Re: Decrypting a file

From: Andrew van der Stock (ajv@greebo.net)
Date: 05/13/02


From: "Andrew van der Stock" <ajv@greebo.net>
Date: Mon, 13 May 2002 10:41:38 +1000


If it's a local account and you don't know the password, you're stuffed. The
password reset boot disks don't reset the EFS rekeying information, so
although you can log on, EFS is not resynchronized with this new password,
and you've lost access to the files.

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q290260

Andrew

"P. Sosa" <pener9@yahoo.com> wrote in message
news:29e201c1f9fe$97734d50$9be62ecf@tkmsftngxa03...
> I have an old file on a NTFS partition (F) that was
> encrypted long ago.
>
> The OS has been rebuilt several times and the machine is
> now a member of an Active Dir. domain. The PC used to be a
> stand alone box.
>
> I have tried to use cipher.exe to decrypt this file but
> keep getting an Access Denied message.
>
> I used efsinfo.exe to see what the recovery agent might
> be. I get an 'unknown' message. I also tried the /u switch
> and saw that an old administrative account of the machine
> had the right to decrypt.
>
> I logged on the local mchine with the same name as the old
> local admin's name but NOT the password since I could not
> remember what it was.
>
> Here are my questions. Without the original password for
> the local admin's account, will I ever be able to decrypt
> this file? Does anyone have an idea how I can get this
> file off the machine so I can access it some other way?
>
> Thank you for your help and ideas.
>
> P. Sosa



Relevant Pages

  • Re: What account can decrypt the file?
    ... There is an account on each machine, System, that also ... try using cipher.exe to decrypt the file and this did ... Microsoft MVP (Windows Server System: ... > "Workgroup" was my workgroup name. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS encrypt files: Changed PW now cant access... :-(
    ... and accidentally used XPpro's EFS. ... account and changed the password for the account they couldn't figure ... supposed to be able to find EFS keys and or use SYS-startup keys, ... master keys and was unable to attempt to decrypt the files etc. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS encrypt files: Changed PW now cant access... :-(
    ... .xls files and accidentally used XPpro's EFS. ... account they couldn't figure out. ... SYS-startup keys, provided that you have the original ... decrypt the files etc. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problem with file Decryption in NTFS file system
    ... Alternatively you could log into the domain with the account that saved the ... Microsoft MVP (Windows Server: Security) ... too i can`t decrypt those files. ... Ok EFS encrypt in windows Xp. ...
    (microsoft.public.win2000.security)
  • Re: Newbee EFS cant decrypt
    ... to try logging in with that account to try to decrypt files. ... to see if the thumbprints match on the certificates by viewing your certificate ... Sure enough I can't decrypt it either. ... > I never made a recovery key using cypher, ...
    (microsoft.public.win2000.security)