Unable to access Encrypting File System despite knowing username/password

jsausten_at_hotmail.com
Date: 12/13/04


Date: 13 Dec 2004 06:06:30 -0800

This morning my WinXP SP2 laptop suddenly refused to boot and wouldn't
get past the first few lines of the bios. Its on its way back to the
supplier and I have pulled the hard drive and put it into a external
USB housing in order to recover files, including several directories
that were encrypted using Windows' Encrypting File System. I have
logged onto my desktop using the exact same user name/password
combination as I was using on the laptop and I can browse the entire
hard drive, but I cannot open, copy or move any of the encrypted files.

Googling the problem, it appears that I need the Encryption Certificate
Key for the laptop in order to be able to decrypt the files.

I have followed KB308421 and attempted to take ownership of the
encrypted directories. I have also tried using the cipher command line
tool, but this also fails.

Are there any other techniques I can use to access these files?

So my questions are:
1. The laptop hard drive is undamaged. Can I access the Encryption
Certificate Key?
2. One of the encrypted directories was also shared and I used to
regularly access that directory from the desktop and I never had a
problem. How on earth did this work?
3. Why isn't the importance of backing up your Certificate displayed
in big bold flashing print when you attempt to encrypt a directory? I
know the username and password used to encrypt the files; why would I
even think that anything else was need to access the files?
4. If I can't recover the files, why am I even permitted to browse the
encrypted sub-directories? Surely even knowing file names and directory
structure is a security problem.

Thanks,

Stephen



Relevant Pages

  • UPDATE; Encrypted Laptop Poses Legal Dilemma
    ... Encrypted Laptop Poses Legal Dilemma ... stymied by a password-protected encryption program. ... Now Boucher is caught in a cyber-age quandary: ... The government has appealed the ruling. ...
    (alt.true-crime)
  • RE: Need a Full Drive Encryption program
    ... Need a Full Drive Encryption program ... Booting from a linux or other boot disks will defeat most setups, ... Since the BIOS controls the access to the hard drive, upon power-up, the ... > the laptop back to IBM. ...
    (Security-Basics)
  • Re: NTFS File Encryption Question
    ... Unfortunately, they are not written in "novice english", but it's supposed to be possible to import the certificate and key and then be able to decrypt the file on another computer. ... I need to be able to move that USB drive to my laptop and be able to access the EFS encrypted files on the laptop. ... I have attempted to export the certificate and keys from the desktop and import them onto the laptop. ... Now, however, I wanted to be able to read those with my laptop, so I thought I would export the encryption keys to a ".pfx" file, which I did and put on the FAT partition, protected with a password. ...
    (microsoft.public.windowsxp.general)
  • Re: Dell Laptop on Local Area Network?
    ... You don't have to do anything in the router setup, leave the router itself alone unless you are currently operating without encryption. ... On the new laptop, you may have to set some things or you may not, I don't actually have a 1505, and in any case Dell offers multiple WiFi options. ... You may have to set the wireless channel on the Dell to match the router (on some laptops, some WiFi cards and with some software, the laptop will "search" all channels and find your network, in other cases it has to be explicitly set). ...
    (alt.sys.pc-clone.dell)
  • Re: Encrypting MS SQL databases
    ... What about an encrypted volume on every laptop? ... server 2K does not have encryption tools included. ... EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE ... The NSA has designated Norwich University a center of Academic Excellence ...
    (Security-Basics)