| Previous | Next |
| STATUS_RANGE_NOT_FOUND | STATUS_NO_EFS |
STATUS_NO_RECOVERY_POLICY
The system has no applicable EFS recovery-agent policy
Encrypting File System can include data-recovery fields so an authorized recovery agent can decrypt files when the user key is unavailable. Domain or local policy determines the configured recovery agents. A missing or invalid policy can block workflows that require recoverability rather than user-only encryption.
Inspect the effective EFS policy and recovery-agent certificates before changing file data. Generate and escrow recovery material through supported administrative procedures; creating a random self-signed certificate on the affected machine does not reconstruct an existing recovery private key.
What to inspect
- Determine whether local or domain EFS policy is effective on the machine.
- Verify recovery-agent certificates are valid and their private keys are securely available.
- Test recovery on a sample file before enforcing the policy broadly.
References
- Microsoft: Encrypting File System
- Microsoft: Adding users to an encrypted file
- Microsoft: cipher command
- Microsoft Open Specifications: NTSTATUS values
Looking for a different code? Search another status or error code.