Event ID: 599

I just had the painfull experience of losing access to
files that I encrypted on my computer. When trying to
access the files, I received a message stating that I
wasn't authorized to open the files. I couldn't decrypt
any of the files or subfolders either, even though I was
logged on as the user who originally set the encryption
on the folders/files.

In the description in the Event viewer, I received the
description below:

Unprotection of auditable protected data.
Data Description: Export Flag
Key Identifier: 0e469547-1640-410a-84f7-
4786ad7e8b8c
Protected Data Flags: 0x0
Protection Algorithms: 3DES-168 , SHA1-160
Failure Reason: 0x8009000B


I'm running Windows XP with all the latest SP's and
hotfixes. Has anyone else had this experience?

This is likely due to a password reset, which can cause loss of the EFS key.

See http://support.microsoft.com/support.../Q290/2/60.asp

Eric

--
Eric Fitzgerald
Program Manager, Windows Auditing and Intrusion Detection
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.

"Thomas Lazarski" wrote in message
...
I just had the painfull experience of losing access to
files that I encrypted on my computer. When trying to
access the files, I received a message stating that I
wasn't authorized to open the files. I couldn't decrypt
any of the files or subfolders either, even though I was
logged on as the user who originally set the encryption
on the folders/files.

In the description in the Event viewer, I received the
description below:

Unprotection of auditable protected data.
Data Description: Export Flag
Key Identifier: 0e469547-1640-410a-84f7-
4786ad7e8b8c
Protected Data Flags: 0x0
Protection Algorithms: 3DES-168 , SHA1-160
Failure Reason: 0x8009000B


I'm running Windows XP with all the latest SP's and
hotfixes. Has anyone else had this experience?