Thank you very much for your feedback.
The way it was resolved was as follows:
On our main domain controller
1.- Start-->run type certmgr.msc
2.-Under personal--> certificates the administrator certificate had expired. So i created a new certificate( cipher /r:administrator from the command prompt), deleted the expired one.
3.- Right click on certificates (personal-->certificates under the certificate manager console) and import the new certificate i created.
Thanks
Main Topics
Browse All Topics





by: PowerITPosted on 2007-09-19 at 23:47:05ID: 19926506
That's because in your domain you have a recovery agent certificate defined that expired. If one expires users are blocked
om/default .aspx/kb/9 37536
from EFS.
Recovery agents are defined in the following group policy:
Computer Configuration / Windows Settings / Security Settings / Public Key Policies / Encrypting File System
A group policy can be defined at several levels: OU, domain, ... So check them all.
Also have a look at this MS KB article to help you further:
http://support.microsoft.c
J.