Re: Encrypted files - can't access

From: Dmitry Korolyov (d__k_at_nospamformorons.mail.ru)
Date: 07/14/03 

Date: Mon, 14 Jul 2003 03:34:18 +0400

If you have a backup of recovery agent private key or private key of the
user who encrypted the files, you may try to import then into your
certificate store, logoff, log on again and try to open the files. Should
work if all done correct.

If something does not work still or you do not have backups of the private
keys, look for AEFSDR - an utility from Elcomsoft which can grap stored
encryption keys from hard drive. If you have physical access to the hard
drive, and if it's contents didn't change after failure (ie same precautions
as with usual data recovery), you should be able to restore them. The tool
works on W2k up to SP3, WinXP. Last time I heard info about it it didn't
work with WinXP SP1 only. 

--
Dmitry Korolyov
d__k@nospamformorons.mail.ru
To e-mail me, remove "nospamformorons"
from the address.
"stan" <stan@nycap.rr.com> wrote in message
news:3F104481.5090401@nycap.rr.com...
> I had a system crash and rebuilt my WIN 2000 server. Unfortunately, I
> have a folder with encrypted files which I now can't access.  I've (I
> think) set myself up as a recovery agent and instaled the certificate in
> the trusted root.  (whatever that means).  When I try to use the cipher
> command, or use windows explorer to change the properties to un -
> encrypted, I get an access is denied message.
>
> I'm totally lost at this point. Can anyone point me in the proper
direction?
>
> TIA,
>
> Stan
>

Relevant Pages

  • Re: HELP
    ... users private key you would need to have a backed up copy from the old operating ... A Recovery Agent would need to have been ... > 3- you have the EFS private key for the Recovery agent in a .pfx ... >>> MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS ...
    (microsoft.public.windows.group_policy)
  • Re: Folder Encryption
    ... Unless you are on a domain, do not use encryption. ... it is described how to create a data recovery agent, ... page 5 "Data Recovery on Standalone Machines" ... Back Up Your Encrypting File System Private Key in Windows 2000 ...
    (microsoft.public.windowsxp.security_admin)
  • Key Recovery and Decryption
    ... I had the encryption key backed up on ... and designating a Data Recovery Agent. ... to install the Administrator's Data Recovery Certificate ... corresponding private key but if I try to export this ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Encrypting File System
    ... personal encryption certificate ... copies of your certificate (and no recovery agent certificates exist), ... | I've tried everything I can think of to get around the problem of not having the original private key and NOTHING works for me. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: decrypt my encrypted files
    ... But I don't know if I made any encryption keys which is what a lot of the troubleshooting websites talk about. ... If you failed to backup your encryption keys or create a recovery agent, ... To change the recovery policy for the local computer - http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/encrypt_to_change_policy.mspx ...
    (microsoft.public.windowsxp.security_admin)