Encrypted File System

Discussion in 'Windows Server 2003 / 2008 / 2012 / 2016' started by AJ, Jan 13, 2004.

  1. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    This cropped up last night in the chat room. Cartman had encrypted some files on a second partition using Windows 2000 Pro. Now if understand what he has done correctly, he has since trashed that install of W2K and reinstalled. If this was an over the top install or an upgrade then I'm sure the Public Key that the Administrator would use would still be there. On the other hand if Dave has reformatted the drive then the public key has gone and the files are toast.

    This link is Microsofts answer.

    Not sure if there is any third party stuff out there. I'm sure someone will post if there is.

    HTH

    AJ
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong
  2. Cartman

    Cartman Byte Poster

    210
    0
    9
    Unfortunately, the latter is true, the original partition was bombed and a fresh install done on a newly created partition. Didnt realise I had encrypted files, must have been an exercise and forgot to unencrypt them.

    Will be a learning experience for me!! :snipersm:
     
  3. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    Cheers Dave

    Glad I could help, but not give the required result :(

    (She said with a smile on her face :) )

    AJ
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong
  4. Jakamoko
    Honorary Member

    Jakamoko On the move again ...

    9,924
    74
    229
    Would moving the files that have been EFS'd (sorry, can't be bothered typing "encrypted" ) onto a FAT32 partition not render them de-crypted, and therefore accessible ?

    I think I know the answer already, but thought I'd give you all the chance to have a pop at me in public !!! :P

    Something tells me there's a reason why this wouldn't work, but I can't quite recall ... :?:
     
    Certifications: MCP, A+, Network+
    WIP: Clarity
  5. Jakamoko
    Honorary Member

    Jakamoko On the move again ...

    9,924
    74
    229
    Looks like it's a combination of:

    i) What AJ said :!:

    and

    ii) RTFQ :oops:

    Hey, I'm just in after a long day :D
     
    Certifications: MCP, A+, Network+
    WIP: Clarity
  6. Cartman

    Cartman Byte Poster

    210
    0
    9
    Don't worry Gav - at least you posted, :lol:

    I've been trying all sorts of silly things to get the files back - including shouting at them!!
     
  7. dreec

    dreec Nibble Poster

    59
    0
    19
    If you are desperate to get the info back and have some time to spend try using the diskprobe utility which is included with the support tools.
    You need to know the name of the file you wish to recover.
    Open DiskProbe and search for the filename with a .tmp (pretty sure it's .tmp) extension.
    As mentioned above it could take some time to find but it does work.

    NOTE: This will only work if
    a) the file was encrypted seperately
    b) the area of the HDD to which the file was written has not been excessively overwritten

    If the file was saved into a folder, which was set up to encrypt all contents, this technique will NOT work

    Hope this helps
     
    Certifications: To many to list here, to few to matter
    WIP: None
  8. Cartman

    Cartman Byte Poster

    210
    0
    9
    Dreec,

    Nah, the files WERE under a folder that had been encrypted, so it looks like no go.

    I've given up on getting the files back, not too disastrous anyways. Looks like Mr Gates has beaten me, :inv

    Thanks for your suggestion anyways......
     
  9. SimonV
    Honorary Member

    SimonV Petabyte Poster Gold Member

    6,651
    180
    258
    Certifications: MOS Master 2003, CompTIA A+, MCSA:M, MCSE
    WIP: Keeping CF Alive...
  10. SimonV
    Honorary Member

    SimonV Petabyte Poster Gold Member

    6,651
    180
    258
    Certifications: MOS Master 2003, CompTIA A+, MCSA:M, MCSE
    WIP: Keeping CF Alive...
  11. Cartman

    Cartman Byte Poster

    210
    0
    9
    Cheers Simon,

    I did come across the Advanced EFS recovery program whilst nosing around - unfortunately it didnt work as the program told me I couldnt get them back. :cussing

    Appreciate your post though m8, cheers.
     

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.