Cannot Open Encrypted Files on a Computer with Multiple Windows 2000 Installations (256168)



The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional

This article was previously published under Q256168

SYMPTOMS

If you have a Windows 2000-based computer with more than one installation of Windows 2000, you may receive the following error message when you try to open an encrypted file:
Access is denied.
This behavior can occur if you log on to the computer without a roaming profile and you have either a domain user account or a local computer account. When you restart your computer, log on to a second installation of Windows 2000, and then try to open the encrypted file, you receive the error message.

CAUSE

This issue can occur because when you log on to the second installation of Windows 2000, you do not have the appropriate certificate to open the encrypted file.

RESOLUTION

To resolve this issue, restart the computer and log on to the first installation of Windows 2000. Export the certificate and the related private key to a floppy disk, or to a non-encrypted folder on the hard disk. Restart the computer and log on to the second installation of Windows 2000 and import the certificate.

For additional information about private keys, click the article numbers below to view the articles in the Microsoft Knowledge Base:

241201 HOW TO: Back Up Your Encrypting File System Private Key in Windows 2000

242296 How to Restore an EFS Private Key for Encrypted Data Recovery

MORE INFORMATION

For additional information about encryption, click the article numbers below to view the articles in the Microsoft Knowledge Base:

223316 Best Practices for Encrypting File System

To download the "Encrypting File System for Windows 2000" white paper, visit the following Microsoft Web site:

Modification Type:MajorLast Reviewed:9/8/2006
Keywords:kbEFS kberrmsg kbprb w2000efs KB256168