- Follow via:
- RSS
- Email Alert
Question
0
Votes
win xp pro efs problem
I HAVE A SLIGHT PROBLEM WITH EFS IN WIN XP PRO. SEVERAL MONTHS BACK, I ENCRPYTED A FOLDER AND SUB FOLDERS AND FILE ON A HARD DRIVE ON ONE OF MY SYSTEMS. LATER WHEN I TURNED THAT SYSTEM ON , I HAD TO LOG ON WITH MY PASSWOR FOR THE USER ACCOUNT THAT I USE. THE SYS WOULD NOT LET ME ON. INVALID PASSWORD. AFTER SEVERAL FRUITLESS ATTEMPTS, I FINALLY REBOOTED THE SYS AND USED F8 TO LOG ON IN SAFE MODE. USEING ADMINISTRATOR RIGHTS, I REMOVER MY USER ACT PW AND AFTER LOGGING ON TO THE SYSTEM NORMALLY, I WENT TO USER ACIUNTS ,MY USER ACOUNT PUT THE SAME PW BACK ON THE USER ACT THAT IT SHOULD HAVE BEEN BEFORE. LOGGED OFF AND BACK ON WITH PW. THEN I TRIED TO VIEW THE EBCRYPTED FOLFER/FILES TO NO AVAIL, TRIED TO DECRYPT THEM, NO AVAIL. I NEED HELP, CAN ANY ONE PLEASE ADIVSE ME AS TO A POSSIBLE WAY TO DECRYPT THOSE FILES. I WOULD BE VERY GRATEFUL. MARTY CHANDLER
15th Mar 2007
Answers (1)
0
Votes
Restore for your Backup either the Data or
Encryption Key or both and then after mounting the encryption key you will be able to read your data.
If you where bright enough not to backup the data with Encryption you can read it straight away without a problem.
If you don't have a backup or the encryption key M$ best advice will be to find a Good Hacker to break the encryption.
Similarly you can take the original copy of this encrypted data to a Data Recovery House who specialises in recovering Encryption Keys with Forensic Data Recovery which will mean the destruction of the HDD in question and a fairly hefty hit to your hip pocket.
As the Encryption Method needs to be breakable to Government Departments for Security Reasons you could volunteer your HDD to one of these Security Agencies for use to test their Recovery machines but that may mean the total loss of everything or a several year wait till they actually need your HDD to test from.
When you overrode the Account you deleted the Encryption Key and that is why you have this problem.
It's really much faster and a lot cheaper to grab your most recent Backup and restore from there.
Col
If you where bright enough not to backup the data with Encryption you can read it straight away without a problem.
If you don't have a backup or the encryption key M$ best advice will be to find a Good Hacker to break the encryption.
Similarly you can take the original copy of this encrypted data to a Data Recovery House who specialises in recovering Encryption Keys with Forensic Data Recovery which will mean the destruction of the HDD in question and a fairly hefty hit to your hip pocket.
As the Encryption Method needs to be breakable to Government Departments for Security Reasons you could volunteer your HDD to one of these Security Agencies for use to test their Recovery machines but that may mean the total loss of everything or a several year wait till they actually need your HDD to test from.
When you overrode the Account you deleted the Encryption Key and that is why you have this problem.
It's really much faster and a lot cheaper to grab your most recent Backup and restore from there.
Col
15th Mar 2007
Replies
If you know anyone or have access to a server with Windows Server installed you can install the drive, boot the server and then take ownership of the files, make sure you set the owner to "Everyone" and make sure "Everyone" has full control of the folders otherwise when you boot into XP from your drive you will still have the same problem.
I've had this problem on numerous occasions at our offices,this seems to work easiest. Alternatively download the Live Ubuntu CD and boot from that, you will be able to access the files with EFS protection.
I've had this problem on numerous occasions at our offices,this seems to work easiest. Alternatively download the Live Ubuntu CD and boot from that, you will be able to access the files with EFS protection.
daniel@...
4th Aug 2008
by using cipher command in comand prompt generate a certificate(data recovery agent).by using we can decrypt the encrypted folder.
naganathan2007@...
4th Aug 2008
