NFTS Encrypted Files - HELP!!
Discussion
As a security measure I encrypt my files in Windows XP using the NTFS (3.1) file encryption functionality where the file label turns green, to indicate encrypted file.
I copied my files over to another partition on my PC, D Drive which was also formatted in NTFS, so the file encryption attributes went with the files. I then formatted my C drive partition and installed Windows XP again. Now I can’t access those files I copied over to the D drive because the encryption system assumes I am another user and not the owner of the files, therefore – Access Denied!
I need help to try and recover these files or remove the encryption so I can access them fully.
Failed solutions:
- use same user name and password
- try accessing files through safe mode, safe mode as Administrator
- tried Recovery Console (DOS type utility)
- using Partition Magic to convert file system on D Drive to FAT 32, unable to convert because of encrypted files
- tried and failed to access files via ‘BadCopy’, ‘PC Inspector File Recovery’, ‘ReadNTFS’. All applications can access and recover files but encryption attributes come across as well.
Have contacted Microsoft and they said set up a Recovery Agent but either their instructions are wrong or it doesn’t work.
Can any one out there help? PLEASE!!
Suggestions welcome.
I copied my files over to another partition on my PC, D Drive which was also formatted in NTFS, so the file encryption attributes went with the files. I then formatted my C drive partition and installed Windows XP again. Now I can’t access those files I copied over to the D drive because the encryption system assumes I am another user and not the owner of the files, therefore – Access Denied!
I need help to try and recover these files or remove the encryption so I can access them fully.
Failed solutions:
- use same user name and password
- try accessing files through safe mode, safe mode as Administrator
- tried Recovery Console (DOS type utility)
- using Partition Magic to convert file system on D Drive to FAT 32, unable to convert because of encrypted files
- tried and failed to access files via ‘BadCopy’, ‘PC Inspector File Recovery’, ‘ReadNTFS’. All applications can access and recover files but encryption attributes come across as well.
Have contacted Microsoft and they said set up a Recovery Agent but either their instructions are wrong or it doesn’t work.
Can any one out there help? PLEASE!!
Suggestions welcome.
Sorry mate, but the decryption key is stored with your previous profile and without this - I assume if you deleted your previous installation all your profile info was lost - you have no chance of accessing your files. 
Unless you have a backup of your 'old' hard disk in any form? If so, you might have the relevant files which I believe can be used in conjunction with a utility from Microsoft called reccerts.
The best thing to do in future is to set up a recovery agent
www.compulink.co.uk/~davedorn/computing/windows/xpencrypt2.htm
this will let you access your files should anything happen to the operating system in this way again.
>> Edited by john_p on Wednesday 22 September 00:28
Unless you have a backup of your 'old' hard disk in any form? If so, you might have the relevant files which I believe can be used in conjunction with a utility from Microsoft called reccerts.
The best thing to do in future is to set up a recovery agent
www.compulink.co.uk/~davedorn/computing/windows/xpencrypt2.htm
this will let you access your files should anything happen to the operating system in this way again.
>> Edited by john_p on Wednesday 22 September 00:28
Sorry, but john_p is spot on. Recovery is nigh on impossible unless you exported the encryption keys before you wiped your old installation.
Even though you have used the same username and password on the new install, Windows will have generated a new security ID different from the old one.
There is a big article all about EFS here: www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx#EIAA
My suggestion is
There is nothing you can do to get them back.
>> Edited by arcturus on Wednesday 22 September 01:05
Even though you have used the same username and password on the new install, Windows will have generated a new security ID different from the old one.
There is a big article all about EFS here: www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx#EIAA
My suggestion is
There is nothing you can do to get them back. >> Edited by arcturus on Wednesday 22 September 01:05
It's a very long shot, but restorer2000 is excellent at getting back info, even from formatted hard drives!
You can download a free trial from www.bitmart.net/
The trial only recovers <64K files, but it will show you what is salvageable from your HDD. You might just be able to get the key you need and then decrypt.
The working version is only about £30. Like I say, it's a very very long shot, but if the key still exists, you might be able to do something.
You can download a free trial from www.bitmart.net/
The trial only recovers <64K files, but it will show you what is salvageable from your HDD. You might just be able to get the key you need and then decrypt.
The working version is only about £30. Like I say, it's a very very long shot, but if the key still exists, you might be able to do something.
This any use to you?
www.beginningtoseethelight.org/efsrecovery/index.php
www.beginningtoseethelight.org/efsrecovery/index.php
Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff