EFS issues

[Caltek]

How do you unencrypt a file or folder after you recover
from a hard drive crash and your local account now has a
new sid?

If anyone has any ideas, they would be greatly
appreciated.

 

[Mike Brannigan [MSFT]]

If you did not export the original accounts encryption cert and keys (and or
export the Recovery Agents cert and keys - If you created a recovery agent)
then you will not be able to recover the files.
(If you have a full backup of the old system you may be able to recover the
cert and keys - do you ?)

--
Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups

 

[Caltek]

Naw that would have been the right thing to do. I will
let the user know for next time. The thing that I cannot
figure out is that this machine is on a domain and one of
the admin accounts used has rights to decrypt files yet
it does not work on the machine. Weird.

Thanks for the information.

 

[Mike Brannigan [MSFT]]

Ah, If you are on a Domain (Windows 2000 or Windows Server 2003) then their
is a domain recovery agent created if you have properly configure the EFS
recovery policy.
See the Server online help for more information on the correct use of the
recovery agents and the recovery policy setting required.

--
Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups