How to access NTFS-protected files on a slave drive

[yerk5]

Im trying to salvage some files from my friends hard drive. She got
the Virut virus and it’s been contained but it damaged too many of
Windows’s core files to run. I tried booting with an XP cd and
performing the repair function to replace all windows system files. It
appeared to succeed, but it wont let anyone log in. It goes straight
from “Loading your personal settings” to “saving your settings” and
logs you right back out again. It doesn’t matter which username you
try, including Administrator. Safe mode does the same also.

So that being the case, I attached her drive as a slave to a box of
mine, just to salvage data. But there are directories which she set
the NTFS permission to only allow himself read access to. So of course
I’m getting denied access to these directories. How can I get into
them? I have her password for the user account in question, but of
course I’m operating under a new SID on this new box. Any hints on how
I can access these files/folders? Thanks much in advance.

 

[Patrick Keenan]

Im trying to salvage some files from my friends hard drive. She got
the Virut virus and it’s been contained but it damaged too many of
Windows’s core files to run. I tried booting with an XP cd and
performing the repair function to replace all windows system files. It
appeared to succeed, but it wont let anyone log in. It goes straight
from “Loading your personal settings” to “saving your settings” and
logs you right back out again. It doesn’t matter which username you
try, including Administrator. Safe mode does the same also.

So that being the case, I attached her drive as a slave to a box of
mine, just to salvage data. But there are directories which she set
the NTFS permission to only allow himself read access to. So of course
I’m getting denied access to these directories. How can I get into
them? I have her password for the user account in question, but of
course I’m operating under a new SID on this new box. Any hints on how
I can access these files/folders? Thanks much in advance.
==========================

There are two things. One is good news, the other isn't.

The good news is that likely all that's needed is for you to Take Ownership
of the files. Google Take Ownership XP, and it will lead you here, where
there are directions:

http://support.microsoft.com/kb/308421


The bad news only applies IF the OS is XP Pro, AND IF the user invoked
encryption, not just marked them private. In that case, after the repair
install, it's extremely likely that the encrypted files are permanently lost
UNLESS the user took the foolishly optional step of exporting the account
credentials. If they *were* exported, after taking ownership you will
have to import the credentials to read the files. You might want to create
another account for this purpose.

This can not apply for XP Home, as encryption isn't supported, and does not
apply if the files were only marked private.

HTH
-pk

 

[Bookman]

Have you tried copying the files from the slave drive to your hard drive?

 

[Patrick Keenan]

Have you tried copying the files from the slave drive to your hard drive?

I'm not the OP, but part of the point of marking files private, assigning
ownership to a specific account, is to prevent copying from another
account - or another system.