unencrypting files that somehow became encrypted.

[mm]

A staff member has some files (he created in the past) which he can no
longer access. The files somehow became encrypted. He is the owner and
creator of the files. The files are located in his private users folder so
I dont think anyone else could have encrypted it.

As the domain administrator and recovery agent I have tried unencrypting
the file without success. I have exported his certificate and then
imported into my certificate store, but still no success in unencrypting.

Can someone help?

 

[Steven L Umbach]

You can use efsinfo to see exactly what users can decrypt the files including
recovery agents and match the thumbprints to certificates if there is any doubt. You
also have to import the RA private key to the computer to recover the files. The
certificate is just a public key. The private key would be exported to a .pfx file
and require password protection to the file. The link below explains more. Not every
domain administrator is a RA. By default it would be the built in domain
administrator account and the certificate/private key would be on the first domain
controller in the domain. --- Steve

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/efsinfo-o.asp
http://support.microsoft.com/default.aspx?scid=kb;EN-US;242296 -- how to import
..pfx file
http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316 -- read "how to
backup certificate" which explains how to export private key also.