Re: Offline files problem - some files lost from View Offline File

Hi Tom,

Can you also send csc 1.1 to me?
My email address is chiu_chiu_@xxxxxxxxxxx

Thanks a lot.
Daniel

"Tom Jolly [MSFT]" wrote:

> You can start a CMD in SYSTEM context by using the AT command / task
> scheduler to schedule a "CMD /K" task to run in SYSTEM context.
>
> Also, a local/domain admin ought to be able to recover those files via the
> machine's EFS recovery key. I'm not an EFS expert, but look in the EFS
> documentation (MSDN/TECHNET/KB) and look for recovery agent.
>
> Hope this helps.
>
> --
> Tom Jolly
> --
> Development Lead
> Windows Vista - Offline Files / CSC Feature
>
> ** This posting is provided "AS IS" with no warranties, and confers no
> rights. **
>
> "David Wanless" <DavidWanless@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:6AD49094-C599-4DF4-9251-83BCFB6E8481@xxxxxxxxxxxxxxxx
> > Dear Tom,
> >
> > Excellent. That allowed me to extract many of the files, so I do
> > feel a lot happier. I've also turned off encryption on the offline
> > files, which went through and decrypted many of them.
> >
> > This process seems to have confirmed that some of the files are still
> > there but no longer in the offline files database, as there are quite
> > a few files which are still encrypted. I've tried robocopy (nifty
> > tool!) but it won't copy the encrypted ones either (even with the /B
> > option).
> >
> > I've also done a
> > bit of research on EFS and discovered efsinfo, which tells me that
> > the encrypted files are only recoverable by NT AUTHORITY\SYSTEM.
> > Neither my local or my network administrator account can decrypt the
> > files.
> >
> > Can you think of any way to decrypt the remaining files?
> >
> > If not, what you've already done has been very helpful.
> >
> > Thanks,
> >
> > David.
> >
>
>
>
.

Relevant Pages

  • Re: cant decrypt EFS encrypted files
    ... There is a myth on the net that doing just that will decrypt the data. ... If it were that simple EFS would be worthless. ... >> Contact Microsoft if you can restore the profile. ... >>> this I soon discovered that is possible to create Recovery Agent ...
    (microsoft.public.windowsxp.security_admin)
  • Re: decrypt files after lost pub/priv keys - possible?
    ... Drive C that contained your operating system and user profiles also contained the EFS ... private keys needed to decrypt those files. ... users and recovery agent's profiles and unless you ...
    (microsoft.public.win2000.security)
  • Re: Offline files problem - some files lost from View Offline File
    ... I'm not an EFS expert, ... documentation and look for recovery agent. ... I've also turned off encryption on the offline ... > Neither my local or my network administrator account can decrypt the ...
    (microsoft.public.windows.file_system)
  • Re: Recovering EFS from a Backup
    ... You should log on to the account that originally encrypted the files. ... should be able to decrypt the files. ... also consider backing up your EFS certificate and keys. ... You can then import them for data recovery should a need arise in future. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Have key(s) for EFS files, still denied
    ... Hopefully the data recovery company can get the key. ... EFS files from your description. ... In the fall of 2004 we bought a new Dell laptop and I moved/copied EFS ... In October 2005 I reformatted our Gateway C partition and re-installed XP. ...
    (microsoft.public.windowsxp.security_admin)