Re: EFS Encryted Folder - Recovery Help needed

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 05/15/04 

Date: Sat, 15 May 2004 04:57:12 -0700

> It's interesting to note that I can decrypt the folders
> in my data drive using my new credentials, just not the
> files within - go figure....
EFS actually does not encrypt folders.
Windows marks folders so that files stored there will
default to being encrypted.

MS has augmented the documents significantly but
regrettably has told us that they cannot find a way
that is free from side-effects to alter the code for
EFS so that key export is forced on the use at first
use, or at least a big red warning message is.

> casual home user of XP Pro. Adding snapins to a
> management console to get to export keys is a challenge
> to start with.
MS believes Home edition is for the casual Home user.
The Certificates admin tool can be used to export the
cert/key pair without building a custom MMC. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"TechnoWiz" <thebos1@fastmail.fm> wrote in message
news:d4b801c43a1a$ccd21fe0$a401280a@phx.gbl...
> Many thanks for the reply, you are surely correct. It
> would have been nice if MS had noted in the docs on using
> their "easy" file and folder EFS that if the system got
> toasted, an exported key would be the only way to recover
> data in circumstances like this.
>
> I found the help and method needed to export keys,
> unintuitive and bothersome, certainly not easy for the
> casual home user of XP Pro. Adding snapins to a
> management console to get to export keys is a challenge
> to start with.
>
> I have, of course, now exported my brand new key and
> stored it on a CD for future use should a similar
> disaster occur. I think I'll refrain from using EFS
> anyway.
>
> It's interesting to note that I can decrypt the folders
> in my data drive using my new credentials, just not the
> files within - go figure....
>
> Cheerz
> Steve Carter
>
> TechnoWiz
> >-----Original Message-----
> >Without the essential keys, the data is effectively gone.
> >See this link to help prevent this in the future:
> >http://www3.telus.net/dandemar/encrypt.htm
> >
> >-- 
> >Jupiter Jones  [MVP]
> >http://www3.telus.net/dandemar/
> >
> >
> >"TechnoWiz" <thebos1@fastmail.fm> wrote in message
> >news:d2a701c439a5$f5abca80$a301280a@phx.gbl...
> >> I have two HDD's on my system. Primary HDD has WinXP
> Pro
> >> installed. Second HDD contains all my data including My
> >> Documents etc. also backup files for my billing system
> >> etc.
> >> The data directory on the second HDD was encrypted
> using
> >> my logon profile (TechnoWiz) and XP's EFS (Select
> >> directory - properties - advanced - encrypt including
> >> folders/files/subfolders.) I did not export the key at
> >> the time.
> >>
> >> My primary HDD died and became unrecoverable. I have
> >> installed new version of XP and set up new accounts.
> >>
> >> I am unable to access my data files in the encrypted
> >> folders and most frustrating is that I have an Image
> file
> >> of my original HDD using Acronis TruImage also stored
> >> within the encrypted data folder. There is even a copy
> of
> >> my original registry which I exported on the 1st of May
> >> when the image was created. It is only now that I have
> >> found that the backup folder on my 2nd HDD was also
> >> encrypted inadvertently so I cannot use the backup
> image.
> >>
> >> Is there any way I can decrypt the folder, or even the
> >> image file which I can then use to recreate my original
> >> boot drive and I should then be able to get access to
> my
> >> data?
> >>
> >> Am I able to send someone a copy of the encrypted
> >> registry (.reg) file somehow? If you can decrypt it, it
> >> may have the original key data for decoding my data
> files
> >> in it that you could return to me. (I'm desperate to
> get
> >> my billing data back !!).
> >>
> >>
> >> Regards
> >> TechnoWiz
> >
> >
> >.
> >

Relevant Pages

  • Re: EPS
    ... EFS will encrypt only the ... EFS encrypts with one certificate per user; so all the files and folders ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Roaming Profiles & Their Local Security Permissions
    ... Administrators are all powerful on the computer obviously. ... is to allow and encourage users to encrypt their folders that they want to ... They can not encrypt their whole profile but they could ... accessed in case of a problem with reinstallation or corruption of their EFS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cipher.exe works but not the GUI interface ?!?
    ... Yes I can encrypt or decrypt any files or folders with cipher.exe, ... I suppose something has disable the GUI option, ...
    (microsoft.public.win2000.security)
  • Help with EFS
    ... We want to encrypt the XP sp2 laptops issued to our mobile users. ... becomes unencrypted on the file share so no problem there with recovery. ... My understanding of the way efs + dra works is that you have a recovery pc ... their My Documents folders, while on the network. ...
    (microsoft.public.win2000.security)
  • Re: Encrypting a folder and all its contents.
    ... encrypt files and folders. ... A particular folder that I can encrypt, ... If you do not back those up, and anything happens to the account profile ... transport laptops with proprietary data on them). ...
    (microsoft.public.windowsxp.general)