Re: XP file encription

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 02/16/03


From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Sun, 16 Feb 2003 15:25:49 -0700


I have not yet heard of anyone being successful at
importing the account info. Keep in mind that some
of what is needed is encrypted into the system's own
secrets storage, so the original system must be resurrected
so that one can be running it.

-- 
Roger Abell
MS MVP (Security, Windows), MCDBA,  MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
<ddominique@yahoo.com> wrote in message news:045e01c2d047$90672750$d5f82ecf@TK2MSFTNGXA12...
> Do you know of a way to import the encrypting account if a 
> backup copy of all the windows system files and registry 
> were made beforehand?  I believe Peter is working on such 
> a method, but if you already know of one, I'd appreciate 
> the input.  I've already tried copying the files from 
> windows\repair, and while this lets me log in using my old 
> administrator account and password, I'm still unable to 
> access the encrypted files.  How can I restore the user 
> accounts?  Any help would be appreciated.
> 
> Thanks,
> Mark & Dom
> >-----Original Message-----
> >Without the exported key, of the encrypting account or 
> >of the recovery agent if one way configured, then outside 
> >of a domain environment your only hope is in getting the 
> >old build bootable again and then logging in with the 
> >encrypting account with its password as it was when the 
> >account was last successfully accessing its encrypted 
> files.
> >
> >-- 
> >Roger 
> >
> >"PedroB" <peter.venis@virgin.net> wrote in message 
> news:050a01c2cf86$95432c90$d7f82ecf@TK2MSFTNGXA14...
> >> Hope someone can help with this one...Quick senerio:
> >> 
> >> Had some data encripted on slave disk, upgraded PC and 
> >> installed XP Pro again, attached slave disk.
> >> Now can't access the encripted data on this slave disk, 
> >> all other data on slave disk is readable.
> >> 
> >> No key disk was created by the user.
> >> If the computer name and user name is the same as 
> previous 
> >> install, does this mean that the Certificate Thumbprint 
> >> will be the same, or will this be re-gererated in 
> random 
> >> HEX format...
> >> 
> >> For instance User "Peter" Computer name "Master"
> >> will the Certificate Thumbprint be the same on OLD and 
> NEW 
> >> machine?
> >> 
> >> Thanks in advance.
> >.
> >


Relevant Pages

  • Re: EFS Recover Agents Unable to decrypt files
    ... The files were encrypted on XP or 2003 and you're trying to decrypt them ... > Created a test file on a workstation by a test account with Domain User ... > Recovery Agents I performed the process described in "Encrypting File ...
    (microsoft.public.win2000.file_system)
  • EFS Recover Agents Unable to decrypt files
    ... Default Domain administrator and additional domain administrator have ... Created a test file on a workstation by a test account with Domain User ... Recovery Agents I performed the process described in "Encrypting File System ...
    (microsoft.public.win2000.file_system)
  • Re: Win XP File Excryption - corrupt user account
    ... is the administrator's account that was the file recovery account. ... recreate the accounts new certificates were generated. ... Best practices for the Encrypting File System ... in Windows Server 2003, in Windows 2000, and in Windows XP ...
    (microsoft.public.windowsxp.security_admin)
  • Re: De encrypted files in windows Xp
    ... but i have the original backup ... profle for my account, i have domain. ... have an intact copy of the encrypting account's (the ...
    (microsoft.public.win2000.security)
  • Re: RPC - ImportBegin() / ImportNext()
    ... years therefore there is a general reluctance to consider alternative methods. ... are running under the same domain account on the same machine. ... Possibly RpcNsBindingExport() has exported different data than ... >> Are there any conditions under which a successful call to ...
    (microsoft.public.win32.programmer.networks)