Re: how to recover the private key if user account is removed

From: Steven Umbach (n9rou_at_comcast.com)
Date: 09/22/03


Date: Mon, 22 Sep 2003 03:00:15 GMT


Hi Ric. At his point of your setup, there is no conventional way to recover the
key to recover EFS files. That is why I referred to link for Elcomsoft recovery
tool. Microsoft reportedly has a tool and can also help you recover files, but
it will probably be more than $100. Here is another link for OE info from that
site. I just checked and the site I listed was working for me. I have also
provided two links to KB articles to help you better understand EFS. --- Steve

http://insideoe.tomsterdam.com/faqs/index.htm
http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316
http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B255742

"Ric" <rlinkc@hotmail.com> wrote in message
news:05b301c380b2$88308100$a301280a@phx.gbl...
> thx Steve
>
> I know the password
>
> but the user account is removed , so I can logon with that
> profile...
>
> my computer >property > profile
>
> the profile name changed to " unknown acoount" the "copy
> to" button is grey out
>
> then how to recover the private key? the user profile is
> surely there
>
> also, I can open the web page about oe, can you check
>
> Richard
> >-----Original Message-----
> >If you know the users password and it is worth $100 to
> you there is a program that
> >may be able to recover the EFS files using the private
> key. They have a demo version
> >that should at least tell you if that is possible. ---
> Steve
> >
> >http://www.crackpassword.com/about/news_detail.php?ID=245
> >http://insideoe.tomsterdam.com/ -- Info on Outlook
> Express and files.
> >
> >"ric" <rlinkc@hotmail.com> wrote in message
> >news:04db01c3805d$2c3d3af0$a001280a@phx.gbl...
> >> the loacl user account is being removed after running
> >> dcpromo to demote a DC to standalone server
> >>
> >> the user profile is still but cant logon to that profile
> >>
> >> and in my computer>property> profile
> >>
> >> the original local account profile is renamed tp "unknow
> >> account" with copy to" grey out
> >>
> >> I manage to create new user account ( of course sid
> >> chnaged) and copy all desktop, favorite, my document
> >> folders back
> >>
> >> but
> >> 1) how to recover the old private key??
> >>
> >> 2) how to get back the emails in oe under the original
> >> user account??
> >>
> >> Regards
> >>
> >> Ric
> >
> >
> >.
> >