General discussion

Locked

Recovering EFS data

By tharindus84 ·
I I had some files encrypted (using the default WinXP encryption) in a NTFS volume (not the windows volume) in my hard disk. Some days ago, I formatted my windows partition and resized some partitions(including the one containing the encrypted files). Then I installed WinXP again. Now, although I log on as the same user as before, I can view the files but when i try to open them or copy those files.It gives an access denied error. The only command available is the delete. Those files are very important to me. I couldn't save my EFS keys before formatting. Is there any way that I can recover the data?

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

by BlitzSonik In reply to Recovering EFS data

By formatting the partition and instally a new copy of Win XP, you in effect deleted the user that encrypted those files. Although you may be using the same username, it is not the same account (unless you are using a domain account).

My suggestion is this. Log in with administrative rights and take ownership of the files. You should then be able to decryt the files in question.

HTH!

Collapse -

by BlitzSonik In reply to Recovering EFS data

By formatting the partition and instally a new copy of Win XP, you in effect deleted the user that encrypted those files. Although you may be using the same username, it is not the same account (unless you are using a domain account).

My suggestion is this. Log in with administrative rights and take ownership of the files. You should then be able to decryt the files in question.

HTH!

Collapse -

by appus In reply to Recovering EFS data

Yes.. you do have a solution..
Now the files ownerships are encrypted..
Login as administrator (or one having administrative rights) and remove the ownership and take the ownership.. you will be able to access it ..
(i had the same problem :) )

Collapse -

by ewgny In reply to Recovering EFS data

No
the files are lost

Collapse -

by drsysadmin In reply to Recovering EFS data

The files should not be. You will need a drive or partition that is formatted into FAT. Log in as the admin, then copy the files to the FAT partition. This will remove encryption as FAT is not capable of EFS functions. The only problem will arise IF the OS cannot locate decryption keys. Good Luck.

Back to Security Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums