XP Pro, local recovery agent KB article 308991

Hi,

I'm having problems appointing a recovery agent on a local
machine:

I've read several useful KB articles decribing the
process, and understand that the folder must remain
unencrypted first.

1) I have a problem during this process... on the
GeneralAdvanced tab of a folder, I cannot access the
Details tab (it is greyed-out)to add a recovery agent.

2) I'm also having similar problems configuring the Local
group policy using the MMC console: In "public key
policy"add data recovery agent wizard

3) I'm not really getting the whole process of Recovery
Certificates, and where they are stored and applied or
imported... can you help?

Thanks,

Andy

1) Recovery agents are set through policy and applied to a machine, not a
folder. Also - users/RAs on folders are meaningless. Don't worry about #1.
2) Create a recovery cert ("cipher /r" at the cmdline), then add it (the
..cer file) using MMC.
3) Check out this whitepaper:
http://www.microsoft.com/technet/pro...y/cryptfs.mspx

--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.


wrote in message
...
Hi,

I'm having problems appointing a recovery agent on a local
machine:

I've read several useful KB articles decribing the
process, and understand that the folder must remain
unencrypted first.

1) I have a problem during this process... on the
GeneralAdvanced tab of a folder, I cannot access the
Details tab (it is greyed-out)to add a recovery agent.

2) I'm also having similar problems configuring the Local
group policy using the MMC console: In "public key
policy"add data recovery agent wizard

3) I'm not really getting the whole process of Recovery
Certificates, and where they are stored and applied or
imported... can you help?

Thanks,

Andy