste
your time.
David H Lipman, Malke, PA Bear, Beauregard T. Shagnasty, Leythos.




"sunorain" <sunorain@discussions.microsoft.com> wrote in message
news:A16BEFE4-F201-42F8-A0A9-557F141C8048@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
> "Shenan Stanley" wrote:<!--coloro:green--><span style="color:green <!--/coloro-->
>> Seriously - you should learn to cross-post. This is the third of these I
>> have found from you.<!--colorc--><!--/colorc-->
>
> I will, sorry for this. Just needed solution fast, and still nothing, just
> empty talks and
> meaningless trivial statements....
><!--coloro:green--><span style="color:green <!--/coloro-->
>> Things you should understand about EFS (above and beyond just the best
>> practices and how not to lose your data.)<!--colorc--><!--/colorc-->
>
> I asked very simple and very "solitary" question - it's nice that you
> quote
> EFS manual in response (I've read it already), but it's not what's needed
> on
> forum, really.
>
><!--coloro:green--><span style="color:green <!--/coloro-->
>> ... If encrypted files are moved on the same type of file system (NTFS)
>> they stay encrypted<!--colorc--><!--/colorc-->
>
> I think I explained in plain language it was not like that. Main drive was
> NTFS, USB HDD was NTFS and still copying from main HDD to USB HDD
> automatically decrypted files and on USB HDD they were decrypted. I don't
> know why and how but this is why I'm here....
> <!--colorc--><!--/colorc-->

 

I understand it now, but it always worked different earlier so I considered
it "normal" and got habit for it.
I'm pretty 200% sure drive was NTFS and is NTFS, it was not converted. I
specially paid attention to that, because I know that file sync software
cannot compare correctly file date/time stamps between NTFS and FAT.

"The Real Truth MVP" wrote:
<!--coloro:blue--><span style="color:blue <!--/coloro-->
> There is nothing wrong, it is working the way it is supposed to work. There
> is nothing to fix. Somebody apparently converted that usb drive to NTFS. If
> you want to open those files on another system then do what I said in my
> other post.<!--colorc--><!--/colorc-->