Re: Encrypted Files not able to open after upgrade from NT to 2k3

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 12/02/04 

Date: Thu, 2 Dec 2004 05:11:39 -0800

The only solution I know is to contact Microsoft Product Support Services to
potentially walk you through a recovery scenario to retrieve the keys from
the user's old profile. 

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Top Whitepapers:
Auto-enrollment whitepaper: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper: 
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
"Mike B." <MikeB@discussions.microsoft.com> wrote in message 
news:E4AB2049-FD25-4A94-80EA-C3A1F13E557B@microsoft.com...
> Dusko,
>
> Thanks for the reply.
>
> We did an in-place upgrade, so no user profiles were migrated.  That is 
> what
> the problem is.  The users profile did not change.   These encrypted files
> were created without a recovery agent as well.
>
> Mike B.
>
> "Dusko Savatovic" wrote:
>
>> Probably the user's private key was left in the old profile.
>> I suspect that you did not upgrade existing NT domain (in-place upgrade),
>> but created a new 2k3 domain and moved users to the new domain.
>> If the old user's profile is still available somewhere, then EFS private 
>> key
>> can be recovered.
>> If the old profile is gone, then EFS private key is gone too.
>>
>> Dusko Savatovic
>>
>>
>> "Mike B." <MikeB@discussions.microsoft.com> wrote in message
>> news:DBCFBFB3-A72E-433E-A8B4-5831D4BF838A@microsoft.com...
>> >I have a user that is running Win XP pro, that had encrypted files that 
>> >he
>> > cannot open after we upgraded from a Windows NT domain to a Windows 
>> > 2k3/AD
>> > domain.  Any suggestions?
>>
>>
>>

Relevant Pages

  • Changing a users home directory
    ... We run Windows Server 2003 with 22 users on thin clients logging on. ... these user profiles were copied from other profiles and some were migrated up ... was probably copied from Debra and the Debra profile no longer exists). ...
    (microsoft.public.windows.terminal_services)
  • Re: EFS encrypted file recovery (yet again)
    ... encrypted by using the old administrators profile which was the recovery ... creating the administrator account with the same password as was used on the ... So then I downloaded the Advanced EFS Data Recovery ... under the "EFS related files" page where it found the keys. ...
    (microsoft.public.win2000.security)
  • Re: WIN2000 Encrypted Folders & Administrator Profile
    ... If you know the password to the old administrator account and have the old profile ... The EFS private keys used are stored in the ... profile of the user and Recovery Agent for those files. ...
    (microsoft.public.win2000.security)
  • RE: Dumpster recovery problem with Outlook 2003
    ... Microsoft Online Support Engineer ... 60Subject: RE: Dumpster recovery problem with Outlook 2003 ... 6060>I suggest you create a new profile to check the issue ...
    (microsoft.public.exchange2000.clients)
  • Re: Terminal Services Profiles problems
    ... I also found this reference to a registry mod that can change the default ... location of user profiles for normal interactive logon. ... You may also want to post in a Windows Terminal Server ... User profile to the new location. ...
    (microsoft.public.windows.server.security)