RE: Windows EFS and Changing a Local Account Password

["David Gillett" <gillettdavid () fhda edu>]

  No; the key(s) will be decrypted and re-encrypted with the new
password.

  But if you reinstall the OS and so generate a new set of accounts 
and SIDs -- even if you name them the same as the old ones! -- the
linkage is broken.  So I don't recommend using EFS with local accounts,
only with accounts managed from a stable domain controller infrastructure.

David Gillett


> -----Original Message-----
> From: winshel () camden rutgers edu [mailto:winshel () camden rutgers edu] 
> Sent: Wednesday, July 12, 2006 11:23 AM
> To: security-basics () securityfocus com
> Subject: Windows EFS and Changing a Local Account Password
>
> If you are using Windows Encrypted File System (EFS) on a PC 
> that is not part of domain, and you change the password of 
> the local user account that was used to encrypt files and / 
> or directories, will you be locked out of the ecnrypted files?
>
>
> --------------------------------------------------------------
> -------------
> This list is sponsored by: SensePost
>
> Hacking, like any art, will take years of dedicated study and 
> practice to master. We can't teach you to hack. But we can 
> teach you what we've learned so far. Our courses are honest, 
> real, technical and practical. SensePost willl be at Black 
> Hat Vegas in July. To see what we're about, visit us at: 
>
> http://www.sensepost.com/training.html
> --------------------------------------------------------------
> -------------


---------------------------------------------------------------------------
This list is sponsored by: SensePost

Hacking, like any art, will take years of dedicated study and  
practice to master. We can't teach you to hack. But we can teach you  
what we've learned so far. Our courses are honest, real, technical  
and practical. SensePost willl be at Black Hat Vegas in July. To see  
what we're about, visit us at: 

http://www.sensepost.com/training.html
---------------------------------------------------------------------------