Networks

Ask something
Discussion Locked

Need a program that can break windows EFS encryption on a file server

0 helpful
7 replies

by hurell.lyons 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

We have some sensitive information that has been encrypted on a file server. The user that encrypted had his profile blown away and re-added....it killed all his keys and the admin accounts DRA isn't recovering the data file. After wrestling with this for 2 months off and on I;ve been told just get it down ASAP.

Can you guys recommend a softare product/company that will break this encryption without too much fuss. It has to go on our file server (Which is also our DNS/Exchange/And antivirus console server) so I want to make sure I'm purchasing a product that works 9Can't afford to install/re-install apps randomly because it doesn't work as advertised.

Any assistance anyone can lend would be super.

7 replies

by hurell.lyons

Not an option....this is a hard drive in a production environment in a Raid config. Plus I'm sure my company would have issues sending our sensitive data to some random company we have no prior history with.

I have looked into elmsoft's AEFSDR product. I'm probably going to call today to find out more about their software.

by ttraband

This won't help for your current problem, but to prevent this from happening again, you need to implement a recovery agent. This is a designated user which receives EFS keys for all encrypted files so that you can access them if the regular owners/trustees are deleted or damaged.

by lesgholson

I tried this once before with files from my own system. I purposely encrypted a folder roughly 5.5MB in size on a NTFS volume, (Windows XP Pro) using EFS. I moved the encrypted folder to a external FAT32 jumpdrive. This gave me the option to remove the encryption, which I allowed. And I was able to access the files fine.

by hal 9000

If they have been destroyed it's not possible to save the data unencrypted this way.

Col

by hurell.lyons

I have tried it. I have the user trying to figure out passwords were being used at the time of encryption because after it scans the servers for valid keys it comes back and says none of them will open the files. Thats the best one from what I can tell but its not working. Looks like the Admin account as recovery agent has expired.

This discussion is closed to new replies.