Using Microsoft's KMS

dbaldarelli · Joined: 06 Aug 2007 Posts: 1

I have a couple of related questions. We are using
Microsoft Exchange 2000 with KMS for our e-mail encryption
within our company only. My first question is:
If a key employee leaves our organization, How would we
view and/or retrieve any valued documents that may be
stored in his Inbox.
My second question is:
When a user's computer loses a hard drive or crashes and
is given a new pc, would he still be able to view his old
encrypted e-mail. I tried a little test and was unable to
view old mail even after revovering keys or re-enrolling
the user. Any help you may give will be greatly
appreciated.

Archived from group: microsoft>public>exchange2000>kms

Evan Dodds [MSFT] · Joined: 05 Aug 2007 Posts: 21

Dbaldarelli -

1) If someone leaves, the easiest way to retrieve their data is to simply
reset their password and logon to their machine. This will allow you to
retrieve their data. If their machine is not available, you can still reset
their password, recover their certificates through KMS, and then logon to
any machine, load the certificates, and retrieve the data.

2) Recovering the user's KMS certificates should allow them back into any
data encrypted with the original certificates.

--
Evan Dodds
Microsoft Exchange Support

****** Disclaimer ******
This posting is provided "AS IS" with no warranties, and confers no rights.

Note: Please do not reply to this e-mail address. It is used for newsgroup
purposes only.

"dbaldarelli" wrote in message$160d3720$a501280a@phx.gbl...
> I have a couple of related questions. We are using
> Microsoft Exchange 2000 with KMS for our e-mail encryption
> within our company only. My first question is:
> If a key employee leaves our organization, How would we
> view and/or retrieve any valued documents that may be
> stored in his Inbox.
> My second question is:
> When a user's computer loses a hard drive or crashes and
> is given a new pc, would he still be able to view his old
> encrypted e-mail. I tried a little test and was unable to
> view old mail even after revovering keys or re-enrolling
> the user. Any help you may give will be greatly
> appreciated.

Using Microsoft's IIFP (Identity Integration Feature Pack) t Hi, We are considering this solution to synchronize GALs b/w our parent company and us the subsidiary. is there a limitation to the amount of contacts you can sync? Thanks, Jen

Exchange 2007 CCR vs VMware VMotion Our company is considering deploying Exchange 2007 CCR for high availability. However, our server group is moving towards VMWare's VMotion solution for HA which they feel negates our need to use CCR. I am trying to determine which is the best solution fo

strange issue: not read read receipts being sent out I have a strange issue with my Exchange setup, I have one user who, when logging on or off of the domain is sending out a batch of not read read receipts for emails that were not even sent to him. The read receipts are only being sent to the one same user

EXC2007: Exchange Transport Log Search Of my two Exc2007 hub servers. One has the Exchange Transport Log Search service and one does not. I need to re-install that service but can find no documentation on how to proceed. The hub servers are functioning normally. How do I install the Exchang

Outlook/Exchange character set problem Hi, We are experiencing a problem with Norwegian special characters getting destroyed when using copy/paste from an incomming to and outgoing message. This seems to be caused by character set change when using copy/paste. The strange thing is that this co