HELP---------HELP

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

DEAR ALL,

I HAVE SOMETHING HAPPEN TO MY USERS.

I HAVE 5 USERS, ALL OF THEM IS UNDER THE SAME WORKGROUP, AND ALL OF THEM IS
WINDOWS XP-PRO SP2.

THEY ARE IN DIFFERENT WORKGROUP, THAN MY ORIGINAL WORKGROUP, BECAUSE THE 5
USERS ARE FROM ANOTHER CONSULTANT COMPANY AND THEY ARE WORKING FOR PERIODE OF
8 MONTHS.

ANYWAY, ONE OF THE USERS, HE WAS WORKING ON HIS PC, AND USED TO SAVE HIS
FILES - EITHER IF ITS WORD OR EXCEL, ON ONTHER FOLDER.

HE USED TO LOGIN TO HIS PC WITH THE USER NAME ( YTR) AND THIS USERS IS FROM
ADMINISTRATIVE GORUP.

FOR SOME RESOANS, THIS USERS HE MAKE ENCRYPTED FILE SYSTEM OVER THIS FOLDER
AND ALL OF THE FILES WHICH IS UNDER THIS FOLDER.

AFTER SOMETIME, THIS USERS WE DISCOVER TAHT HE FORMATE HIS PC COMPLETELY ,
EXCEPT THE PARTITION WHICH IS INCLUDE HIS FOLDER - THE ONE WHICH WAS
ENCRYPTED-.

AFTER HE FORMATE HIS PC COMPLETELY, HE CREATE THE SAME USER ON THE MACHINE ,
AND THEN HE TRIED TO OPEN THE FILES, NAD HE DISCOVER THAT HE IS UNABLE TO
OPEN , AND WINDOWS DISPLAY ERRO MESSAGE THAT INDICATE HE DOES NOT HAVE A
COMPLETE PREVILGES .

I LOOKED TO PERMISSION AND I FOUND THAT , EVEN THE USER HIM SELF IS HAVE
FULL CONTROL OVER THIS FOLDER AND ALSO EVERYONE HAVE THE SAME PERMISSION .

HOWVER HE IS UNABLE TO OPEN THE FILE.

ONCE I TRIED TO UNCHECK THE MARK FOR EFS, I FOUND THAT ITS DISPLAY ERROR
MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS DENIED.

CAN ANY ONE TELL ME HOW CAN I OPEN THE FILES AND LET ME SEE IT?

THE MAIN THING WE FORMATE THE PC COMPLETELY.

I DO NOT KNOW IF I AM CORRECT ON THIS PLAN, WHICH IS THE FOLLOWING:-

1- As LONG AS THEY ARE 5 USERS, AND ALL OF THEM ARE UNDER THE SAME
WORKGROUP, CAN I COPY THE CERTIFICATE FROMT HE OTHER USER AS WELL AND THEN
TRY TO REMOVE THE ENCRIPTION.

I WAS TRYING EVEN TO CHANGE THE OWNERSHIP, BUT ITS COULD NOT WORK.

PLEASE ADVICE ME .
 
