View Encrypted Files (EFS)

[MattH]

I would like to view them before I delete them.
The exact situation is, the Files are on a D: partion,
and Windows has been reloaded (with format) on C:
Obviously the user account has been deleted (during
format). The files on D: are still there, still
encrypted, and not accessable by anyone. Any hope?

 

[Robert Moir]

I would like to view them before I delete them.
The exact situation is, the Files are on a D: partion,
and Windows has been reloaded (with format) on C:
Obviously the user account has been deleted (during
format). The files on D: are still there, still
encrypted, and not accessable by anyone. Any hope?

No. The EFS files can't be viewed now.

 

[Darren Hook [MSFT]]

In addition to what Robert said;

Since there is no way to get back data that has been encrypted with a
missing certificate, it is critical that backups of the key
pair/certificate are made and then stored in a secure location. Be sure to
back up the certificates from now on so you will not have this problem in
the future.

Open Internet Explorer.
Click Tools on the menu bar and select Internet Options.
Click the Content tab.
In the Certificates field, locate and click the Certificates button.
Verify you are in the Personal tab. There may be several certificates
present depending on whether you have installed certificates for other
purpose. Highlight one certificate at a time until the field entitled
"Certificate Intended Purposes" states "Encrypting File System". This is
the certificate that was generated when you encrypted your first folder.
Click the Export button to start the Certificate Export Wizard.
Click Next.
Select "Yes, export the private key" to export the private key. Click Next.
Leave the Default value of "Enable Strong protection (requires IE 5.0, NT
4.0 SP4 or above). Click Next.
Enter your password. You need a password to protect the private key.
Specify the path where you want to save the key. You can save the key to a
floppy, another location on the hard disk, or CD. If the hard disk fails or
is formatted the key and the backup will be lost. If you back up the key to
a floppy or CD it must be stored in a secure location. You will need to give
the backup file a location. Click Next once you have specified the
destination.

Hope this helps!

--
Darren Hook
(e-mail address removed)
Microsoft PSS

Please do not send email directly to this alias. This alias is for
newsgroup purposes only.

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Roger Abell [MVP]]

So, from prior thread, once ownership is taken and permissions
granted, then (since you have not said) if you have the old cert/key
from a saved export or were in a domain that had a recovery agent
configured, you have hope. Otherwise, only if you have a full, valid
backup of the system as it existed prior to the format/reinstall is
there any hope.