Continuing Problems decrypting EFS objects

From: Peter Clark (clark_at_hushmail.com)
Date: 07/24/03


Date: Wed, 23 Jul 2003 16:02:18 -0700


not knowing the workings of reccerts.exe i could not tell
you if your "recovery" was entirely successful. however it
sounds like you probably have the correct public key in
place, but some other orginal component of efs is missing
or incorrect. since you contacted ms support for reccerts
in the first place how come they haven't helped you through
the issue to closure?

you maybe interested in this:
http://www.beginningtoseethelight.org/efsrecovery/

>-----Original Message-----
>
>Here is what I've tried:
>
>-imported old certificate and used RECCERTS.EXE to recover
>-ran "EFSINFO.EXE /y" got thumbprint "D831 7101 FE0E C79E
>C5DC 2BDD A9EE EB50 2B7E E461"
>-ran "EFSINFO.EXE /c [path...]" got:
> New Text Document.txt: Encrypted
> Users who can decrypt:
> ABSJAGUAR\terry (terry(terry@ABSJAGUAR))
> Certificate thumbprint: "D831 7101 FE0E C79E C5DC
>2BDD A9EE EB50 2B7E E461"
>
>Net: my userid and thumbprint matched that of the
>encrypted objects.
>
>
>-then I tried to decrypt folders and other objects, but
>always got "access denied" (tried many variations of
>permissions: me (terry) as owner with Full Permissions;
>owner as Administrator, "terry" at Full permissions...) I
>always checked Effective Permissions to make sure "terry"
>had Full Permissons, yet every time I cannot decrypt
>objects.
>
>-I tried a reset to "Simple File Sharing", still
>got "access denied" on decryption attempts.
>
>-Here is what may be the "master clue": I can encrypt a
>file within an unencrypted folder that contains other
>encrypted objects within it, but I cannot decrypt the file
>I just encrypted, "access denied" just like with the older
>encrypted folders.
>
>-My user (terry) has always been in the Administrators
>group (before system reinstall [when objects were first
>encrypted] and now).
>
>-I understand the parent folder is key to whether its new
>objects are automatically encrypted or not so I've tried
>to decrypt objects within unencrypted folders (which is
>another wierd thing: throughout the course of all this,
>some objects decrypted, some folders as well as some
>files/objects with no discernable permission or EFSINFO
>differences from objects that will not decrypt).
>
>Thoughts????
>.
>



Relevant Pages

  • Continuing Problems decrypting EFS objects
    ... permissions: me (terry) as owner with Full Permissions; ... yet every time I cannot decrypt ... encrypted folders. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: recovery from cipher
    ... as who can decrypt the file, the recovery agent, fingerprint info to compare ... >> Hi Walter. ... >> encryption status of folders in a directory. ...
    (microsoft.public.win2000.security)
  • Re: EFS Encryted Folder - Recovery Help needed
    ... > It's interesting to note that I can decrypt the folders ... EFS actually does not encrypt folders. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Cannot Decrypt Files
    ... encrypted the files and the certificate thumbprint numbers, ... we've tried as domain admins. ... > some files and folders have been encrypted and will not copy to a remote ... necessary to decrypt EFS files and folders. ...
    (microsoft.public.win2000.security)
  • Re: cant decrypt EFS encrypted files
    ... There is a myth on the net that doing just that will decrypt the data. ... If it were that simple EFS would be worthless. ... >> Contact Microsoft if you can restore the profile. ... >>> this I soon discovered that is possible to create Recovery Agent ...
    (microsoft.public.windowsxp.security_admin)