Re: Files Encrypted by windows cannot be accessed after Format.



On Sat, 23 Jun 2007 17:55:00 -0700, The Relinquished wrote:

I had several files encrypted, using windows encryption from the Advanced
Attributes in the Properties tab. That was on a secondary hard drive.
At some point I Formated my main drive which i had windows on.
Now the formerly encrypted files cannot be accesed no matter what i do.
I cannot delete, copy, cut or anything else through normal windows actions.
I can get the message that i do not have the propper rights to access them.
This is on my PC, logged in as the Admin.
It seems like the only person with access to the files is the pre-format
administrator.
PLEASE is there any way i can get my files back?
If any other info is necesary i would be more than glad to provide it.

Many thanx in advance

1) Did you back up your EFS encryption keys from the certmgr.msc console
*before* you formatted the OS drive.
If the answer is no, then you have lost the easy way to recover the files

2) Did you back up the local Administrators EFS recovery keys? If the
answer is no, then you lost the 2nd easiest way to recover the keys

3) Does your computer belong to a domain? If yes, the account that holds
the EFS recovery agent *may* have the EFS recovery key for the domain, abd
be able to recover your file. If you look on the General tab, then click
Advanced, within there you should be able to view the thumbprint of the
recovery certificate. They would need to have the certificate *and private
key* to perform the recovery.

4) Did you keep a backup of the old "Documents and Settings" folder that
you can restore. This would place the required binaries of the encryption
keys back on the hard disk (You formatted the drive, right). If you did
have these backups, then you could purchase an EFS recovery program that
would allow you to re-use these keys, as longs you know the last password
that you used on the system *before* the format (this is required to
decrypt the keys that are protected by the DPAPI).

If you answered no to all of these, the files are lost.

Brian
.



Relevant Pages

  • RE: Protecting sensitive files on a Windows file server
    ... In EFS, it takes me 5 minutes to remove the recovery key from the ... Protecting sensitive files on a Windows file server ... You have to have backup keys in case the original ...
    (Security-Basics)
  • RE: Protecting sensitive files on a Windows file server
    ... I thoroughly disagree with you about the recovery key issue. ... You have to have backup keys in case the original ... don't care what your encryption program is, ... Protecting sensitive files on a Windows file server ...
    (Security-Basics)
  • Re: Rebuilt PC, drive letter change results in Recorded TV lost to
    ... chance there is of recovering data. ... Formatting actually removes entire FAT (a ... When you run the format command you are simply erasing the Root Directory ... There are a number of tricks that data recovery programs use to ...
    (microsoft.public.windows.mediacenter)
  • Re: ciphered files
    ... > If you are not in a domin, and you did not export your encryption keys ... > My view on EFS: ... as well not having created a Recovery Agent (with backup of the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Best way to reformat HD.
    ... drive from within XP, you will need to do it prior to install. ... If you don't have a retail copy, your computer hsould have come with either recovery disks or a recovery partition. ... If you have recovery disks or a recovery partition you 'do not' need to format the drive. ... Right now I am planning on a backup of the 'Program Files' and 'Documents and Settings' folders followed by a format from the Command Prompt. ...
    (microsoft.public.windowsxp.newusers)