Re: What _does_ EFS stand for?
From: Chris Perigo (chrisperigo@hotmail.com)
Date: 12/05/02
- Next message: Senthil Kumar.D: "Exchange System Manager"
- Previous message: Tom Wu: "RE: Files missing from backup"
- In reply to: Chris Perigo: "Re: What _does_ EFS stand for?"
- Next in thread: Roger Abell [MVP]: "Re: What _does_ EFS stand for?"
- Reply: Roger Abell [MVP]: "Re: What _does_ EFS stand for?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Chris Perigo" <chrisperigo@hotmail.com> Date: Thu, 5 Dec 2002 03:37:27 -0800
One last question:-
Copies of _some_ of the data files affected by this
disaster had been transported by yours truly to a laptop
machine running Win XP Home with an NTFS file system.
Those files are still accessible in the laptop.
Are those files still encrypted? Would the required key
be available therefore from that machine?
My inclination is that this would not help because the
files appear to have been decrypted automatically in the
copy to the briefcase on the new machine.
In fact if I create a new file on the new XP Home machine
and attempt to encrypt it the encrypt option is greyed
out which causes me to conclude that encrytion is
unavailable in XP Home. Is this correct?
Cheers (again),
Chris Perigo
>-----Original Message-----
>All,
>
>Really appreciate everyone's input on this - although
>there does seem to be a variety of opinion expressed.
>
>I am currently applying all the patches and updates I
had
>before and then - for the hell of it - will try and
>reinstate the system state data and will see where I get
>to (not much to lose). However, I'm far from confident.
>
>It did occur to me that if I just completely reinstate
>the _entire_ backup I might have a better chance, but I
>realise that several key os files etc will be locked as
>they are in use.
>
>If I format the disk again though I will not be able to
>reinstate the backup as the backup program will no
longer
>be available - nor for that matter will the data as I
>backed up onto a network disk and will be unable to
>access the network. I could burn the backup to multiple
>CD-Rs or something but will still require the restore
>program to process them. Can I run the restore from the
>Win XP CDROM or something?
>
>Does anyone know how I can work around these problems to
>completely reinstate the windows installation from
before?
>
>Cheers,
>
>Chris Perigo
>>-----Original Message-----
>>AFAIK the system state alone does not include all files
>necessary for
>>recovery of encryption. The statement was "if you
>backed up the entire hard
>>drive including system state." Not "if you backed up
>system state."
>>Generally you need to be able to boot into the previous
>install of windows
>>to get your files back. Generally once the windows
>folder is deleted,
>>you're out of luck.
>>
>>[If you have the System State plus the original user
>profiles from
>>\Documents and Settings\, you could have a remote
>chance, though I'm not
>>sure you can successfully restore the system state from
>a different windows
>>installation and get Windows to boot. For example, at
a
>minimum I would
>>expect all the exact same windows service packs and
>patches that were on the
>>previous install of Windows be installed on the new
>version of Windows, and
>>there are probably other serious problems you'd
>encounter. If you're able
>>to recover your files this way, please let me know,
>because I'd be surprised
>>but I'd want to share that information with others in
>your situation.]
>>
>>It seems likely that your EFS files are gone forever.
>There are a few very
>>rare exceptions that could save you, listed here:
>>
>>http://securityadmin.info/faq.htm#efs
>>
>>
>>"Chris Perigo" <chrisperigo@hotmail.com> wrote in
message
>>news:086101c29ba4$d23621e0$d4f82ecf@TK2MSFTNGXA11...
>>> Roger -
>>>
>>> Thanks also to you for your response. Sounds more
>>> promising. I did include the system state data to the
>>> backup so I'm hopefull..... Once I work out how to do
>it
>>> we'll see.
>>>
>>> Cheers,
>>>
>>> Chris Perigo
>>>
>>> >-----Original Message-----
>>> >When you said that you "backed up the entire disk"
if
>you
>>> >meant that you used the NTbackup utility to back up
>the
>>> >whole system with the system state option included
>then
>>> >you do have a route to recover the files by
restoring
>the
>>> >old system. Otherwise you are likely out of luck,
per
>>> the
>>> >post of David Cross.
