NTFS encryption

[T]

I reinstalled Windows and now I can’t access to my
encrypted files by the same user name and password.

 

[Joe Smith]

Hi - had the same problem - for the most part, the data is gone unless you
DID NOT format your HD before reinstalling W2K. There is a small chance the
certificates (security info) you require to recover your data could be
intact. I'm guessing you did not format your HD. check for 2 ADMINISTRATOR
accounts in documents and users ... if so, you might recover your data
completely. As of SP4, the encryption is TRIPLE DES, basically means there
are NO FAST WAYS to recover data via decryption (hacking).

MAKE A MENTAL NOTE:
1) NEVER *EVER* reinstall W2K w/out decrypting files first.
2) ALWAYS export your certificates and save them onto a SECURED floppy (or
other removable medium you can store safely)

Microsoft fails to clearly state or provide certain notes that EVERYONE
should know about BEFORE ENABLING ENCRYPTION for the first time on W2K and
above systems. XP is worse as it uses a known UNBREAKABLE encryption,
AES256 (if memory serves me correctly)

Since the late 80's ... Microsoft fails to provide written documentation in
book format as they used to do, so the light reading to know about these
pitfalls is left UNSAID as most don't read the manual ... R.T.F.M.!!!

With luck, you will find the required information ... good luck. BTW: there
are several tools available for free from Microsoft ... search using "EFS"
.... you can find who can and cannot recover these files.

Microsoft does have a tool that, if your security info is intact, will
recover the file ... but be prepaired to pay for it - that'll be support
through Email or LIVE on phone (both incur fees of $99/$250 respectivly) if
your files are not all that important to warrant such a cost, give it up to
experience and keep going.

 

[Steven L Umbach]

If you formatted your drive you are out of luck, since it sounds as if you
are not a member of a domain nor have any EFS private keys in a backup. If
you have an intact copy of your user or administrator [default recovery
agent] profile still on your hard drive from the old operating system or in
a backup after a time when the files were encrypted, then you may be able to
access the files if you remember the user password by contacting Microsoft
Support or trying a third party tool of which your minimum cost will be
$100. See links below for more information on EFS. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316
http://support.microsoft.com/default.aspx?scid=kb;en-us;255742

 

[JD]

I'm having the same problem except, I didn't reinstall Win2K I added it to a
domain. But I still cannot access the encrypted files even by going through
what MS had instructed on the KB

 

[Drew Cooper [MSFT]]

Joining a domain shouldn't effect local users. Are you sure you're logging
on as the same (local) user (and not a domain user with the same name)?

 

[JD]

Yes

Joining a domain shouldn't effect local users. Are you sure you're logging
on as the same (local) user (and not a domain user with the same name)?
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

I'm having the same problem except, I didn't reinstall Win2K I added it to
a
domain. But I still cannot access the encrypted files even by going
through
what MS had instructed on the KB

 

[KY]

I changed my domain, logged in as domain user with same name and cannot
access my previously encrypted files!

I encrypted the files in the previous domain (same user name).

Going back to the original domain and decrypt didn't help as my old profile
was gone - I assume win2000 reads the key from /application/crypto/rsa

Yes

Joining a domain shouldn't effect local users. Are you sure you're logging
on as the same (local) user (and not a domain user with the same name)?
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

I'm having the same problem except, I didn't reinstall Win2K I added

it

to