Win2K Encrypted Files Problem

[chaz]

I had encrypted a folder in Win2K. Due to a bad cluster I had to build a new user profile and now I cannot access the previously encrypted files. How can I decrypt those files encrypted under a different user profile.

[obenton]

Have you tried another account that has Administrator privileges?

[chaz]

Yes, I signed on as Administrator and when I click on decrypt, I get "Access Denied" message. I also get this same message if I try to change any file attributes.

[obenton]

If you're using NTFS you might try changing ownership of the folder to Adminstrator, and then giving Administrator full access permission.

[JCH1]

Try to copy/move the files to a fat partition if you can. While you are at it backup your EFS Recovery Agent Key on the system you are running now. http://www.sysopt.com/forum/smile.gif

[This message has been edited by JCH1 (edited 07-17-2001).]

[chaz]

Okay, I tried changing ownership to Administrator. No difference. I tried copying files to a FAT drive and to a Win95 PC on my network. When I try to copy the file I get "Access Denied file may be in use".

[muno]

I'm not sure about encrypted files, but you can copy files from ntfs partition by using ntcp (this is a dos based program that allows the reading of ntfs volumes).
-M

[obenton]

After changing ownership to Adminstrator, did you give Adminstrator full access permission?

[chaz]

Yes, the administrator has full access permission.

[obenton]

In a workgroup, the "Administrator" account is ordinarily given a certificate that allows access to other users' encrypted files - as happened to you, just in case. If this doesn't work for you I'd guess the files are unrecoverable.

[muno]

Checking the help file in w2k for efs says (this again is rough translation as I have a finnish version =)) 'You can lose the encryption if you move the file out of ntfs partition'. Thus, if you use ntcp (as you cannot move encrypted files in windows) and move the encrypted files to a fat partition you might gain access them to again.
-M

[chaz]

Thanks for your reply Muno, but Win2K won't allow me to copy or move these files either. I get "access denied" message when I try.

[muno]

Yeah, I know. That's why you need to boot to dos and do it there. For that you need either a network drive to copy the files or a fat partition in the same system.
(Ironically, I'm having the exact same problem now. Tried installing sp2 and it messed up windows completely, had to reinstall and now I cannot access my own files http://www.sysopt.com/forum/smile.gif ).
I'm searching through microsoft kb now for a resolution.
-M http://support.microsoft.com/support/kb/articles/Q242/2/96.ASP
http://support.microsoft.com/support/kb/articles/Q255/7/42.ASP?LN=EN-US&SD=gn&FR=0&qry=how%20to%20recover%20encrypted%20files%3F&rnk=5&src=DHCS_MSPSS_gn_SRCH&SPR=WIN2000
http://support.microsoft.com/support/kb/articles/Q223/1/78.ASP?LN=EN-US&SD=gn&FR=0&qry=how%20to%20recover%20encrypted%20files%3F&rnk=1&src=DHCS_MSPSS_gn_SRCH&SPR=WIN2000
//edit
Those should help http://www.sysopt.com/forum/smile.gif


[This message has been edited by muno (edited 07-20-2001).]