From: "Medo_in_Egypt" <[email protected]>

| DEAR ALL,
|
| I HAVE SOMETHING HAPPEN TO MY USERS.
|
| I HAVE 5 USERS, ALL OF THEM IS UNDER THE SAME WORKGROUP, AND ALL OF THEM IS
| WINDOWS XP-PRO SP2.
|
| THEY ARE IN DIFFERENT WORKGROUP, THAN MY ORIGINAL WORKGROUP, BECAUSE THE 5
| USERS ARE FROM ANOTHER CONSULTANT COMPANY AND THEY ARE WORKING FOR PERIODE OF
| 8 MONTHS.
|
| ANYWAY, ONE OF THE USERS, HE WAS WORKING ON HIS PC, AND USED TO SAVE HIS
| FILES - EITHER IF ITS WORD OR EXCEL, ON ONTHER FOLDER.
|
| HE USED TO LOGIN TO HIS PC WITH THE USER NAME ( YTR) AND THIS USERS IS FROM
| ADMINISTRATIVE GORUP.
|
| FOR SOME RESOANS, THIS USERS HE MAKE ENCRYPTED FILE SYSTEM OVER THIS FOLDER
| AND ALL OF THE FILES WHICH IS UNDER THIS FOLDER.
|
| AFTER SOMETIME, THIS USERS WE DISCOVER TAHT HE FORMATE HIS PC COMPLETELY ,
| EXCEPT THE PARTITION WHICH IS INCLUDE HIS FOLDER - THE ONE WHICH WAS
| ENCRYPTED-.
|
| AFTER HE FORMATE HIS PC COMPLETELY, HE CREATE THE SAME USER ON THE MACHINE ,
| AND THEN HE TRIED TO OPEN THE FILES, NAD HE DISCOVER THAT HE IS UNABLE TO
| OPEN , AND WINDOWS DISPLAY ERRO MESSAGE THAT INDICATE HE DOES NOT HAVE A
| COMPLETE PREVILGES .
|
| I LOOKED TO PERMISSION AND I FOUND THAT , EVEN THE USER HIM SELF IS HAVE
| FULL CONTROL OVER THIS FOLDER AND ALSO EVERYONE HAVE THE SAME PERMISSION .
|
| HOWVER HE IS UNABLE TO OPEN THE FILE.
|
| ONCE I TRIED TO UNCHECK THE MARK FOR EFS, I FOUND THAT ITS DISPLAY ERROR
| MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS DENIED.
|
| CAN ANY ONE TELL ME HOW CAN I OPEN THE FILES AND LET ME SEE IT?
|
| THE MAIN THING WE FORMATE THE PC COMPLETELY.
|
| I DO NOT KNOW IF I AM CORRECT ON THIS PLAN, WHICH IS THE FOLLOWING:-
|
| 1- As LONG AS THEY ARE 5 USERS, AND ALL OF THEM ARE UNDER THE SAME
| WORKGROUP, CAN I COPY THE CERTIFICATE FROMT HE OTHER USER AS WELL AND THEN
| TRY TO REMOVE THE ENCRIPTION.
|
| I WAS TRYING EVEN TO CHANGE THE OWNERSHIP, BUT ITS COULD NOT WORK.
|
| PLEASE ADVICE ME .

The problem is your broken keyboard !

Fix that broken "Caps Lock" key.
 
ok,

thanks for your reply,

but i want to know the answer for these questions, please help me,

1- is there anyway to solve this situation, either if i am using 3rd Party
software, or is there any thing i can do it to let this files to open and
delete the encryption ?

2- in the future, how can i make the backup for the Keys and how can i
restore them , in order to make a good plan for that , please help me , can
you please .

3- can i make a copy from the key of the other user who in the same
workgroup, or the key for the Administrator of the domain to solve this
Problem, can I ? if so can you tell me the required steps to solve this
situation as soon as possible ?

4- can i use the Administrator account of my Workgroup, and do the same
steps like step no 3, please help me

Please help me.
 
Medo_in_Egypt said:
ok,

thanks for your reply,

but i want to know the answer for these questions, please help me,

(snip)

You've posted this in three different places. I understand that you are
upset, but multiposting like that isn't going to help and will just
irritate the very people you want to help you. Go back to your two
other posts and look at the answers. If you have forgotten where you
posted, go to Google Groups Advanced Search and search for your name.

And no, I don't have any answers for you that are different from the
ones you've already gotten.

Malke
 
Thanks For your reply,

i am so sorry , i did not mean to do that.

the situation is critical, really critical for me, what happen is, all of
this data, is belong to my CEO of the Company which i am working on it, and i
really want to solve it, its very critical for me ,


i did not mean to bother you at all .

so please try to give me hand to solve this issue, or what is your
recommendaation regarding that .
 
Medo_in_Egypt said:
DEAR ALL,

I HAVE SOMETHING HAPPEN TO MY USERS.

I HAVE 5 USERS, ALL OF THEM IS UNDER THE SAME WORKGROUP, AND ALL OF THEM
IS
WINDOWS XP-PRO SP2.

THEY ARE IN DIFFERENT WORKGROUP, THAN MY ORIGINAL WORKGROUP, BECAUSE THE 5
USERS ARE FROM ANOTHER CONSULTANT COMPANY AND THEY ARE WORKING FOR PERIODE
OF
8 MONTHS.

ANYWAY, ONE OF THE USERS, HE WAS WORKING ON HIS PC, AND USED TO SAVE HIS
FILES - EITHER IF ITS WORD OR EXCEL, ON ONTHER FOLDER.

HE USED TO LOGIN TO HIS PC WITH THE USER NAME ( YTR) AND THIS USERS IS
FROM
ADMINISTRATIVE GORUP.

