EFS - Please help to unsecure data

I have been formatting my HD for couple of times and did not have a problem
like this.
I have encrypted some folders with VERY important files on it and have never
had access problems with it. After each format I would go into G partition
and set myself as an owner.
After that I would have access to my files.
I have now reformatted my drive for the 3rd time. This time, somehow I am
unable to gain access to my files: Access Denied.
Please show me a way to get these before I pull all my hair off my head.
Thank you, and appreciate your help.
G

781 wrote:
> I have been formatting my HD for couple of times and did not have a
> problem like this.
> I have encrypted some folders with VERY important files on it and
> have never had access problems with it. After each format I would go
> into G partition and set myself as an owner.
> After that I would have access to my files.
> I have now reformatted my drive for the 3rd time. This time, somehow
> I am unable to gain access to my files: Access Denied.
> Please show me a way to get these before I pull all my hair off my
> head. Thank you, and appreciate your help.
> G

Did you back up your encryption key/certificate before reformatting your
system volume?

781 wrote:

> I have been formatting my HD for couple of times and did not have a problem
> like this.
> I have encrypted some folders with VERY important files on it and have never
> had access problems with it. After each format I would go into G partition
> and set myself as an owner.
> After that I would have access to my files.
> I have now reformatted my drive for the 3rd time. This time, somehow I am
> unable to gain access to my files: Access Denied.
> Please show me a way to get these before I pull all my hair off my head.
> Thank you, and appreciate your help.
> G
>
>

Without having a backup of the encryption key and/or having designated a
recovery agent, the files are probably not recoverable. The encryption
key is generated from the users SID. When a OS is reinstalled, even if
an account with the same name and password is created, the SID is not
the same hence it will not work with the original files unless the
encryption key was saved and then imported. See these links:

Best practices for the Encrypting File System
http://support.microsoft.com/?id=223316

How to back up the recovery agent Encrypting File System (EFS) private
key in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/?id=241201

I did not know about saving the key/certificate. I was under the assumption
that if I have the same username/password combination, I would be able to
view my files.
If there is anything, and I mean anything that I can do, please let me know
as I'm having a nervious breakdown not being able to get to my files that
I've been doing research for over 11 years.
Thank you
G

"Rock" <rock@mail.nospam.net> wrote in message
news:uLTzR%238CFHA.3120@TK2MSFTNGP12.phx.gbl...
> 781 wrote:
>
>> I have been formatting my HD for couple of times and did not have a
>> problem like this.
>> I have encrypted some folders with VERY important files on it and have
>> never had access problems with it. After each format I would go into G
>> partition and set myself as an owner.
>> After that I would have access to my files.
>> I have now reformatted my drive for the 3rd time. This time, somehow I am
>> unable to gain access to my files: Access Denied.
>> Please show me a way to get these before I pull all my hair off my head.
>> Thank you, and appreciate your help.
>> G
>
> Without having a backup of the encryption key and/or having designated a
> recovery agent, the files are probably not recoverable. The encryption
> key is generated from the users SID. When a OS is reinstalled, even if an
> account with the same name and password is created, the SID is not the
> same hence it will not work with the original files unless the encryption
> key was saved and then imported. See these links:
>
> Best practices for the Encrypting File System
> http://support.microsoft.com/?id=223316
>
> How to back up the recovery agent Encrypting File System (EFS) private key
> in Windows Server 2003, in Windows 2000, and in Windows XP
> http://support.microsoft.com/?id=241201
>

I am able to see the files, rename them, but not open. If this helps anyway.
G


"Rock" <rock@mail.nospam.net> wrote in message
news:uLTzR%238CFHA.3120@TK2MSFTNGP12.phx.gbl...
> 781 wrote:
>
>> I have been formatting my HD for couple of times and did not have a
>> problem like this.
>> I have encrypted some folders with VERY important files on it and have
>> never had access problems with it. After each format I would go into G
>> partition and set myself as an owner.
>> After that I would have access to my files.
>> I have now reformatted my drive for the 3rd time. This time, somehow I am
>> unable to gain access to my files: Access Denied.
>> Please show me a way to get these before I pull all my hair off my head.
>> Thank you, and appreciate your help.
>> G
>
> Without having a backup of the encryption key and/or having designated a
> recovery agent, the files are probably not recoverable. The encryption
> key is generated from the users SID. When a OS is reinstalled, even if an
> account with the same name and password is created, the SID is not the
> same hence it will not work with the original files unless the encryption
> key was saved and then imported. See these links:
>
> Best practices for the Encrypting File System
> http://support.microsoft.com/?id=223316
>
> How to back up the recovery agent Encrypting File System (EFS) private key
> in Windows Server 2003, in Windows 2000, and in Windows XP
> http://support.microsoft.com/?id=241201
>

As others have said - without the CERT for the original profile that
encrypted them or the designated recovery agent profile if you did so
(before you formatted), then the files are as good as gone. You might as
well delete them and start your 11 years research over, or reenter from
hand-written "notes" if you have them.
If EFS had a back door, then it wouldn't be a good or certifiable EFS, now
would it?

