Re: Encrypted File Recovery

From: Karl Levinson [x y] mvp (levinson_k@despammed.com)
Date: 03/01/03 

From: "Karl Levinson [x y] mvp" <levinson_k@despammed.com>
Date: Sat, 1 Mar 2003 16:46:59 -0500

"Peter Clark" <clark@hushmail.com> wrote in message
news:050e01c2e016$c8dec460$a001280a@phx.gbl...

> see if you can recover anything from the winnt\system32
> \config\ folder or the winnt\repair\ folder, and also you
> will need some files from your 2k profile directory.

This might work if you have a working copy of the original installation of
Windows or used a windows domain account to encrypt the password, but
otherwise I'm not sure this would work, because those keys are encrypted
with other keys that cannot be recovered just by copying profiles or files.
One of the encryption keys used is split up and stored in various places
within the Windows registry.

Links to more information on how EFS keys work:

http://securityadmin.info/faq.htm#efs2 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.449 / Virus Database: 251 - Release Date: 1/27/2003

Relevant Pages

  • Re: Recover Default EFS Security Certificate From Old Drive???
    ... >> which means it used a default EFS certificate to encrypt the folder (I ... Of course I can not access that folder currently. ... >> Is there ANY way to get at that certificate from the old drive? ... >> on a few of the folders that I had to recover immediately. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Protect Key Lost in computer
    ... I assume you used EFS to encrypt your files. ... Have you a suggestion to recover files? ... >> "Access is Denied" Error Message When You Try to Open a Folder ... >> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.security)
  • Re: What is the path to recover Encryption keys from Formatted HD
    ... >I have a customers' PC that has a folder that is encrypted and gives ... > have used a data recovery tool to recover the Documents & Settings ... Your customer lost their files by not knowing how to use EFS, ... where within the directory structure the keys are stored, ...
    (microsoft.public.windowsxp.security_admin)
  • Encrypting locked files with EFS (WinXP)
    ... I want do encrypt my user folder using the encryption file system of ... I can't encrypt the folders ... their keys which is not what I want, ... I think that I have to encrypt the SystemCertificates folder because ...
    (microsoft.public.win2000.security)
  • Re: Removing "BagsMRU" from registry
    ... Type regedit in Start Run and delete all these keys. ... By default the Remember each folder's view settings option is enabled. ... The changes you make to a folder's view is automatically saved when you close the folder. ... Group Policy adds this entry to the ...
    (microsoft.public.windowsxp.general)