Encrypted files recovery - urgent

Discussion in 'Windows Desktop Systems' started by Lukas, Mar 21, 2002.

  1. Lukas

    Lukas Real Name No Gimmicks

    Messages:
    421
    Hi all,

    the HD of my laptop has failed. I managed to re-install windows 2000 on to that laptop and salvage "documents and settings folder" from the old intallation.

    But I can't access my dcuments folder: the files are encrypted, and the system isn't not allowing me to decrypt them: 'access denied'

    I don't know how to decrypt the files, or override decryption.
    I tried backing them up, and restoring without the security, but that didn't help.

    This I got from an article on technet:

    My Documents: Encrypted
    Users who can decrypt:
    Unknown (CN=Administrator,L=EFS,OU=EFS File Encryption Certificate)
    Certificate thumbprint: 8494 AD1F F746 17FF 8E62 FEF4 B765 C96A F032 2614
    Recovery Agents:
    Unknown (OU=EFS File Encryption Certificate, L=EFS, CN=Administrator)
    Certificate thumbprint: 78F6 B7E1 EA2D 7412 5FF6 26A1 49D7 86C4 4902 EBC9


    Is it usefull?
    I MUST be able to decrypt those files.


    thnx for help


    Lukas
     
  2. Lukas

    Lukas Real Name No Gimmicks

    Messages:
    421
    I tried command line cipher command too:

    C:\Program Files\Resource Kit>cipher /d /f "d:\documents and settings\administra
    tor\My documents\*.*"

    Decrypting directories in d:\documents and settings\administrator\My documents\


    backup NT4 [OK]
    bootable CD [ERR]
    bootable CD: The specified file could not be decrypted.
    CD2 [ERR]
    CD2: The specified file could not be decrypted.
    docs [ERR]
    docs: The specified file could not be decrypted.
    Downloads [OK]
    eConsole1.0i [ERR]
    eConsole1.0i: The specified file could not be decrypted.
    hp burner [ERR]
    hp burner: The specified file could not be decrypted.
    Impulz [ERR]
    Impulz: The specified file could not be decrypted.
    My Pictures [ERR]
    My Pictures: The specified file is read only.
    My Received Files [ERR]
    My Received Files: The specified file could not be decrypted.
    odb [ERR]
    odb: The specified file could not be decrypted.
    rainmeter [OK]
    Security [ERR]
    Security: The specified file could not be decrypted.
    VC [ERR]
    VC: The specified file could not be decrypted.
    vids [ERR]
    vids: The specified file could not be decrypted.

    3 directorie(s) within 1 directorie(s) were decrypted.



    Any1? Please.
     
  3. DrX

    DrX Guest

    Hi you have to logon as Actual adminstrator .

    Username : administrator
    Pass : *********

    If you logon as a user even if you have administrator privilages it wont allow you to decrypt the files
     
  4. insaNity

    insaNity Guest

    Hi

    I believe a program over at Winternals aka SysInternals will help. You will probably have to buy it though.
     
  5. Qumahlin

    Qumahlin Moderator

    Messages:
    2,006
    Your most likely NOT going to be able to decrypt your files :(

    if you use encryption you should ALWAYS make a backup of the recovery agent certificate...without it..even the admin can't decrypt the files once the original SID has been destroyed :( i'm sorry man, hope you prove me wrong and get your stuff back :(
     
  6. Mister Zee

    Mister Zee Guest

  7. insaNity

    insaNity Guest

    oh, I thought you had just locked yourself out with permissions, not actual decryption :eek:

    It *IS* possible but it takes a long time and I'm not sure if there's any tools to do it publicly available. If the data is really important you can probably recover it, but most likely it won't be worth the time/money/hassle.
     
  8. robin.munro

    robin.munro Guest

    Don't know about the encryption...

    But I did the same to unencrypted My Documents, it wouldn't let me gain access to the folder, so I used backup to backup the directory, then restored it to a different location.

    The most important part of the procedure was to tell backup NOT to restore the security settings (unlick the tick box in the advanced options).

    This might at least get the system to let you fiddle with the folder!
     
  9. Lukas

    Lukas Real Name No Gimmicks

    Messages:
    421
    Hi all,

    thnx for the replies...


    I actally didn't manage to decrypt the files. :(
    My boss is kinda pissed but hey, who cares :)

    Anywayz, thnx for the help




    Lukas
     
  10. Mister Zee

    Mister Zee Guest

    Hey, wtf? Did you GO to the pages I linked in my post?? It explains everything about how to recover a lost encryption key and exactly how to fix your problem. If you can't do it with what I gave you, then you missed something.

    Just READ man, just read! It's all there! Look at my previous reply.