November 06, 2000 01:06 PM

Decrypting EFS

Rating: (0)
Windows IT Pro
InstantDoc ID #15907
Encrypting File System is more complex than it appears
You probably know that all flavors of Windows 2000 support Encrypting File System (EFS), which encrypts your files before the system stores them on disk. (Mark Russinovich discusses the workings of EFS in detail in Internals, "Inside Win2K NTFS, Part 2," page 45.) At first glance, I guessed that I simply needed to flip a switch in the GUI to tell Win2K to encrypt a file, then Win2K would encrypt the file as I saved...

ARTICLE TOOLS

You must be a paid Professional Member to access this entire article.

Already a Professional Member? Please log in now:

NOT A PROFESSIONAL MEMBER? YOU CHOOSE:

Monthly or Annual

Professional Membership

VIP Membership

Compare Member Benefits

Add a Comment

I also am having an identical problem to some of the others. I have encrypted pictures and files on a secondary drive and due to a system error i re-installed server 2003 on the main drive...hence wiping out the user profile that created the encryption.
How can i recover the files as i did not see any resolution comments in response to that.
please help....I'd hate to lose those pictures.

Eric2/19/2005 10:25:57 PM


I have a MAJOR PROBLEM...Its complicated to explain. But try to understand what happened.

I tried to do a home network using Windows 2003 Server Enterprise (Active Directory), and connected my Windows XP Pro to it.

Somehow some of my personal files kept on D:\\ got ENCRYPTED on my XP machine, which I dont remember doin it.

Because I couldnt get Active Directory to do what I wanted (a friend managed to do it on his PC), I decided to scrap the Server installation, and put XP on the server as well.

I tried to view the files on my 1st XP machine, and it wouldn't let me do anything with the files. I found out they got encrypted with EFS, and now I can't decrypt them.The Recovery Agent that was on the Server's HD has been formatted and put into another PC, which I have sold. So I no longer own that HD.

So no I'm stuck here without any Recovery Agent, or any way of decrypting my files.

I have tried EFSINFO and CIPHER, but it wont let me. Somehow, the files don't even recognise my several standard passwords. NOBODY else has used my PC's, I KNOW that.

I have tried a number of software. One program finds the decrypted files, and asks me for a password (which I don't know anymore), but I can't find a Password Recovery software for EFS encrypted files.

PLEASE can someone help me with this, or the whole problem I have. I don't even have a Recovery Agent or Certificates.

Anonymous User 12/24/2004 6:11:40 AM


i have deleated the user profile of the encrypted user. I try to decrypt files, login as administrator. but no use. what shall i do. can i decrypt.

issay 12/21/2003 10:21:49 AM


I found the article very informative and interesting.
I am in the following trouble. I have had some files decrypted in drive D. Since my operational system had some trouble, I decided to format my disk without however exporting the keys for encryption. As a result, I can not access important files (those encrypted). Do you have any suggestion?
Thanks in advance

Sofoklis karapidakis 12/12/2003 12:40:55 AM


Could anyone tell me how can in decrypt a file which is encrypted by a user. I know that only the user can open it and there is a recovery agent who can do it. I added the recovery agent but still when I open the file I find the
access denied message. Can some tell me the complete process of decryping the file. I will be greatful

thanks.

Jan5/4/2003 11:44:43 PM


Hello everybody!! I have a problem. I had fat& NTFS partition. on fat I have win 98 & on NTFS win2000prof.
I formatted the FAT partition .Then I wasnot able tologon. Myproblem is that I had a user in Win2000 whose data was on EFS partition. When I format fat partiotn I was not able to boot throght win2000. Now I want t o recover win2000 users data which Iwas not able to recover as I installed another windows 2000 over the previous windows 2000. So the previous users were not able to logon & I am not able to recover te data by new administrator of win2000 which I instaalled recently. plz do help me how to recover it. If with recovery agent it is possible than how & from which site I canget recovery agent.

anil12/9/2001 4:19:32 AM


You must log on before posting a comment.

Are you a new visitor? Register Here

windows server 2008 login scripts

I have 2 win2k8 servers one pdc and bdc. The domain is exampledom.com They are connected to 2 iscsi luns which replicate each other. We are running ac...222-96118

advertisement

GOOGLE LINKS
SPONSORED LINKS
FEATURED LINKS

White Papers

Your remote offices contain valuable electronic data – are they adequately protected? Learn how proven technologies can reliably and cost-effectively back up a branch office from a central location, in real time, to disk or tape, and even utilize existing backup solutions.

Downloads

PacketTrap IT is a comprehensive and affordable network management and application monitoring solution that solves problems associated with bandwidth, network and application performance, and connectivity. Gain insight into your network - try PacketTrapIT free for 21 days!

Web Seminars

IT administrators have to solve a myriad of problems. This web seminar outlines the ten most common systems management pains - including managing highly distributed systems and dealing with data theft/loss – and the best practices to address each.

eLearning Series

We bring the experts direct to you to share their real-world perspective and expertise. During each event, three sessions stream in real time, so you can learn, ask questions, and get solutions.
Upcoming event: Getting the Most with Exchange 2010 with Paul Robichaux

Subscribe to Windows IT Pro!

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.