--
Star Fleet Admiral Q @ your service!
"Google is your Friend!"
www.google.com

***********************************************

" 781" <lets@have.org> wrote in message
news:eAtWac#CFHA.3824@TK2MSFTNGP10.phx.gbl...
> I am able to see the files, rename them, but not open. If this helps
anyway.
> G
>
>
> "Rock" <rock@mail.nospam.net> wrote in message
> news:uLTzR%238CFHA.3120@TK2MSFTNGP12.phx.gbl...
> > 781 wrote:
> >
> >> I have been formatting my HD for couple of times and did not have a
> >> problem like this.
> >> I have encrypted some folders with VERY important files on it and have
> >> never had access problems with it. After each format I would go into G
> >> partition and set myself as an owner.
> >> After that I would have access to my files.
> >> I have now reformatted my drive for the 3rd time. This time, somehow I
am
> >> unable to gain access to my files: Access Denied.
> >> Please show me a way to get these before I pull all my hair off my
head.
> >> Thank you, and appreciate your help.
> >> G
> >
> > Without having a backup of the encryption key and/or having designated a
> > recovery agent, the files are probably not recoverable. The encryption
> > key is generated from the users SID. When a OS is reinstalled, even if
an
> > account with the same name and password is created, the SID is not the
> > same hence it will not work with the original files unless the
encryption
> > key was saved and then imported. See these links:
> >
> > Best practices for the Encrypting File System
> > http://support.microsoft.com/?id=223316
> >
> > How to back up the recovery agent Encrypting File System (EFS) private
key
> > in Windows Server 2003, in Windows 2000, and in Windows XP
> > http://support.microsoft.com/?id=241201
> >
>
>

In news:%23ApA8b%23CFHA.2288@TK2MSFTNGP14.phx.gbl,
781 <lets@have.org> did some thinking and came up with these words:
> I did not know about saving the key/certificate. I was under the
> assumption that if I have the same username/password combination, I
> would be able to view my files.
> If there is anything, and I mean anything that I can do, please let
> me know as I'm having a nervious breakdown not being able to get to
> my files that I've been doing research for over 11 years.
> Thank you
> G
>
> "Rock" <rock@mail.nospam.net> wrote in message
> news:uLTzR%238CFHA.3120@TK2MSFTNGP12.phx.gbl...
>> 781 wrote:
>>
>>> I have been formatting my HD for couple of times and did not have a
>>> problem like this.
>>> I have encrypted some folders with VERY important files on it and
>>> have never had access problems with it. After each format I would
>>> go into G partition and set myself as an owner.
>>> After that I would have access to my files.
>>> I have now reformatted my drive for the 3rd time. This time,
>>> somehow I am unable to gain access to my files: Access Denied.
>>> Please show me a way to get these before I pull all my hair off my
>>> head. Thank you, and appreciate your help.
>>> G
>>
>> Without having a backup of the encryption key and/or having
>> designated a recovery agent, the files are probably not recoverable.
>> The encryption key is generated from the users SID. When a OS is
>> reinstalled, even if an account with the same name and password is
>> created, the SID is not the same hence it will not work with the
>> original files unless the encryption key was saved and then
>> imported. See these links: Best practices for the Encrypting File System
>> http://support.microsoft.com/?id=223316
>>
>> How to back up the recovery agent Encrypting File System (EFS)
>> private key in Windows Server 2003, in Windows 2000, and in Windows
>> XP http://support.microsoft.com/?id=241201

Do you have a System Backup from a time when you had access to the files?
If so, you might restore the backup and regain control over them. If not -
they are probably lost forever.

--
Ron Bogart {} ô¿ô¬
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
"Life is what happens while we are making other plans."

It sounds like in the past it was an Ownership issue and now it is an
encryption issue.
They are 2 different things.
Ownership can easily be taken.
Encryption is all but impossible without the original keys.

See the links near the bottom of this page to help prevent this in the
future:
http://www3.telus.net/dandemar/encrypt.htm

--
Jupiter Jones [MVP]
http://www3.telus.net/dandemar/


" 781" <lets@have.org> wrote in message
news:%23RTRO57CFHA.3976@tk2msftngp13.phx.gbl...
>I have been formatting my HD for couple of times and did not have a problem
>like this.
> I have encrypted some folders with VERY important files on it and have
> never had access problems with it. After each format I would go into G
> partition and set myself as an owner.
> After that I would have access to my files.
> I have now reformatted my drive for the 3rd time. This time, somehow I am
> unable to gain access to my files: Access Denied.
> Please show me a way to get these before I pull all my hair off my head.
> Thank you, and appreciate your help.
> G
>

If you have truly used Windows XP file encryption to secure the files, you
could offer $10,000 and still no one would be able to assist you.

The encryption is irrevocable without the certificates - which you do not
appear to possess any longer.

I feel your pain. I do hope that you have backups, either on another medium
or hand written.

--
Regards,

Richard Urban

aka Crusty (-: Old B@stard :-)

If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!


" 781" <lets@have.org> wrote in message
news:%23RTRO57CFHA.3976@tk2msftngp13.phx.gbl...
>I have been formatting my HD for couple of times and did not have a problem
>like this.
> I have encrypted some folders with VERY important files on it and have
> never had access problems with it. After each format I would go into G
> partition and set myself as an owner.
> After that I would have access to my files.
> I have now reformatted my drive for the 3rd time. This time, somehow I am
> unable to gain access to my files: Access Denied.
> Please show me a way to get these before I pull all my hair off my head.
> Thank you, and appreciate your help.
> G
>

781 wrote:

> I did not know about saving the key/certificate. I was under the assumption
> that if I have the same username/password combination, I would be able to
> view my files.
> If there is anything, and I mean anything that I can do, please let me know
> as I'm having a nervious breakdown not being able to get to my files that
> I've been doing research for over 11 years.
> Thank you
> G
>

Without a backup that consists of a disk image, no, there is nothing you
can do, sorry. That is the danger of using EFS.