Re: How do I remove file encryption!?!

From: Robert Gu [MS] (robertg@online.microsoft.com)
Date: 06/25/02 

From: "Robert Gu [MS]" <robertg@online.microsoft.com>
Date: Mon, 24 Jun 2002 16:17:14 -0700

The only way to recover a file is exporting the user cert+keys or recovery
agent keys before the OS is crashed.

If you can get back the files just by reinstall another OS, no one will use
EFS any more.

For more info, check Start->Help & search EFS or
http://www.microsoft.com/windowsxp/pro/techinfo/administration/recovery/defa
ult.asp 

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Robert Gu [MS Security Developer]
<kurtchan@mindspring.com> wrote in message
news:af82km$nf5$1@nntp9.atl.mindspring.net...
> > If the PC is a DC member, you can ask the recovery agent to recover the
> file
> > for you.
>
> I have a similar problem, in that I am no longer able to boot from a Win2k
> install under which I encrypted some folders, and therefore can no longer
> access those folders. I created a new Win2k install and can see the files,
I
> just can't access them.
>
> I have two approaches - either fix the "INACCESSIBLE BOOT DEVICE" stop
> message so I can boot from the original OS image, or find a way to decrypt
> my files from the new image. Since I've tried repairing the OS, updating
> drivers and BIOS, etc with no success, I'm trying the latter. Although any
> help on the former would be welcome.
>
> Is there documentation on how to use MMC and recovery agents to decrypt
> files?
>
> Thanks,
> Kurt
> kurtchan@mindspring.com
>
>

Relevant Pages

  • EFS Probleme
    ... dass der Data Recovery Agent ... "Administrator" einen "Certificate Tumbprint" hat welcher ... >Der Client müsste aus meiner sicht richtig in der Domäne ...
    (microsoft.public.de.german.windows.server.general)
  • Recovery Agent unable to decrypt other users files
    ... i XP the admin' by default does not become the Recovery ... Agent unless manually created via the above cypher command ... group,that user encrypts the file & he can decrypt it all ... or if the user has exported the encryption key & i then ...
    (microsoft.public.windowsxp.security_admin)
  • Re: adding users as recovery agents
    ... >You first need to have the certificates for the recovery ... >Recovery Agent certificate from their personal folder by ... Then you can browse to that .cer file and install it ... as a Recovery Agent. ...
    (microsoft.public.win2000.group_policy)
  • Re: How to get full access to all contents?
    ... anything about Users Who Can Transparently Access a File or Data Recovery ... "Roger Abell" wrote in message ... > a recovery agent. ...
    (microsoft.public.windowsxp.security_admin)
  • about recovery agent-help needed
    ... I am preparing for MCSE 70-270 exam, i want to know how to create a recovery ... But when i tried to create a recovery agent it ask the .cer file, ... certificate for a individual user. ...
    (microsoft.public.windowsxp.security_admin)