Microsoft® Windows® XP Networking and Security Inside Out: Also Covers Windows 2000

Creating a Data Recovery Agent

Designating a data recovery agent—another user who can access your encrypted files—enables you to recover encrypted files if something happens to your private key.

In Windows 2000, the Administrator account is set up as the default data recovery agent. If your computer is a member of a domain, the domain administrator is the default data recovery agent. But if you're using Windows XP and your computer is not in a domain, there is no default data recovery agent.

Note

In Windows 2000, a data recovery agent is required. If no data recovery agent exists, you can't encrypt files. In Windows XP, however, a data recovery agent is optional (but usually desirable).

To create a data recovery agent, you must create a file recovery ...