There MUST be a way! EFS (after reformat)

[OceanicAirlines]

Brink, a moderator on Vistax64, who I think contributes on here, has given endless amounts of awesome tutorials and workarounds.

Kudos for the slipstream how-to.

However, this one remains unsolved. I haven't tried his workaround, but am working on this third party app to solve the unsolvable:

I'm working in Windows 7 x64 (Home Premium,) and somehow managed using EFS and Encrypted several files that got moved to an External Hard Drive prior to reformat.

Now, no matter what I do (TakeOwnership via ICACLS/CACLS, etc.,) changing permissions, security tabs, nothing works.

Apparently, per Brink's article, if you DO, indeed, backup your certificate, you can decrypt them. If NOT, then it's more or less a definite NO.

Suggested at the end (after the workaround,) was an app: Advanced EFS Data Recovery.

I managed to find a friend with a full version... it does a great job of gathering-up all the encrypted files, locating the keys on the C:\ drive, and all that, but can't decrypt the other files.

In truth, I could always go back and re-download what I want.

This is just an interesting point of discussion; what's the workaround for this (and what am I NOT doing with this program?) BTW, it's Elcomsoft's Advanced (blah blah.)

Any input would be invaluable. Thanks, everyone.

 

[Brink]

Hello OceanicAirlines,

Glad to see you here as well.

You might try the trial evaluation of this program below to see if may be able to show that it can get you access to them or not.

Efs Data Recovery for Windows 7. Restore files from damaged efs partitions


If not, then you will most likely never be able to access those EFS files again. Backing up that EFS certificate is critical for situations like this.