Re: Decrypt windows files

Fares Atallah wrote:
My problem is that I have encrypted some folders and files under D drive and then formatted my PC, I forgot to decrypt the fiels or backup my certificate so that till now I can't access my files.
Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the files using my domain user account so I need a help in decrypting my files.

Thank you very much.

Since you forget to back up your certificate, unless you set a recovery agent you are most probably out of luck. You can contact Elcomsoft to see if their program can help you, but otherwise it is unlikely you'll recover those files. There is no backdoor to encryption.

http://www.elcomsoft.com/aefsdr.html

http://www3.telus.net/dandemar/encrypt.htm - encryption info
http://www.beginningtoseethelight.org/efsrecovery/ - more encryption info

To add a recovery agent for the local computer - http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/encrypt_to_add_recovery_agent.mspx

To change the recovery policy for the local computer - http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/encrypt_to_change_policy.mspx

How to add an EFS recovery agent in Windows XP Professional - http://support.microsoft.com/default.aspx?scid=kb;en-us;887414

Best practices for the Encrypting File System - http://support.microsoft.com/default.aspx?scid=kb;en-us;223316

EFS, Credentials, and Private Keys from Certificates Are Unavailable After a Password Is Reset - http://support.microsoft.com/?kbid=290260


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
.

Relevant Pages

  • Re: SQL-Server startet nicht ...
    ... Because connection encryption is required, ... You should verify that the certificate is ... Check the SQL Server error log and the Windows event logs for information ...
    (microsoft.public.de.sqlserver)
  • Re: EFS, certificates etc
    ... created a certificate ... >for the Admin account, which I have designated as the ... >data recovery agent cannot. ... >>> encryption. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can no longer encrypt files
    ... It is saying the certificate for the "Recovery Agent" is invalid, ... > the actual account doing the Encryption. ... > Win2k, the designated recovery agent was the default "Domain Admin", WinXP ... This was working fine until the account password expired and was ...
    (microsoft.public.windowsxp.security_admin)
  • Key Recovery and Decryption
    ... I had the encryption key backed up on ... and designating a Data Recovery Agent. ... to install the Administrator's Data Recovery Certificate ... corresponding private key but if I try to export this ...
    (microsoft.public.windowsxp.security_admin)
  • Odd problem with File Encryption
    ... Disk to change the Administrator's password on a Windows ... >the encryption suddenly stopped allowing me access. ... >checked the certificate itself and it has not expired, ... >private key (yet in properties it says i have a private ...
    (microsoft.public.security)