Re: EFS Recovery

I think your best bet would be to see if the RA can recover the files.
Another option is to use the EFS recovery program from Elcomsoft. It will
search your computer for any EFS private keys and then if you can enter the
correct password for that user account you should be able to access your
files. Their free version will let you know if it can find any EFS private
keys and decrypt a small portion of your files to let you know it will work.
The full version is $100.

Steve

http://www.elcomsoft.com/aefsdr.html

<szebarjadi@xxxxxxxxx> wrote in message
news:1158178089.848312.24540@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi all,

I know this has been covered here before, and my apologies for bringing
it up again. Couldn't seem to find the exact answer to my question
with a search...

Here's the scenario:

- I had a laptop imaged with Win XP Pro and had encrypted my PST file.

- Recently, our company was acquired and they went through and reimaged
all of the machines and migrated everyone over to a new domain. (I
totally forgot to back up my keys, etc.)
- I tried recovering the file on the new image (new domain w/new
credentials), and realized that I couldn't access it.
- I have a test box which I had a domain admin add back on the previous
domain. I logged in using my old domain credentials and it shows me as
a user with transparent access to the file, and also a the owner.
- I try to uncheck the encryption, and it says access denied.

So...what are my options? Do I have to ask a domain admin to export
the data recovery agent keys and then import them on my box? Is the
reason it's not working because my test box is a Windows 2003 Server,
and not XP Pro like the platform that the file was encrypted on? If I
were to reformat this machine with XP Pro and get it back to the same
platform, and then use my old domain credentials, will I have access to
decrypt the file? Or because I didn't back up my cert/key, is the only
way out to use the cert for the data recovery agent?

Thanks in advance for your thoughts/comments!
/s



.

Relevant Pages

  • RE: Protecting sensitive files on a Windows file server
    ... In EFS, it takes me 5 minutes to remove the recovery key from the ... Protecting sensitive files on a Windows file server ... You have to have backup keys in case the original ...
    (Security-Basics)
  • Re: ciphered files
    ... > If you are not in a domin, and you did not export your encryption keys ... > My view on EFS: ... as well not having created a Recovery Agent (with backup of the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS
    ... I agree that Microsoft did a poor job informing users of the risks of EFS by ... not prompting to backup the EFS keys like Vista does. ... includes a notification to remind users to backup their private keys. ... links below are for EFS Recovery form Elcomsoft and links to Data ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Have key(s) for EFS files, still denied
    ... Hopefully the data recovery company can get the key. ... EFS files from your description. ... In the fall of 2004 we bought a new Dell laptop and I moved/copied EFS ... In October 2005 I reformatted our Gateway C partition and re-installed XP. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Corrupted Admin Profile
    ... > My view on EFS: ... > Do not to use encryption unless you are in a domain and you know ... as well not having created a Recovery Agent (with backup of the ... > Q241201 How to Back Up Your Encrypting File System Private Key ...
    (microsoft.public.windowsxp.security_admin)