Re: How to Decrypt EFS Files in Win XP Pro when OS is lost.

The Ghost image should work if the proper certificates are in the image. Pfx
files are the one that contain the EFS private key which is what is needed
to decrypt EFS files for the appropriate user or as a Recovery Agent. Pfx
files are also password protect the EFS private key. You can use efsinfo to
see what users and RA [if any] can decrypt the file and see the thumbprint
information of the certificates which can be helpful to make sure you have
the proper EFS certificate AND private key. The .cer files will not decrypt
any EFS file as they contain only the certificate and the public key. ---
Steve

http://support.microsoft.com/?kbid=243026 --- works the same for XP Pro
also.


"Tim" <Tim@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:74C97955-235A-440D-83E6-389B55DD16A1@xxxxxxxxxxxxxxxx
>I am feeling your pain currently. Do not depend on Norton Ghost to save
>your
> *** on this one since I am in your shoes after attempting to restore the
> image with the original .cer and .pfx files which would have made this
> simple.
>
> The resource guide for XP leads the beginner to believe that these keys
> can
> be recovered, but it sounds as though this definitely not the case and
> this
> makes sense since I have been attempting to generate working certs for
> several hours to no avail.
> --
> truth
>
> "andivijay" wrote:
>
>> Hi there,
>>
>> Well my problem is, one of my user have formated the win XP m/c
>> without knowing that he had Encrypted folder with files encryped in
>> it. Now my problem is, he has formated his C: drive and the files are
>> in D: drive, and after the reinstallation of the M/c none of his files
>> are opening, worst case, this M/c is a standalone m/c and I dont have
>> a solution where i can decrypt his files for him. Please suggest me
>> for the action.
>>
>> Vijay A
>>
>> --
>> Posted using the http://www.windowsforumz.com interface, at author's
>> request
>> Articles individually checked for conformance to usenet standards
>> Topic URL:
>> http://www.windowsforumz.com/Security-Admin-Decrypt-EFS-Files-Win-XP-Pro-OS-lost-ftopict424267.html
>> Visit Topic URL to contact author (reg. req'd). Report abuse:
>> http://www.windowsforumz.com/eform.php?p=1420122
>>


.

Loading