Re: Offline files problem - some files lost from View Offline File

You can start a CMD in SYSTEM context by using the AT command / task
scheduler to schedule a "CMD /K" task to run in SYSTEM context.

Also, a local/domain admin ought to be able to recover those files via the
machine's EFS recovery key. I'm not an EFS expert, but look in the EFS
documentation (MSDN/TECHNET/KB) and look for recovery agent.

Hope this helps.

--
Tom Jolly
--
Development Lead
Windows Vista - Offline Files / CSC Feature

** This posting is provided "AS IS" with no warranties, and confers no
rights. **

"David Wanless" <DavidWanless@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6AD49094-C599-4DF4-9251-83BCFB6E8481@xxxxxxxxxxxxxxxx
> Dear Tom,
>
> Excellent. That allowed me to extract many of the files, so I do
> feel a lot happier. I've also turned off encryption on the offline
> files, which went through and decrypted many of them.
>
> This process seems to have confirmed that some of the files are still
> there but no longer in the offline files database, as there are quite
> a few files which are still encrypted. I've tried robocopy (nifty
> tool!) but it won't copy the encrypted ones either (even with the /B
> option).
>
> I've also done a
> bit of research on EFS and discovered efsinfo, which tells me that
> the encrypted files are only recoverable by NT AUTHORITY\SYSTEM.
> Neither my local or my network administrator account can decrypt the
> files.
>
> Can you think of any way to decrypt the remaining files?
>
> If not, what you've already done has been very helpful.
>
> Thanks,
>
> David.
>


.

Relevant Pages

  • Re: Corrupted Admin Profile
    ... > My view on EFS: ... > Do not to use encryption unless you are in a domain and you know ... as well not having created a Recovery Agent (with backup of the ... > Q241201 How to Back Up Your Encrypting File System Private Key ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Corrupted Admin Profile
    ... > My view on EFS: ... > Do not to use encryption unless you are in a domain and you know ... as well not having created a Recovery Agent (with backup of the ... > Q241201 How to Back Up Your Encrypting File System Private Key ...
    (microsoft.public.windowsxp.security_admin)
  • Re: cant decrypt EFS encrypted files
    ... There is a myth on the net that doing just that will decrypt the data. ... If it were that simple EFS would be worthless. ... >> Contact Microsoft if you can restore the profile. ... >>> this I soon discovered that is possible to create Recovery Agent ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ciphered files
    ... > If you are not in a domin, and you did not export your encryption keys ... > My view on EFS: ... as well not having created a Recovery Agent (with backup of the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS Recover Agents Unable to decrypt files
    ... Permissions were checked to make sure that the EFS RA had full ... The EFS RA imported it's EFS RA certificate from storage in a secure ... I tried to decrypt the file after only importing the ... a special recovery key is created with the encryption process. ...
    (microsoft.public.win2000.file_system)