Re: What _does_ EFS stand for?

From: Chris Perigo (chrisperigo@hotmail.com)
Date: 12/05/02 

From: "Chris Perigo" <chrisperigo@hotmail.com>
Date: Thu, 5 Dec 2002 03:04:01 -0800

All,

Really appreciate everyone's input on this - although
there does seem to be a variety of opinion expressed.

I am currently applying all the patches and updates I had
before and then - for the hell of it - will try and
reinstate the system state data and will see where I get
to (not much to lose). However, I'm far from confident.

It did occur to me that if I just completely reinstate
the _entire_ backup I might have a better chance, but I
realise that several key os files etc will be locked as
they are in use.

If I format the disk again though I will not be able to
reinstate the backup as the backup program will no longer
be available - nor for that matter will the data as I
backed up onto a network disk and will be unable to
access the network. I could burn the backup to multiple
CD-Rs or something but will still require the restore
program to process them. Can I run the restore from the
Win XP CDROM or something?

Does anyone know how I can work around these problems to
completely reinstate the windows installation from before?

Cheers,

Chris Perigo
>-----Original Message-----
>AFAIK the system state alone does not include all files
necessary for
>recovery of encryption. The statement was "if you
backed up the entire hard
>drive including system state." Not "if you backed up
system state."
>Generally you need to be able to boot into the previous
install of windows
>to get your files back. Generally once the windows
folder is deleted,
>you're out of luck.
>
>[If you have the System State plus the original user
profiles from
>\Documents and Settings\, you could have a remote
chance, though I'm not
>sure you can successfully restore the system state from
a different windows
>installation and get Windows to boot. For example, at a
minimum I would
>expect all the exact same windows service packs and
patches that were on the
>previous install of Windows be installed on the new
version of Windows, and
>there are probably other serious problems you'd
encounter. If you're able
>to recover your files this way, please let me know,
because I'd be surprised
>but I'd want to share that information with others in
your situation.]
>
>It seems likely that your EFS files are gone forever.
There are a few very
>rare exceptions that could save you, listed here:
>
>http://securityadmin.info/faq.htm#efs
>
>
>"Chris Perigo" <chrisperigo@hotmail.com> wrote in message
>news:086101c29ba4$d23621e0$d4f82ecf@TK2MSFTNGXA11...
>> Roger -
>>
>> Thanks also to you for your response. Sounds more
>> promising. I did include the system state data to the
>> backup so I'm hopefull..... Once I work out how to do
it
>> we'll see.
>>
>> Cheers,
>>
>> Chris Perigo
>>
>> >-----Original Message-----
>> >When you said that you "backed up the entire disk" if
you
>> >meant that you used the NTbackup utility to back up
the
>> >whole system with the system state option included
then
>> >you do have a route to recover the files by restoring
the
>> >old system. Otherwise you are likely out of luck, per
>> the
>> >post of David Cross.
>> >
>> >--
>> >Roger Abell
>> >MS MVP (Security, Windows), MCDBA, MCSE both
>> >Associate Expert - Windows XP ExpertZone
>> >http://www.microsoft.com/windowsxp/expertzone
>> >
>> >"Chris Perigo" <chrisperigo@hotmail.com> wrote in
message
>> >news:064d01c29b82$50e7d6a0$d5f82ecf@TK2MSFTNGXA12...
>> >> Greetings All,
>> >>
>> >> I upgraded my PC from Win ME to XP pro some months
>> back.
>> >> (Machine is on home network using workgroups).
>> >>
>> >> Shortly thereafter I decided to convert my
filesystem
>> >> from FAT32 to NTFS so as to explore the new
>> possibilities
>> >> available etc.
>> >>
>> >> Ended up with the dreaded 512kb cluster size which
>> >> brought the machine's performance to its knees
(ankles
>> >> actually) and causes _massive_ levels of
fragmentation
>> >> for reasons which I appreciate.
>> >>
>> >> Whilst nosing round at new options available I
rather
>> >> foolishly encrypted the My documents folder in my
login
>> >> account. Then tried logging in as another user to
see
>> if
>> >> they could access them. They could - oh well forget
it
>> >> then.....
>> >>
>> >> Recently got a new laptop which gave me the empty
disc
>> >> space required to back up the entire disc so having
>> done
>> >> so I bravely reformatted my disc which had the
desired
>> >> effect of creating a (default) 4096kb cluster size.
>> Then
>> >> reinstalled XP and yes performance does seem to have
>> >> improved significantly again.
>> >>
>> >> Then reinstated the documents and settings hierachy
for
>> >> all users. Job's a good un.................??
>> >>
>> >> As most of you no doubt already appreciate this now
>> >> leaves everyone except me happy as larry. I,
however,
>> had
>> >> completely forgotten my documents were all
previously
>> >> encrypted so now cannot access anything. (*LOTS* of
>> work).
>> >>
>> >> Spent 2 days chasing my arse round the help files
etc
>> >> relating to efs, mmc, recovery agents, certificates
etc
>> >> and now realise that *nothing* I now do on the
machine
>> (I
>> >> made myself a DRA) can retrieve the data. eek.
>> >>
>> >> However, because I had backed up _the entire_
machine
>> >> prior to the reformat, I am still fairly hopeful
that I
>> >> can get my data back. Just don't know what I would
>> >> require to do.
>> >>
>> >> Can any of you bright sparks inform me:-
>> >>
>> >> 1) Will I be able to recover my data?
>> >>
>> >> 2) How to go about it?
>> >>
>> >> Thanks to anyone who can help.
>> >>
>> >> ....so what does EFS stand for (apart from the
obvious)
>> >> etremely ******* stupid? (I'll leave the f to you
>> >> imagination!!)
>> >>
>> >> Cheers
>> >>
>> >> Chris Perigo
>> >> [Bloke who _thought_ he new something about
computers]
>> >
>> >
>> >.
>> >
>
>
>.
>

Relevant Pages

  • RE: Directory Services Could not start
    ... copying file 'oleaut32.dll' from a w2k3 member server to the problematic ... I think a windows security update may not have installed correctly. ... The Ntds.dit file in the system state backup is located in a different ...
    (microsoft.public.windows.server.active_directory)
  • Re: How to copy your whole main partition?
    ... Incremental backup of my installation is exactly the reason I started ... Director, Partition Manager, Partition Magic, and more recently the ... Windows 7 beta will be my fourth. ...
    (alt.comp.hardware.pc-homebuilt)
  • RE: Recovery Problems
    ... (dosen't appear to be a hardware failiure, windows install messed up). ... I've managed to get the failed one to the normal windows 2k3 setup, ... Reinstall Windows and patch to same SP/Hotfix level as your last backup. ... restore SYSTEM STATE. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win update; newsgroup into OE; find win backup
    ... you might want to get out your XP installation CD and ... You'll find other newsgroups for Office programs listed on this web site. ... The Windows Backup seems easy too. ...
    (microsoft.public.windowsxp.general)
  • Re: Server Recovery
    ... Install the basic Windows Server portion of SBS from CD1. ... NOT SBS) Service Pack that was current to the installation when the backup was performed. ... Restore the system state and all files from backup but DO NOT RESTART. ...
    (microsoft.public.windows.server.sbs)