Encrypted files recovery - urgent

Lukas

Real Name No Gimmicks
Joined
30 Jan 2002
Messages
421
Hi all,

the HD of my laptop has failed. I managed to re-install windows 2000 on to that laptop and salvage "documents and settings folder" from the old intallation.

But I can't access my dcuments folder: the files are encrypted, and the system isn't not allowing me to decrypt them: 'access denied'

I don't know how to decrypt the files, or override decryption.
I tried backing them up, and restoring without the security, but that didn't help.

This I got from an article on technet:

My Documents: Encrypted
Users who can decrypt:
Unknown (CN=Administrator,L=EFS,OU=EFS File Encryption Certificate)
Certificate thumbprint: 8494 AD1F F746 17FF 8E62 FEF4 B765 C96A F032 2614
Recovery Agents:
Unknown (OU=EFS File Encryption Certificate, L=EFS, CN=Administrator)
Certificate thumbprint: 78F6 B7E1 EA2D 7412 5FF6 26A1 49D7 86C4 4902 EBC9


Is it usefull?
I MUST be able to decrypt those files.


thnx for help


Lukas
 
I tried command line cipher command too:

C:\Program Files\Resource Kit>cipher /d /f "d:\documents and settings\administra
tor\My documents\*.*"

Decrypting directories in d:\documents and settings\administrator\My documents\


backup NT4 [OK]
bootable CD [ERR]
bootable CD: The specified file could not be decrypted.
CD2 [ERR]
CD2: The specified file could not be decrypted.
docs [ERR]
docs: The specified file could not be decrypted.
Downloads [OK]
eConsole1.0i [ERR]
eConsole1.0i: The specified file could not be decrypted.
hp burner [ERR]
hp burner: The specified file could not be decrypted.
Impulz [ERR]
Impulz: The specified file could not be decrypted.
My Pictures [ERR]
My Pictures: The specified file is read only.
My Received Files [ERR]
My Received Files: The specified file could not be decrypted.
odb [ERR]
odb: The specified file could not be decrypted.
rainmeter [OK]
Security [ERR]
Security: The specified file could not be decrypted.
VC [ERR]
VC: The specified file could not be decrypted.
vids [ERR]
vids: The specified file could not be decrypted.

3 directorie(s) within 1 directorie(s) were decrypted.



Any1? Please.
 
Hi you have to logon as Actual adminstrator .

Username : administrator
Pass : *********

If you logon as a user even if you have administrator privilages it wont allow you to decrypt the files
 
Your most likely NOT going to be able to decrypt your files :(

if you use encryption you should ALWAYS make a backup of the recovery agent certificate...without it..even the admin can't decrypt the files once the original SID has been destroyed :( i'm sorry man, hope you prove me wrong and get your stuff back :(
 
oh, I thought you had just locked yourself out with permissions, not actual decryption :eek:

It *IS* possible but it takes a long time and I'm not sure if there's any tools to do it publicly available. If the data is really important you can probably recover it, but most likely it won't be worth the time/money/hassle.
 
Don't know about the encryption...

But I did the same to unencrypted My Documents, it wouldn't let me gain access to the folder, so I used backup to backup the directory, then restored it to a different location.

The most important part of the procedure was to tell backup NOT to restore the security settings (unlick the tick box in the advanced options).

This might at least get the system to let you fiddle with the folder!
 
Hi all,

thnx for the replies...


I actally didn't manage to decrypt the files. :(
My boss is kinda pissed but hey, who cares :)

Anywayz, thnx for the help




Lukas
 
Hey, wtf? Did you GO to the pages I linked in my post?? It explains everything about how to recover a lost encryption key and exactly how to fix your problem. If you can't do it with what I gave you, then you missed something.

Just READ man, just read! It's all there! Look at my previous reply.
 

Members online

No members online now.

Latest profile posts

Also Hi EP and people. I found this place again while looking through a oooollllllldddd backup. I have filled over 10TB and was looking at my collection of antiques. Any bids on the 500Mhz Win 95 fix?
Any of the SP crew still out there?
Xie wrote on Electronic Punk's profile.
Impressed you have kept this alive this long EP! So many sites have come and gone. :(

Just did some crude math and I apparently joined almost 18yrs ago, how is that possible???
hello peeps... is been some time since i last came here.
Electronic Punk wrote on Sazar's profile.
Rest in peace my friend, been trying to find you and finally did in the worst way imaginable.

Forum statistics

Threads
62,015
Messages
673,494
Members
5,621
Latest member
naeemsafi
Back