EFS in Windows 10 after reinstall

hello, I have a problem with EFS in Windows 10. I backed up the files and made a clean install on the same disk. I have saved my certificate and i know password, accessing files as well. I have tried a few tutorials on forums and the Internet, but without success :-( I have installed the certificate and it is added to Windows, but the file can not be opened yet. I can not add a certificate in the file properties menu because I do not have the appropriate rights. I have modified the Owner and write and read rights several times ... without result ... thanks for some idea or help.
|
Hi, Denis,

I'm an Independent Advisor and will assist you.

Get Permission from Trusted Installer. Follow these steps.
https://helpdeskgeek.com/windows-7/windows-7-ho...

Once you get permission you should be able to add files, delete, etc..

You can Restore those permissions to Trusted Installer following these steps.
https://www.askvg.com/guide-how-to-restore-trus...

Note: These are non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on these sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on these sites before you decide to download and install them.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I've already tried to transfer ownership of files. None of the variants works. I can delete, move, rename, or create new files in a folder. But they are still encrypted and can not be opened. I have the right certificate and the password for it. The certificate can not be added to the menu

Properties => Advanced => Details (Encrypt content and secure data) => Certificates to restore this file according to the recovery policy definition (This field is empty and I do not have permission to add certificates)

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Hi, Denis,
Please look at https://msdn.microsoft.com/en-us/library/cc2322...
https://technet.microsoft.com/ru-ru/library/ee9...,
https://docs.microsoft.com/en-us/windows/securi...
May be you will find some tips there. Sorry I cannot give you direct help.
------------------
if you'll find someone's post helpful, mark it as an answer and rate it please. This will help other users to find answers to their similar questions.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Method 1:
1. Open Windows Explorer
2. Right-click the encrypted file or folder, and then click Properties.
3. On the General tab, click Advanced.
4. Clear the Encrypt contents to secure data check box.

Method 2: Do you have a Recovery Agent?
1. Make a copy of the file in case of loss or damage.
2. Send the original encrypted file to the designated recovery agent.
3. Have the recovery agent use their recovery certificate and private key to decrypt the file.
4. Have the recovery agent send the decrypted file back to you, using any file transfer method that is desired.
Source - EaseUs.com

Method 3:
Import the recovery agent certificate with private key to the server stored the encrypted files, and then open the files as the user himself.
If you can open the encrypted files, I suggest you use recovery agent to decrypt the files and then re-encrypt the files as user's certificate.

Method 4:
The EFS certificate files can be found in "C:\Documents and Settings\<username>\Application Data\Microsoft\SystemCertificates\My\Certificates".
They are stored each in one file, named by thumbprint, with no extension.

If by some miracle you do manage to locate them then try this: http://technet.microsoft.com/en-us/library/cc72...

If you are unable to import them you will be forever unable to access the contents of the encrypted files. - Spiceworks


Not knowing which tutorials you have read, this is a step by step tutorial:
How to open an encrypted file if access is denied in Windows
https://answers.microsoft.com/en-us/windows/for...

Note: These are non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on these sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on these sites before you decide to download and install them.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Unfortunately, this procedure does not work

Method 1 - I do not have permission to decrypt files (but certificate, password I have installed, set as owner + full control file)

Method 2 - I tried this tutorial (https://www.rootusers.com/configure-efs-recovery-agent/), this is probably the right procedure, but "Add Recovery Agent Wizard" always when importing the certificate "Choose Agents of Revitalization" will write "This certificate is not suitable for EFS recovery" (it's definitely an administrative certificate ...)
Unfortunately, I do not know what to do with it.

Method 3 - I do not know exactly what you think, I would need more detailed instructions: - /

Method 4 - I have two files stored in this location, but how do I use them to decrypt files?

I was looking at the rest, but none of this helped me, I have full access to files, they are encrypted and can not be opened correctly.

Thank you very much for your ideas!

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Try this Step by Step Guide to EFS Recovery
http://blog.windowsserversecurity.com/2015/01/2...

There's an email address provided to contact the Author

Related Windws 7 thread
https://social.technet.microsoft.com/forums/win...

If still experiencing issues, repost your request to TechNet IT Pro forum.
https://social.technet.microsoft.com/forums/en-...

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

The instructions on the http://blog.windowsserversecurity.com/2015/01/28/step-by-step-guide-to-efs-recovery/ site have previously been found and went through it, but nowhere in Windows 10 could I find Server Manager - Adding Roles and Features - a role-based or feature-based installation ... and so on ... and so further

I will try to create the same topic on the forum you are reporting. Thank you

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated September 22, 2021 Views 557 Applies to: