Copied files are not decrypted

  • Thread starter Thread starter sunorain
  • Start date Start date
S

sunorain

On my PC's HDD I have some files encrypted. Used "folder encryption" that is
in one of folder properties selected checkbox "Encrypt data..."

Folder is shown in green in explorer respectively.

In the beginning, when I copied any files from this folder to another
location (e.g. USB HDD) files became automatically decrypted, i.e. I could
read those files from USB HDD on any other PC.

But now something changed. Though I did not make any changes to security or
file system settings, files copied from encrypted folder to USB HDD stay
encrypted. That is - I can read them only on PC where I copied them to USB
HDD. On other PCs where I connect USB HDD files are not accessible.

How can I change it back? I need files copied from encrypted folder to USB
HDD to decrypt automatically, because it's backup procedure and I need them
accessible on any other PC. How can I stop encryption attribute to be copied
together with file?
 
From: "sunorain" <[email protected]>

| On my PC's HDD I have some files encrypted. Used "folder encryption" that is
| in one of folder properties selected checkbox "Encrypt data..."

| Folder is shown in green in explorer respectively.

| In the beginning, when I copied any files from this folder to another
| location (e.g. USB HDD) files became automatically decrypted, i.e. I could
| read those files from USB HDD on any other PC.

| But now something changed. Though I did not make any changes to security or
| file system settings, files copied from encrypted folder to USB HDD stay
| encrypted. That is - I can read them only on PC where I copied them to USB
| HDD. On other PCs where I connect USB HDD files are not accessible.

| How can I change it back? I need files copied from encrypted folder to USB
| HDD to decrypt automatically, because it's backup procedure and I need them
| accessible on any other PC. How can I stop encryption attribute to be copied
| together with file?


Make sure the USB mass storage device is formatted in FAT and not NTFS.
 
not an option. ntfs more reliable, better handles huge volumes (it's USB HDD)
and timesync is bad when files and synced between NTFS and FAT. Sync software
makes too many errors comparing time stamps.

And why make it if there's another solution? At least until very recent time
everythign worked fine. Just can't find out what has changed....
 
sunorain said:
not an option. ntfs more reliable, better handles huge volumes
(it's USB HDD) and timesync is bad when files and synced between
NTFS and FAT. Sync software makes too many errors comparing time
stamps.

And why make it if there's another solution? At least until very
recent time everythign worked fine. Just can't find out what has
changed...
Click to expand...

Considering where you are posting (Windows XP Newsgroup) - nothing has
changed with the EFS you are using that I am aware of. Sounds more like you
have changed the way you are doing something or the format of the external
drive.

Things you should understand about EFS (above and beyond just the best
practices and how not to lose your data.)

a.. Copying a file into an encrypted folder encrypts the file, but moving it
into the folder leaves the file encrypted or unencrypted, just as it was
before you moved the file.

a.. If encrypted files are moved they stay encrypted, if users add files to
an encrypted folder the new files are automatically encrypted.

a.. Moving or copying EFS files to another file system removes the
encryption, but backing them up preserves the encryption (with native tools
for sure - cannot say otherwise with any confidence.)

a.. If you copy your files to a CD/DVD to back them up, they will be
decrypted.

a.. If you send encrypted files through e-mail, the copy sent will not be
encrypted.
 
As David said use FAT32 partition on destination device. However since you
do not want to do that you can use Xcopy with the /g switch to copy files
and have the destination decrypted. You can use Xcopy command as a scheduled
task if you want to automate the procedure.

Steve
 
Shenan Stanley said:
Sounds more like you
have changed the way you are doing something or the format of the external
drive.
Click to expand...

It's clearly stated in initial post that no changes have been made in
filesystem. Also copying procedure is fairly trivial, can't imaging what
could I changed.
Main drive was
USB HDD was NTFS and still copying from main HDD to USB HDD
automatically decrypted files and on USB HDD they were decrypted. I don't
know why and how but this is why I'm here....


Things you should understand about EFS (above and beyond just the best
practices and how not to lose your data.)
Click to expand...

It's nice that you quote EFS manual in response, but it's not what's needed
on forum, really. I've read help already.
 
You are the man Steve!
Sorry for such "chauvinist" appraisal, I'm just so glad to see finally a
piece of useful advice among dozen of garbage reply posts.
 
sunorain said:
You are the man Steve!
Sorry for such "chauvinist" appraisal, I'm just so glad to see
finally a piece of useful advice among dozen of garbage reply posts.
Click to expand...

However - you still must be mistaken in your original assumptions. It's not
the way things work (as you originally described) and if you changed
nothing, then nothing would have changed in how things worked. ;-)
 
Well, I understood that basic point here is file system format. It was NTFS
and it stays NTFS. If seasoned MVP couldn't guess other reason of changed
copy procedure :), my chances are even lesser.

I'm absolutely serious - it's the way how things worked before - and I had
absolutely no idea it's not "standard" or "normal". Until lightning stroke...
 
note (to self? or curious cats): ignore all crap above could not get xcopy /g
to work as needed.

HOWEVER any MS-DOS file manager started from Windows does the trick :)

Files copied by Norton Commander from NTFS to NTFS will be decrypted on the
fly and even long file names preserved :D
Rare GUI FMs can do this as well.

ah, those professional advisors... ;)
 
hi,
i have a problem like this.
i have an active directory DC at my office and i m using folder redirection on my clients. i need to encyrpt folders and files at users computer and my file server. i create efs certificates and using efs at my clients.
first problem is when a client copying an efs file to a non-efs folder, new file become decrypted. i must prevent this firstly. is it possible from GP or another place? and if possible how can do this?
second problem is when a client attached a efs file to an email, recipient of this e mail must not access to the file. is this possible, and if possible how can i do this?
my company want anybody can access the efs files from outside of our company. do you have a different solution of this problem?
please help me!
thanks...
 
Back
Top