TPM 2.0

[BiotechBen]

So my laptop crashed (previous forum post about it, thanks guys for the attempted help), went to get PowerPoint notes from the drive putting it into a spare slot in my tower, only to find that while it is the same Microsoft acct, I don't have access to the files, shows that I am "not the original owner" nd "don't have permissions" is this a TPM 2.0 issue since it's in a different system? The only "valuable" data that is on there is easily replaceable, just annoying to replace. Just Lecture notes from Histology and Cell Biology. If the main board has to be replaced in the warranty repair, is that data gone since there won't be the correct TPM handshake anymore? If so, it's not the end of the world. Not looking to skirt security or encryption, just wondering if I need to start preparing myself for a potential headache.

[Electronics Wizardy]

Its just that your accessing the files on a differnet pc, so its a different account that made the files and you don't have permission. You can chagne these permissions in windows explorer if you want.

 

This isn't affected by tpm, and has been a thing for a while now.

[BiotechBen]

39 minutes ago, Electronics Wizardy said:

Its just that your accessing the files on a differnet pc, so its a different account that made the files and you don't have permission. You can chagne these permissions in windows explorer if you want.

 

This isn't affected by tpm, and has been a thing for a while now.

Interesting, I was not even able to view files that were not in the "public" folder. Which in its entirety contained like 3 memes that I made and a doodle in Ms paint

[jec6613]

15 hours ago, Electronics Wizardy said:

Its just that your accessing the files on a differnet pc, so its a different account that made the files and you don't have permission. You can chagne these permissions in windows explorer if you want.

 

This isn't affected by tpm, and has been a thing for a while now.

Exactly.  For the longer explaination:

 

NTFS permissions are determined by the account GUID, not the account name.  This is a local to the PC randomly generated string that is assigned to your particular user account.  In a corporate environment or sufficiently advanced homelab, this is actually assigned to your active directory account, so if you had two AD joined PCs and tried this, it would work just fine.  As a local administrator on the system, you can take ownership and grant your second PC's user account full permissions to the files - though be forewarned, this will break things if you just stick it back in the original PC and boot it up - Google NTFS take ownership for more details here.

 

There is another level on Pro operating systems that can also be a play if you enabled it, EFS.  This is where the files are encrypted at the file system level so without the original key you cannot open them.  This is significantly trickier to work around, but it fairly rare as BitLocker has largely replaced EFS, but EFS is still used for when you want someone who has admin access to a box to not have access to information even if the admin account is compromised, such as when the sysadmins aren't permitted to access certain company sensetive data.