EFS: Is it recoverable?

  • Thread starter Thread starter Sam
  • Start date Start date
S

Sam

I had some problems with one of my profiles and rights/permissions. I
felt it would be necessary to reinstall windows.

Before reinstalling (havent gone that far yet) I took out the from my
desktop drive and connected it to a drive enclosure in my laptop and I
started deleting. Some files are encrypted. I didnt realized that i
encrypted them awhile ago to prevent accidental deletion (DOH).

I ran the trial of Advanced EFS and it was able to select the files but
they want $100 for the key, only 512 bytes of data was saved, the rest
is with zeros.

How can i tell if i have the certificates installed on the hard drive?
Or is it just better to do a complete format and forget about it?
 
@v46g2000cwv.googlegroups.com>, (e-mail address removed)
says...
I had some problems with one of my profiles and rights/permissions. I
felt it would be necessary to reinstall windows.

Before reinstalling (havent gone that far yet) I took out the from my
desktop drive and connected it to a drive enclosure in my laptop and I
started deleting. Some files are encrypted. I didnt realized that i
encrypted them awhile ago to prevent accidental deletion (DOH).

I ran the trial of Advanced EFS and it was able to select the files but
they want $100 for the key, only 512 bytes of data was saved, the rest
is with zeros.

How can i tell if i have the certificates installed on the hard drive?
Or is it just better to do a complete format and forget about it?
Click to expand...
If you have not rebuilt the computer, or have not
deleted the profile, then you should be fine.
Load the Certificates snap-in, focused on the current
user, in an MMC console.
Look for any certificates that include encrypting file
system for purpose, right-click the certificate, and
choose export.
Ensure that you include the private key in the export.

If you can do this, the private key is available. Move
it to another location, and you have it

If you ahve blown it away, or reinstalled, or have
created a new profile, teh tools such as Advanced EFS
will work.
I guess it is up to you to decide if the data is worth
more than $100

Brian
 
Thanks Brian,
Where would it say "encrypting file system for purpose"? I have
"issued to/by intended purpose, and friendly name. As options. Also,
will the mmc know to look in the portable (USB) hard drive?
 
@t39g2000cwt.googlegroups.com>, (e-mail address removed)
says...
Thanks Brian,
Where would it say "encrypting file system for purpose"? I have
"issued to/by intended purpose, and friendly name. As options. Also,
will the mmc know to look in the portable (USB) hard drive?
Click to expand...
It will say Encrypting File System in the "Intended
Purposes" field. It does not matter that you have a USB
hard drive. The certificates are stored in the user's
profile, not on the drive where hte encrypted files
reside.
Brian
 
Back
Top