Hi,

I have a web app that uses dpapi in user mode.  It's important that the keys
are usable across more than one machine - in case of disaster recovery, and
scaling path.

On a small test lan running windows 2000 and xp, I have this working - dpapi
service account with a roaming profile can encrypt on one machine and
decrypt on another.

In the live environment running windows 2003 and xp, across a site to site
vpn I have a number of problems:
1) using roaming profile across vpn is unreliable - had a situation with
existing local profile and no profile on remote machine (where the profile
path points) - logged in and out of local machine as the relevant account -
it didn't upload the profile in the location referenced by profile path for
that user.

2) therefore I did a manual backup and restore of the local profile
(documents and settings\username\*) from one machine to another (side
stepping roaming profile).  Whilst each computer could encrypt and decrypt
on it's own, I couldn't decrypt on one, what had been encrypted on the
other.

Is there any way to view the user profile keys used by dpapi?

Should doing a manual backup and restore of the profile to another machine
have preserved the original keys so that I can encyrpt on one, and decyrpt
on the other machine?

Thanks
Martin