(Msg. 1) Posted: Sun Aug 17, 2008 2:38 am
Post subject: How to recover encrypted files on an NTFS volume? Archived from groups: microsoft>public>win2000>security (more info?)
Hi,
Once I encrypted a few files on an NTFS volume on my local w2000 system
and... forgot about it.
In the meantime I changed my hardware and reinstalled my system many times,
but the files were copied each time to a new volume, by disk cloning or by
simple
copying.
The question is... can I decrypt them? I believe I should remember the
username
and password which was used when I encrypted the files, but I did not export
any certificates.
I know about two commercial programs that recover such files, but I am
seeking
a free solution - the files are not worth it.
I found two free and simple solutions to my problem, basing of the fact that
w2000 local administrator is able to decrypt the files.
The solutions do not work, i get the "access denied" error or something
similar.
(Msg. 2) Posted: Sun Aug 17, 2008 2:38 am
Post subject: Re: How to recover encrypted files on an NTFS volume? [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Only if you:
1) Know the password of your account at the time you encrypted the files
2) Still have the *original* profile files with the DPAPI protected key
material *from that time*
Alternatively.
1) You exported the user's efs encryption certificate and private key
2) You exported the original local administrator's recovery certificate and
private key (assuming no domain)
3) You were part of a domain, and the domain admins have the EFS recoveyr
agent's certificate and private key
4) The certificate is not self signed, and issued by an enterprise CA. The
certificate is based on a custom v2 certificate template and was issued by a
CA that implemented key archival
My guess, based on your scenario.
The files are gone.
Brian
"DoB" <DoB DeleteThis @dobson.com.pl> wrote in message
news:OYtBrFAAJHA.4528@TK2MSFTNGP05.phx.gbl...
> Hi,
>
> Once I encrypted a few files on an NTFS volume on my local w2000 system
> and... forgot about it.
>
> In the meantime I changed my hardware and reinstalled my system many
> times,
> but the files were copied each time to a new volume, by disk cloning or by
> simple
> copying.
>
> The question is... can I decrypt them? I believe I should remember the
> username
> and password which was used when I encrypted the files, but I did not
> export
> any certificates.
>
> I know about two commercial programs that recover such files, but I am
> seeking
> a free solution - the files are not worth it.
>
> I found two free and simple solutions to my problem, basing of the fact
> that
> w2000 local administrator is able to decrypt the files.
> The solutions do not work, i get the "access denied" error or something
> similar.
>
> Is it possible to decrypt my files for free?
>
> DoB.
>
(Msg. 3) Posted: Sun Aug 17, 2008 3:16 am
Post subject: Re: How to recover encrypted files on an NTFS volume? [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
> Only if you:
> 1) Know the password of your account at the time you encrypted the files
> 2) Still have the *original* profile files with the DPAPI protected key
> material *from that time*
I think I should have the original profile files backed up on CDs,
I will have to search on my shelves .
(Msg. 4) Posted: Sun Aug 17, 2008 7:02 am
Post subject: Re: How to recover encrypted files on an NTFS volume? [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
You must buy one of the 3rd party prodcuts.
If yo know the user's original password and have the original profile
directory,
You can resestablish the certificate and private key through DPAPI
decryption
But you must buy the product
Brian
"DoB" <DoB RemoveThis @dobson.com.pl> wrote in message
news:O26jpiCAJHA.5048@TK2MSFTNGP05.phx.gbl...
>> Only if you:
>> 1) Know the password of your account at the time you encrypted the files
>> 2) Still have the *original* profile files with the DPAPI protected key
>> material *from that time*
>
> I think I should have the original profile files backed up on CDs,
> I will have to search on my shelves .
>
> What then?
>
> DoB.
>
(Msg. 5) Posted: Sun Aug 17, 2008 4:52 pm
Post subject: Re: How to recover encrypted files on an NTFS volume? [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
> You must buy one of the 3rd party prodcuts.
> If yo know the user's original password and have the original profile
> directory,
> You can resestablish the certificate and private key through DPAPI
> decryption
> But you must buy the product
> Brian
Well... I am a Win32 api programmer, so if the process is not very
complex and can be described using a few guidelines, I would be eager
to program it myself.
(Msg. 6) Posted: Sun Aug 17, 2008 9:13 pm
Post subject: Re: How to recover encrypted files on an NTFS volume? [Login to view extended thread Info.] Archived from groups: per prev. post (more info?)
Best of luck to you
Brian
"DoB" <DoB.RemoveThis@dobson.com.pl> wrote in message
news:eb5pGjHAJHA.5884@TK2MSFTNGP04.phx.gbl...
>> You must buy one of the 3rd party prodcuts.
>> If yo know the user's original password and have the original profile
>> directory,
>> You can resestablish the certificate and private key through DPAPI
>> decryption
>> But you must buy the product
>> Brian
>
> Well... I am a Win32 api programmer, so if the process is not very
> complex and can be described using a few guidelines, I would be eager
> to program it myself.
>
> DoB.
>
All times are: Eastern Time (US & Canada) (change)
Page 1 of 1
You can post new topics in this forum You can reply to topics in this forum You can edit your posts in this forum You can delete your posts in this forum You can vote in polls in this forum
Home
Forums
Home
FAQ
Profile
Private Messages
Log in
.
Windows Other