FOR SOME RESOANS, THIS USERS HE MAKE ENCRYPTED FILE SYSTEM OVER THIS
FOLDER
AND ALL OF THE FILES WHICH IS UNDER THIS FOLDER.

AFTER SOMETIME, THIS USERS WE DISCOVER TAHT HE FORMATE HIS PC COMPLETELY ,
EXCEPT THE PARTITION WHICH IS INCLUDE HIS FOLDER - THE ONE WHICH WAS
ENCRYPTED-.

AFTER HE FORMATE HIS PC COMPLETELY, HE CREATE THE SAME USER ON THE MACHINE
,
AND THEN HE TRIED TO OPEN THE FILES, NAD HE DISCOVER THAT HE IS UNABLE TO
OPEN , AND WINDOWS DISPLAY ERRO MESSAGE THAT INDICATE HE DOES NOT HAVE A
COMPLETE PREVILGES .

I LOOKED TO PERMISSION AND I FOUND THAT , EVEN THE USER HIM SELF IS HAVE
FULL CONTROL OVER THIS FOLDER AND ALSO EVERYONE HAVE THE SAME PERMISSION .

HOWVER HE IS UNABLE TO OPEN THE FILE.

ONCE I TRIED TO UNCHECK THE MARK FOR EFS, I FOUND THAT ITS DISPLAY ERROR
MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS
DENIED.

CAN ANY ONE TELL ME HOW CAN I OPEN THE FILES AND LET ME SEE IT?

THE MAIN THING WE FORMATE THE PC COMPLETELY.

I DO NOT KNOW IF I AM CORRECT ON THIS PLAN, WHICH IS THE FOLLOWING:-

1- As LONG AS THEY ARE 5 USERS, AND ALL OF THEM ARE UNDER THE SAME
WORKGROUP, CAN I COPY THE CERTIFICATE FROMT HE OTHER USER AS WELL AND
THEN
TRY TO REMOVE THE ENCRIPTION.

I WAS TRYING EVEN TO CHANGE THE OWNERSHIP, BUT ITS COULD NOT WORK.

PLEASE ADVICE ME .

If the user did not save his Encryption Key, then the information is lost
forever. The folders were encrypted using Strong Encryption, and without a
key they are for all intents and purposes not retrievable.

Bobby
 
Thanks for your reply.

What is that your name ,

anyway, you mean no way at all to retrive the Data Back.

No way, even if i used any 3rd Party Software, are you sure.
\

Do you recommend any solution, should i call Microsoft for support , or not ?
 
Do you recommend any solution, should i call Microsoft for support , or not ?

If it's important enough, rather than believe what we're telling you,
CALL MICROSOFT and get a Microsoft technician to help you.
 
There is no point in calling Microsoft. If the user did not backup his/her encryption keys before they re-formatted the system partition, the files are unusable. There is no way to decrypt them.
 
There is no point in calling Microsoft. If the user did not backup his/her encryption keys before they re-formatted the system partition, the files are unusable. There is no way to decrypt them.

Yes, you and I know it, but after he's been told a couple times and
keeps asking I figured it was the only way to get him to understand.

In a domain environment there are documents that reference using the
Administrator account to recover them, but I'm not sure as I didn't read
the entire document.
 
Leythos said:
Yes, you and I know it, but after he's been told a couple times and
keeps asking I figured it was the only way to get him to understand.

In a domain environment there are documents that reference using the
Administrator account to recover them, but I'm not sure as I didn't read
the entire document.

Leythos;

You are correct, however the Domain Admin account would also depend on a
separate backup of
the keys assigned to the domain. If no keys were saved. either locally or
on a domain server, then the files are unrecoverable.

Bobby
 
In Medo_in_Egypt <[email protected]> had this to say:

My reply is at the bottom of your sent message:

<snip because we all know what it's about and the caps just make my eyeballs
bug out.>
PLEASE ADVICE ME .

You asked how to prevent this in the future? Set a designated recovery
agent!!!

Microsoft Windows XP - Tips for Implementing EFS:
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prnb_efs_kcef.asp

Microsoft Windows XP - Data Recovery and Data Recovery Agents:
http://www.microsoft.com/resources/documentation/Windows/XP/all/reskit/en-us/prnb_efs_lnfx.asp

Galen
--

"You know that a conjurer gets no credit when once he has explained his
trick; and if I show you too much of my method of working, you will
come to the conclusion that I am a very ordinary individual after all."

Sherlock Holmes
 
Back
Top