Decrypt windows files

[Fares Atallah]

My problem is that I have encrypted some folders and files under D drive and
then formatted my PC, I forgot to decrypt the fiels or backup my certificate
so that till now I can't access my files.
Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the files
using my domain user account so I need a help in decrypting my files.

Thank you very much.
--
Fares Atallah

 

[Malke]

Fares Atallah wrote:
> My problem is that I have encrypted some folders and files under D drive and
> then formatted my PC, I forgot to decrypt the fiels or backup my certificate
> so that till now I can't access my files.
> Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the files
> using my domain user account so I need a help in decrypting my files.
>
> Thank you very much.

Since you forget to back up your certificate, unless you set a recovery
agent you are most probably out of luck. You can contact Elcomsoft to
see if their program can help you, but otherwise it is unlikely you'll
recover those files. There is no backdoor to encryption.

http://www.elcomsoft.com/aefsdr.html

http://www3.telus.net/dandemar/encrypt.htm - encryption info
http://www.beginningtoseethelight.org/efsrecovery/ - more encryption info

To add a recovery agent for the local computer -
http://www.microsoft.com/resources/...docs/en-us/encrypt_to_add_recovery_agent.mspx

To change the recovery policy for the local computer -
http://www.microsoft.com/resources/.../proddocs/en-us/encrypt_to_change_policy.mspx

How to add an EFS recovery agent in Windows XP Professional -
http://support.microsoft.com/default.aspx?scid=kben-us887414

Best practices for the Encrypting File System -
http://support.microsoft.com/default.aspx?scid=kben-us223316

EFS, Credentials, and Private Keys from Certificates Are Unavailable
After a Password Is Reset - http://support.microsoft.com/?kbid=290260


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

 

[Ozan Ozkara]

If you forgot backed up PKI keys before, There is noway to decrypting your
files.


"Fares Atallah" <FaresAtallah@discussions.microsoft.com> wrote in message
news:239A1D20-5F33-486C-8BC0-9A056FD5954C@microsoft.com...
> My problem is that I have encrypted some folders and files under D drive
> and
> then formatted my PC, I forgot to decrypt the fiels or backup my
> certificate
> so that till now I can't access my files.
> Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the
> files
> using my domain user account so I need a help in decrypting my files.
>
> Thank you very much.
> --
> Fares Atallah
>

 

[Fares Atallah]

Dear Malke,
I've tried AEFSDR but it doesn't decrypt the files.
I don't know if its useful to say that i have encrypt them with my domain
user account so is there any chance to decrypt them using active directory or
to find my old SID and replace the new with the old?
--
Fares Atallah



"Malke" wrote:

> Fares Atallah wrote:
> > My problem is that I have encrypted some folders and files under D drive and
> > then formatted my PC, I forgot to decrypt the fiels or backup my certificate
> > so that till now I can't access my files.
> > Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the files
> > using my domain user account so I need a help in decrypting my files.
> >
> > Thank you very much.
>
> Since you forget to back up your certificate, unless you set a recovery
> agent you are most probably out of luck. You can contact Elcomsoft to
> see if their program can help you, but otherwise it is unlikely you'll
> recover those files. There is no backdoor to encryption.
>
> http://www.elcomsoft.com/aefsdr.html
>
> http://www3.telus.net/dandemar/encrypt.htm - encryption info
> http://www.beginningtoseethelight.org/efsrecovery/ - more encryption info
>
> To add a recovery agent for the local computer -
> http://www.microsoft.com/resources/...docs/en-us/encrypt_to_add_recovery_agent.mspx
>
> To change the recovery policy for the local computer -
> http://www.microsoft.com/resources/.../proddocs/en-us/encrypt_to_change_policy.mspx
>
> How to add an EFS recovery agent in Windows XP Professional -
> http://support.microsoft.com/default.aspx?scid=kben-us887414
>
> Best practices for the Encrypting File System -
> http://support.microsoft.com/default.aspx?scid=kben-us223316
>
> EFS, Credentials, and Private Keys from Certificates Are Unavailable
> After a Password Is Reset - http://support.microsoft.com/?kbid=290260
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

 

[Paul Adare]

On Sat, 19 Jan 2008 02:57:00 -0800, Fares Atallah wrote:

> I've tried AEFSDR but it doesn't decrypt the files.
> I don't know if its useful to say that i have encrypt them with my domain
> user account so is there any chance to decrypt them using active directory or
> to find my old SID and replace the new with the old?

Your only possible hope here is that you still have access to the default
domain recovery agent certificate which is issued to the local
Administrator account on the first domain controller installed in the
domain.
Use the built-in backup program to backup and restore the files to your
Windows 2000 domain controller (if you have more than 1 DC then copy it to
the first one you installed) and log on as Administrator. If the recovery
agent certificate still exists and if it was the one used when encrypting
the files you'll be able to open them. If not then all of your files are
gone.
--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
Your password is pitifully obvious.