Re: EFS file recovery without the exported cert

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 11/05/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Tue, 5 Nov 2002 11:59:32 -0500

"Robban" <robert.svensson@sas.se> wrote in message
news:3d8331e4.0211050635.7331d902@posting.google.com...
> I need some help. I use efs on a few folders that resides on a w2k
> machine that has crashed. It turns out that the
> winnt\system32\config\software (the software part of the registry)
> file had become corrupt so I had to restore in from the backup
> software.sav file.
>
> I then reinstalled w2k but in a new folder (c:\winnt2) and left the
> file system intact. I can access and browse all files on the old w2k
> installation, including C:\Documents and Settings\user\Application
> Data\Microsoft\SystemCertificates\My\Certificates and so on...
>
> I there a way to recover my certs and my EFS files?
>
> Please don't tell me that I need to backup my certs after applying efs
> or anything like that. I'm aware of it and that's not the problem
> right now.

Sorry, the general consensus here seems to be that there's no way to do this
without being able to boot into the previous version of Windows. Perhaps
you can try again to get the previous version of Windows to boot... try
using the install disks and the repair process, etc?

============

If you did not back up the encryption key and are having problems, there are
only a few instances where you may be able to recover your files:

1) If the computer is joined to a Windows 2000 / .NET domain, the domain
Administrator account is the default EFS Recovery Agent and might be used to
recover the files. [Other accounts can be added as recovery agents.] In a
Windows 2000 or newer domain, the encryption keys are stored on the server,
so that you may be able to recover the encrypted files EVEN IF Windows has
been reinstalled on the workstation. For more information, try searching
www.google.com and/or www.microsoft.com/support for something like "EFS
recovery-agent" or "EFS recovery-agent windows-2000 recover."

2) If the computer is not joined to a Windows 2000 / .Net domain and
Windows has NOT been reinstalled, the local Administrator account is the
default recovery agent. If you cannot log in as Administrator because the
password has been forgotten or is not working for some reason, you can see
the section in this FAQ entitled "How can I reset the Windows password?
[Windows 2000 / XP / .NET / NT]"

Relevant Pages

  • Re: Passwords on Folders
    ... > you to use passwords on folders? ... Windows NT/2000/XP do not natively let you set passwords on folders. ... Windows under which those permissions were defined. ... use NTFS on your hard drives so you can then EFS ...
    (microsoft.public.win2000.security)
  • Re: EFS file recovery without the exported cert
    ... That means I can boot the original w2k installation ... I use efs on a few folders that resides on a w2k ... >> I there a way to recover my certs and my EFS files? ... > you can try again to get the previous version of Windows to boot... ...
    (microsoft.public.win2000.security)
  • Re: Backup
    ... Mumby33 wrote: ... Windows XP Professional from the Recovery Disc provided by ... now runs like a dream except that I cannot recover my files ... All the folders move across from one drive to the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Encrypted files unrecoverable
    ... Windows, File Utilities to find utilities that can undelete deleted files. ... If you are able to recover any of your files, please come back and let us ... So far the rate of successful recovery of EFS ... Outgoing mail is certified Virus Free. ...
    (microsoft.public.win2000.security)
  • Re: Accessing files on old hard drive
    ... If the files were encrypted with EFS, you may not be able to ... recover them easily if at all. ... --- Steve ... I now have a new hard drive with windows ...
    (microsoft.public.security)