>>> >
>>> >--
>>> >Roger Abell
>>> >MS MVP (Security, Windows), MCDBA, MCSE both
>>> >Associate Expert - Windows XP ExpertZone
>>> >http://www.microsoft.com/windowsxp/expertzone
>>> >
>>> >"Chris Perigo" <chrisperigo@hotmail.com> wrote in
>message
>>> >news:064d01c29b82$50e7d6a0$d5f82ecf@TK2MSFTNGXA12...
>>> >> Greetings All,
>>> >>
>>> >> I upgraded my PC from Win ME to XP pro some months
>>> back.
>>> >> (Machine is on home network using workgroups).
>>> >>
>>> >> Shortly thereafter I decided to convert my
>filesystem
>>> >> from FAT32 to NTFS so as to explore the new
>>> possibilities
>>> >> available etc.
>>> >>
>>> >> Ended up with the dreaded 512kb cluster size which
>>> >> brought the machine's performance to its knees
>(ankles
>>> >> actually) and causes _massive_ levels of
>fragmentation
>>> >> for reasons which I appreciate.
>>> >>
>>> >> Whilst nosing round at new options available I
>rather
>>> >> foolishly encrypted the My documents folder in my
>login
>>> >> account. Then tried logging in as another user to
>see
>>> if
>>> >> they could access them. They could - oh well
forget
>it
>>> >> then.....
>>> >>
>>> >> Recently got a new laptop which gave me the empty
>disc
>>> >> space required to back up the entire disc so having
>>> done
>>> >> so I bravely reformatted my disc which had the
>desired
>>> >> effect of creating a (default) 4096kb cluster size.
>>> Then
>>> >> reinstalled XP and yes performance does seem to
have
>>> >> improved significantly again.
>>> >>
>>> >> Then reinstated the documents and settings
hierachy
>for
>>> >> all users. Job's a good un.................??
>>> >>
>>> >> As most of you no doubt already appreciate this now
>>> >> leaves everyone except me happy as larry. I,
>however,
>>> had
>>> >> completely forgotten my documents were all
>previously
>>> >> encrypted so now cannot access anything. (*LOTS* of
>>> work).
>>> >>
>>> >> Spent 2 days chasing my arse round the help files
>etc
>>> >> relating to efs, mmc, recovery agents,
certificates
>etc
>>> >> and now realise that *nothing* I now do on the
>machine
>>> (I
>>> >> made myself a DRA) can retrieve the data. eek.
>>> >>
>>> >> However, because I had backed up _the entire_
>machine
>>> >> prior to the reformat, I am still fairly hopeful
>that I
>>> >> can get my data back. Just don't know what I would
>>> >> require to do.
>>> >>
>>> >> Can any of you bright sparks inform me:-
>>> >>
>>> >> 1) Will I be able to recover my data?
>>> >>
>>> >> 2) How to go about it?
>>> >>
>>> >> Thanks to anyone who can help.
>>> >>
>>> >> ....so what does EFS stand for (apart from the
>obvious)
>>> >> etremely ******* stupid? (I'll leave the f to you
>>> >> imagination!!)
>>> >>
>>> >> Cheers
>>> >>
>>> >> Chris Perigo
>>> >> [Bloke who _thought_ he new something about
>computers]
>>> >
>>> >
>>> >.
>>> >
>>
>>
>>.
>>
>.
>
- Next message: Senthil Kumar.D: "Exchange System Manager"
- Previous message: Tom Wu: "RE: Files missing from backup"
- In reply to: Chris Perigo: "Re: What _does_ EFS stand for?"
- Next in thread: Roger Abell [MVP]: "Re: What _does_ EFS stand for?"
- Reply: Roger Abell [MVP]: "Re: What _does_ EFS stand for?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
