Advertisement
Hello all; I know this is a long shot, but maybe someone else has experienced this.<\/p>\n
I had a user upgrade their PC to Windows 10 Anniversary from Windows 10. Unfortunately they also had some files protected by EFS. I know the username and password for the encrypted files, and also have some of the files from a backup made before the files were encrypted by the user, but the user never made a backup of the certificate (GRRR…) Is there any software that can create a decryption algorithm from the username/password, and a copy of one of the unencrypted and encrypted files?<\/p>","upvoteCount":5,"answerCount":4,"datePublished":"2016-10-28T21:09:10.000Z","author":{"@type":"Person","name":"ericmulder2","url":"https://community.spiceworks.com/u/ericmulder2"},"acceptedAnswer":{"@type":"Answer","text":"
Is this system part of a domain? Active Directory uses data recovery agents to protect against users accidentally encrypting things with EFS. The default recovery agent is the administrator account of the first domain controller installed: Data Recovery and Encrypting File System (EFS) | Microsoft Learn<\/a><\/p>","upvoteCount":1,"datePublished":"2016-10-28T23:49:05.000Z","url":"https://community.spiceworks.com/t/removing-encryption-from-efs-files/536410/3","author":{"@type":"Person","name":"beta","url":"https://community.spiceworks.com/u/beta"}},"suggestedAnswer":[{"@type":"Answer","text":" Hello all; I know this is a long shot, but maybe someone else has experienced this.<\/p>\n I had a user upgrade their PC to Windows 10 Anniversary from Windows 10. Unfortunately they also had some files protected by EFS. I know the username and password for the encrypted files, and also have some of the files from a backup made before the files were encrypted by the user, but the user never made a backup of the certificate (GRRR…) Is there any software that can create a decryption algorithm from the username/password, and a copy of one of the unencrypted and encrypted files?<\/p>","upvoteCount":5,"datePublished":"2016-10-28T21:09:10.000Z","url":"https://community.spiceworks.com/t/removing-encryption-from-efs-files/536410/1","author":{"@type":"Person","name":"ericmulder2","url":"https://community.spiceworks.com/u/ericmulder2"}},{"@type":"Answer","text":" If you did at System Wipe and the certificates were not backed up you will not be able to recover those files. If you were doing a simply update.<\/p>\n Do you have System Protection enabled on the computer? You could do a system restore of the location to a previous time and recover the certificate<\/p>\n You can also check the location of the Certificate here:<\/p>\n %APPDATA%\\Microsoft\\SystemCertificates\\my\\Certificates<\/p>\n **SOURCES (**Translate from Polish to English)<\/p>\n