Re: "Access denied" on encrypted files after reinstall

From: Steven L Umbach (n9rou_at_no-spam.ameritech.net)
Date: 05/20/04


Date: Wed, 19 May 2004 23:01:39 -0500

I assume you are talking about an in place upgrade. Possibly your private
key used for decryption has become corrupted. By default the built in
administrator account would be the recovery agent which is required in W2K.
If you have not tried it, log on as THE built in administrator to see if
that account can access the files. You may also try using the cipher command
to decrypt them.

You can restore a file to another computer, but you must logon as the same
user/password and your private key also needs to be available - not just the
certificate. If you exported/imported a .pfx file then the private key was
also included. It may also help to use the efsinfo command to view what
user/recovery agent can decrypt the files and view the thumbprint info for
the certificate that you can then try to match up to the certificate in the
users/reovery agents user certificate store available via mmc certificates
snapin for user. The thumprints must match. The link below may be
elpful. --- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B243026

"Alfio Lupo" <anonymous@discussions.microsoft.com> wrote in message
news:151e01c43db5$709d2be0$3501280a@phx.gbl...
> Hi,
>
> due to a strange system behaviour (e.g. some apps refusing
> to uninstall), I decided to re-install Windows 2000 over
> itself. I had done it previosly without any harm to the
> installed software.
>
> This time, though, I had an encrypted (EFS) folder. After
> reinstallation, any attempts to access files in that folder
> end up with an "access denied" error.
>
> I've already tried to export my EFS recovery certificate to
> another machine and to copy the encrypted folder there
> (using ntbackup), still I get the same error.
>
> Am I missing something? Is there any way out of this
> situation? Any help would be appreciated... needless to
> say, those files where quite important...
>
> Thanks in advance.
>
> Regards,
> Alfio



Relevant Pages

  • Re: Encrypting File System Recovery
    ... the recovery agent to decrypt the files and yes you need to have the private EFS ... administrator account and were not able to decrypt the files while having full ... and use mmc to open the certificate snapin for user to see if the thumbprint on ...
    (microsoft.public.win2000.security)
  • Re: Enterprise Certificate Authority question
    ... machine authentication, software signing, and email encryption and signing. ... of keys used in PKI - public and private. ... The certificate as commonly referred to is ... key can decrypt the signature. ...
    (microsoft.public.win2000.security)
  • Re: DRA is Decrypting Files when it shouldnt be!!!
    ... > EFS is allowing the RA to decrypt 200 files that were encrypted BEFORE an RA ... > encryption to get the RA to decrypt encrypted files. ... the default RA certificate was used. ... certificate and private key only when needed). ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problem with EFS in W2K....help!
    ... are being followed to import the certificate AND the EFS private key for the recovery ... Just importing the certificate in a .cer file ... > decrypt the files.... ...
    (microsoft.public.win2000.security)
  • HttpWebRequest client certificate private key problem (VB.NET 2002)
    ... I have a valid client certificate with a corresponding private key. ... certificate is in x509 format and the .cer file contains the private ... Q1- What kindof filedoes the CreateFromSignedFile accept? ...
    (microsoft.public.dotnet.security)