If you use NTFS Encryption, read this

[computron9000]

Originally posted by: mubeensgh
Hiya Guys

If u encrypt a file using EFS in one user account, will other users be able to read that file. Or do you need to set permissions for that??

BTW Nice post :laugh:

lol.

 

[computron9000]

sorry on double post, i'm a newb, don't know how to delete (if it's possible on here)

 

[satoshi]

Alright, I had encrypted files and totally ignored the key thing (go figure!!). I haven't reinstalled windows, however, I just changed my user password and now it won't let me access the files. I've changed my password to what it used to be (or what I thought it used to be anyway) and various other passwords that I may have encrypted the files under, but I still can't get them. Is it possible to recover them having not reinstalled windows or anything so drastic, but having simply just changed my password?

 

[rgtrejo]

Hi everybody

I have a little problem:

I used the encrypt contents to secure data on a folder in windowsXP professional
It was working OK
but yesterday (today is octuber 20th, 2004) I couldn't open a file that is in that folder
it returns an erros of access denied, as if i was another user

I didn't change my computer, nor my user, I haven't format my computer, etc
I'm the same user that creates the encrypted folder
Just suddenly didn't work correctly

I tried to decrypt the data with the correct options (ricgth click etc etc) i couldn't

In DOS (command line) I execute the follow

cipher /d /s:c:\rg\transa
it decrypt the folder and subfolders

cipher /d /a /s:c:\rg\transa
It suppose it decrypt the files, but just a few of them were decrypt

does anybody knowns what's going on???

I'll be thankful if some one helps me out

As i told you before I'm ussing windows XP professional SP2, I'm in a domain

 

[Nikkorasu]

Yeah I had this happen to me when I locked down some files for fun back when Win2k first came out. I thought it'd be cool to have super secure files... then, a technician at MS told me to do a reinstall because I was having problems with video, or something like that, and POOF, all access to my files was gone. I called back and of course there were a lot of pointing fingers but no one wanted to take the blame. I was working helpdesk support at a company in Washington that had a Microsoft contract... so I looked up my case and found out that the tech had admitted that he screwed up when I brought that to attention later. I felt better knowing that someone knew they goofed. :beer:

 

[flamingspinach]

Wow. This forum rocks so much. ^_^ I wish I had come here earlier, maybe I would have avoided losing 600KB of typed plaintext by reinstalling WinXP...

Here's the solution I finally used later - a program named Passware (http://www.lostpassword.com/). Oddly enough, though it looks like a scam, it actually worked for me, and the proof is at http://db.gamefaqs.com/console...kirby_super_star_e.txt .

Just thought I'd add this. Thanks for the info, I'll make sure to back up my certificate in the future.

-fs

 

[thegimp03]

helpful...thanks.

 

[piroroadkill]

I don't understand why the regular PC user would need NTFS encryption... :-/

 

[bfonnes]

Originally posted by: piroroadkill
I don't understand why the regular PC user would need NTFS encryption... :-/

so, they have something to call tech support about

BFonnes

 

[flamingspinach]

To hide files from their parents.

-fs

 

[DahRock222]

That don't work if you know how to go around the encryption which is not hard and you don't need brute froce either just use the recovery agent

 

[stash]

Originally posted by: DahRock222
That don't work if you know how to go around the encryption which is not hard and you don't need brute froce either just use the recovery agent

Not hard, huh? I want to see you crack 256 bit AES encryption. If you can, please submit a resume to this site.

And yes, a RA cert will work if one was specified and if you have it. There is no DRA on XP, so that first if is espeically big, since most people dont bother to RTFM and create one.

 

[stash]

 

[flamingspinach]

^

-fs

 

[Lil Jim]

I'm kinda laughing at yall... a specially those who said it was impossible.
I had the same problem : Encrypted... Win XP F***** Up... Formated... N said oh Sh**
Then I used the program "Active@ UNDELETE" and got all back

Didn't take me a life time... took me 30 minutes to figure out!

Merry Christmas

 

[DahRock222]

NTFS is a pain in thee but There are many tools out their to recover lost files and I am laughing with you

 

[flamingspinach]

All these software rely on recovering information about the encryption of your files. If you don't have the remains of the certificate, it IS impossible.

-fs

 

[DahRock222]

:beer:

 

[stash]

Yeah you guys can laugh all you want if it makes you feel good, but flamingspinach is correct. Every EFS recovery tool out there relies on having the encryption keys. It is possible to recover these keys from a drive that has been formatted, but it isn't a sure thing, and depending on how it was formatted, it may be impossible.

Without the keys, the only method available is brute force. And with 256-bit AES on XP SP1 and higher, that isn't likely.

 

[Philippine Mango]

Very useful! Didn't know about that..

 

[Nikkorasu]

IMHO it's more efficient than FAT32... Cluster sizes get smaller and allow you to store more things. However, it does suck when you are trying to move data around and all you have to boot with is a Win98SE boot disk. :-/

 

[morkys]

So you can choose to encrypt only some files and/or folders? I'm just thinking about passwords, financial and bank info etc. So can you encrypt only certain folders/files and leave the rest normal? You save your Private Key on a disc or CD so there's no chance of a hacker or unwanted user finding your Private Key?

 

[syf3r]

Originally posted by: exx1976
[sarcasm] You recommend PGP? And it only uses a password? Wow, those are SO Much harder to figure out than crasking a 128-bit encryption key!! It MUST be good! [/sarcasm]<BR><BR>LOL!!<BR><BR>And whoever made the remark about it taking more than a lifetime to crack a 128-bit key, There was a Distributed Computing thing done not too long ago where a 512-bit RSA key was cracked in just under a year, IIRC...<BR><BR>

Uhh...

How are you accessing that 128-key if not by password?

The version of PGP I'm using has functionality for 4096-bit encryption, and has built-in vpn that can use 1024-bit, even 4096-bit encryption.

/syf3r

 

[flyingdagger]

Thanks for the help. I did not know it before.

 

[Rottie]

damn I should have read this post it is too late because last week my rig crashed for the first time in 4 years so I had to fresh install win2k on primary hd and i could not access important data and some of video files i was working on on slave hard drive because of NTFS I never set or encrypt this folder before. I can't access them anymore I am stuck. I never knew it was hard to break encryption.