Microsoft KB Archive/294844

= Sysprep.exe May Re-Enable the Encrypting File System =

Article ID: 294844

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows 2000 Server
 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Professional Edition

-



This article was previously published under Q294844



SYMPTOMS
When you disable Encrypting File System (EFS) on a Windows 2000-based computer, EFS may become re-enabled.



CAUSE
Computers that are not a member of a domain may have EFS re-enabled if the Sysprep.exe tool has been run on the computer to prepare the computer for deployment. EFS may also be re-enabled if the computer joins a Windows 2000 domain and the domain group policy object (GPO) has specified Encrypted Data Recovery agents.



RESOLUTION
Use the steps in the following Microsoft Knowledge Base article to disable EFS on a stand-alone computer:

243035 How to Disable/Enable EFS on a Stand-Alone Windows 2000 Computer

Use the steps in the following Microsoft Knowledge Base article to disable EFS on a domain:

222022 Disabling EFS for All Computers in a Windows 2000-Based Domain



MORE INFORMATION
When Sysprep.exe is run on a stand-alone computer, it will automatically reset the default recovery policy during the mini-Setup wizard that makes the local administrator the default recovery agent for the computer.

Additional query words: reenabled dra

Keywords: kbenv kbprb kbui KB294844

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.