Re: Retrieving Encrypted Directories



Doug N wrote:
Hi... Thanks for the quick response. I am not proficient enough in MS
to know what 'EFS' is, but what I had done originally is just gave
myself the only security permissions to access the folder, so that
only my logon could see or access it.
All the child folders and files were protected by default.

Since my original post, I have been able to regain ownership and
access permissions to the folder, and can now see all the files,
however when I try to open any of them, whether .doc, .jpg, avi, pdf,
etc, I get the same response, "you do not have permission..." yet
when I check the permissions, I am the owner! I can now move, delete
or copy the files, but cannot OPEN them!

If it's any help, the folders and files that are protected or
inaccessible to open, are in GREEN text, vice BLACK for all others.

Thanks

Doug


"Marcin Domaslawski" wrote:

Hi,
If you talking about EFS encryption, then to decrypt file(s) you need
certificate used to encypt files berofe system crash. Without
previous cerificate your file(s) is/are lost.

Some about EFS
http://www.microsoft.com/technet/prodtechnol/winxppro/support/dataprot.mspx

Marcin Domaslawski

U¿ytkownik "Doug" <Doug N@xxxxxxxxxxxxxxxxxxxxxxxxx> napisa³ w
wiadomo¶ci news:AE94F594-07B9-488E-A9ED-BCA1123FB1B2@xxxxxxxxxxxxxxxx
I recently had a major system crash, requiring a new operating
system install. I was able to save many of my data files, though I
lost all windows
system files and MS applications.

I had encrypted a personal directory, and I see that it managed to
be saved,
as it is in the 'USERDATA' file that was created. However it will
not allow
me to open it, move it, delete it, or view its content. When I
rebuilt my Windows profile I used the same username and password
info, but it still will
not open.

There is no prompt for a password as it was accessible only to my
logon profile with no other security, so only I could view or open
it when logged
on.

How can I decrypt this folder?

Thanks

Doug

The green indicates they are encrypted with XP's rather excellent encryption
system. Since you reinstalled XP, it is now as though they were "stolen"
and put on a different computer. As you can see, the thief would not be
able to crack them without some pretty expensive work.
Unfortunately, neither can you now, without the certificates. That's a
disk you make, so that if you move or reinstall, you'll be able to gain
access to your files again. It's partly MS's fault for not making it
clearer you had to do that, and partly your fault for not reading the
appropriate Help sections about it beforehand.
I'm afraid the files are gone; unless you have an old image of the drive
you can restore long enough to get the protection turned off, and then
reinstall again. I say image because you'll have to restore the entire
operating system from an image for it to work. No image, not gonna work.
The encryption is doing its job.

HTH
Pop`


.



Relevant Pages

  • Re: Lock Folder
    ... Using permissions can be obviated by moving the drive to another host where the SIDs for the accounts for the permissions are unknown under the other instance of Windows, so none of the permissions are enforced. ... You could use EFS but it is susceptible to password cracking. ... If you use an encrypted container, the encryption is based on the password. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Serious EFS Issue
    ... user's information it copied her Documents and Settings to the 2003 server. ... I am also using folder redirection with her My Documents folder, ... where I am having issues with her data encryption. ... > for use with EFS (use the account to look in the Certificates ...
    (microsoft.public.windows.server.security)
  • Re: Minimum NTFS Permissions - Theres such a thing???
    ... ?2001 Microsoft Corporation. ... HOW TO: Set Minimum NTFS Permissions Required for IIS 5.0 to Work WGID:198 ... " List Folder Contents" ...
    (microsoft.public.inetserver.iis.security)
  • Re: Using EFS for laptops in a domain
    ... Another good place to post EFS ... But the real test is dragging an encrypted file into the folder. ... when I drag it to the correct spot on the server, ... I don't want to disable encryption on the server, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to delete orphaned 1.5 GB System Restore folder
    ... The fact that the tech support is based in India has nothing to do with the ... If so you may want to leave this folder alone. ... down to all children folders because i can set those permissions to ... try deleting from the command line using system by using the AT ...
    (microsoft.public.windowsxp.security_admin)