Help with NTFS Encryption

I just installed Windows 7 RC1 from having Windows XP SP3. However i had some NTFS encrypted files on Win XP which i forgot to decrypt before upgrading, and i did not backup the certificate.

Thankfully, the Windows 7 install backed up my old windows directory to Windows.Old.

I managed to find the Certificated in "C:\Windows.old\Documents and Settings\Anthony\Application Data\Microsoft\SystemCertificates\My\Certificates\".

I proceeded to import this certificate with certmgr.msc.

However, after i had done this, i could still not Copy, Open or Modify these files. The only thing i could do with them was move them around, or toggle the Read-Only and Hidden attributes.

If i try to copy them i get "You need permission to perform this action" although it clearly states the owner as "Blackangel\Anthony" in the file properties and that i have Full Access to it.

If i try to remove the encryption by unticking the "Encrypt contents to secure data" box in Advanced settings, as soon as i click "Apply" i get an "Access is denied" message.

Also, if i click "Details" next to "Encrypt contents to secure data" the user that is in there is "Anthony(Anthony@BLACKANGEL)" which is me. And the certificate Thumbnail is identical to the one i imported from my Windows.old directory.

Also, if i try to add a new certificate i get "To add users to this file, you must have access to the file and Write or Modify permissions for it", which i seemingly do have.

Despite all evidence seemingly pointing to the fact that i should be able to copy/modify this file or remove the encryption i still am unable to.

Perhaps i am missing something, and i'd be extremely grateful to anyone who may be able to help, as these files are very valuable to me.


Thanks very much in advance,
Anthony Donato.

Aleid said:

I just installed Windows 7 RC1 from having Windows XP SP3. However i had some NTFS encrypted files on Win XP which i forgot to decrypt before upgrading, and i did not backup the certificate.

Thankfully, the Windows 7 install backed up my old windows directory to Windows.Old.

I managed to find the Certificated in "C:\Windows.old\Documents and Settings\Anthony\Application Data\Microsoft\SystemCertificates\My\Certificates\".

I proceeded to import this certificate with certmgr.msc.

However, after i had done this, i could still not Copy, Open or Modify these files. The only thing i could do with them was move them around, or toggle the Read-Only and Hidden attributes.

If i try to copy them i get "You need permission to perform this action" although it clearly states the owner as "Blackangel\Anthony" in the file properties and that i have Full Access to it.

If i try to remove the encryption by unticking the "Encrypt contents to secure data" box in Advanced settings, as soon as i click "Apply" i get an "Access is denied" message.

Also, if i click "Details" next to "Encrypt contents to secure data" the user that is in there is "Anthony(Anthony@BLACKANGEL)" which is me. And the certificate Thumbnail is identical to the one i imported from my Windows.old directory.

Also, if i try to add a new certificate i get "To add users to this file, you must have access to the file and Write or Modify permissions for it", which i seemingly do have.

Despite all evidence seemingly pointing to the fact that i should be able to copy/modify this file or remove the encryption i still am unable to.

Perhaps i am missing something, and i'd be extremely grateful to anyone who may be able to help, as these files are very valuable to me.


Thanks very much in advance,
Anthony Donato.

Anthony
First welcome to sevenforums. This is beyond my experience with ntfs encryption. Some one will probably have an answer for you but in the mean time I have 3 thoughts.
1-Obviously you dont have complete ownership of the files/folders. It might be that something went wrong on the certmgr wizard import. Im sure you have double checked it .
2-can you access the files if you booted from a dos disk w/ cmd prompt. you might be able to take ownership in dos.
4- If all else failed couldn't you back out of the win 7 install to your previous OS (vista) decrypt the files with the original cert copy them off to a safe place and re-install win 7.

Sorry I couldn't be of more help. You might want to find someone on the security social group ( their experience might do the trick)

Good luck and PM me if you need something.

Ken

Is there a streamlined way to back out to my previous OS?

Nevermind! I found the solution. ElcomSoft Advanced EFS Data Recovery Software. Very useful and highly reccomended to anyone with similiar issues.

My thread on the MS website for more information.
Help with NTFS Encryption

Aleid said:

Nevermind! I found the solution. ElcomSoft Advanced EFS Data Recovery Software. Very useful and highly reccomended to anyone with similiar issues.

My thread on the MS website for more information.
Help with NTFS Encryption

Im aglad you found the solution. Now we all know what to do

Ken