EFS problem, encrypted and reformat drive

[Harold Stultiens]

Hello,

I have a problem with an encrypted file system which I
created but then I reformatted my c partition and now the
sid is different. Is it possible to recover it with
another admin account somehow? I tried different things
but it won't let me decrypt it

any help is welcome

Harold

[Carey Frisch [MVP]]

HOW TO: Remove File Encryption in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308993

Without a backup of the original Encryption Certificate Key, encrypted files
are unrecoverable as they will stay encrypted forever. There is no recovery
method since the encryption algorithm is now completely different with a
reinstall of Windows XP.

See if the following articles help in any way:

HOW TO: Take Ownership of a File or Folder in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421

Best Practices for the Encrypting File System
http://support.microsoft.com/default.aspx?scid=kb;en-us;223316

Encrypting File System in Windows XP
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/deploy/CryptFS.asp

EFS Files Appear Corrupted When You Open Them
http://support.microsoft.com/default.aspx?scid=kb;en-us;329741

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

------------------------------------------------------------------------------------


"Harold Stultiens" > wrote in message:
...

| Hello,
|
| I have a problem with an encrypted file system which I
| created but then I reformatted my c partition and now the
| sid is different. Is it possible to recover it with
| another admin account somehow? I tried different things
| but it won't let me decrypt it
|
| any help is welcome
|
| Harold

[papboyer]

there is a way to do it or this quote from MS is
misleading "Several protections are in place to ensure
that data recovery is possible and there is no data loss
in case of total system failures" ... i am having a
similar problem myself and cant get it to work for me ...
yet.... but from the quote from MS there has to be a way
to recover


>-----Original Message-----
>HOW TO: Remove File Encryption in Windows XP
>http://support.microsoft.com/default.aspx?scid=kb;EN-
US;308993
>
>Without a backup of the original Encryption Certificate
Key, encrypted files
>are unrecoverable as they will stay encrypted forever.
There is no recovery
>method since the encryption algorithm is now completely
different with a
>reinstall of Windows XP.
>
>See if the following articles help in any way:
>
>HOW TO: Take Ownership of a File or Folder in Windows XP
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;308421
>
>Best Practices for the Encrypting File System
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;223316
>
>Encrypting File System in Windows XP
>http://www.microsoft.com/technet/treeview/default.asp?
url=/technet/prodtechnol/winxppro/deploy/CryptFS.asp
>
>EFS Files Appear Corrupted When You Open Them
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;329741
>
>--
>Carey Frisch
>Microsoft MVP
>Windows XP - Shell/User
>
>---------------------------------------------------------
---------------------------
>
>
>"Harold Stultiens" > wrote
in message:
> ...
>
>| Hello,
>|
>| I have a problem with an encrypted file system which I
>| created but then I reformatted my c partition and now
the
>| sid is different. Is it possible to recover it with
>| another admin account somehow? I tried different
things
>| but it won't let me decrypt it
>|
>| any help is welcome
>|
>| Harold
>.
>

[Jupiter Jones [MVP]]

Yes, there are several protections, however you normally have to set
them up in advance.
After the fact is to late.
Some are:
Back-ups
Recovery agents

Check here:
http://www3.telus.net/dandemar/Encrypt.htm

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html


"papboyer" > wrote in message
...
> there is a way to do it or this quote from MS is
> misleading "Several protections are in place to ensure
> that data recovery is possible and there is no data loss
> in case of total system failures" ... i am having a
> similar problem myself and cant get it to work for me ...
> yet.... but from the quote from MS there has to be a way
> to recover

[Jupiter Jones [MVP]]

If you do not want to hear the truth when it suits your wants, I
suggest you not ask about a back door to EFS.
If you do, you will hear what you do not want to hear.

Eventually there may be an economical way out of EFS.
However for now, for all practical purposes EFS is unbreakable.

How much money and time do you have?
With current technology, you will need great amounts of each.

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html


"sniper" > wrote in message
...
>
> Hi * !
>
> "4. EFS is very good at what it does and there is no back door.
> Read and understand these links before using EFS to keep from
> permanently losing your data:
> Encrypting File System in Windows XP and Windows Server 2003
> Best Practices for the Encrypting File System"
>
> (Quoted from one of the pages you've mentioned)
>
>
>
> A couple of months ago we have rewritten a part of the SSH daemon
(Open
> Source rulez :D). We had su privileges for one of the database
servers,
> and in less than one hour we obtained the majority of the root
> passwords of the bigger servers on the university.
>
> So don't tell me there's no back door.
> The coding/decoding process always contains vulnerable parts. I've
> never dealt with EFS but I'm sure that it has weakpoints. If SSH2
had,
> EFS has much more.
>
> I'll ask one of the folks here, who's a real Windows expert, hope
that
> he knows EFS better than me :D.
>
> Bye
>
> Sniper
>
>
> sniper
> --------------------------------------------------------------------
----
> Posted via http://www.mcse.ms
> --------------------------------------------------------------------
----
> View this thread: http://www.mcse.ms/message27210.html
>
>
>