Hi Ian,
Here's an overview of EFS
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/encrypt_overview.mspx?mfr=true
Interesting line:
" Encrypted files can become decrypted if you copy or move the file to a
volume that is not an NTFS volume."
Maybe you could try this:
Boot up with a LiveCD (For Windows I prefer an XP - or PE based one,since
the file system is the same)
Maybe a Linux based one will work ,so long as it supports mounting a USB
drive.
The USB drive must be formatted as FAT.
Try to copy or move the files/folders to the USB drive and then open them.
If successful ,fine. If not , you'll have to search for an EFS cracker of
some sort.
http://www.beginningtoseethelight.org/efsrecovery/
http://blog.wisefaq.com/2010/08/30/bulk-efs-decryption-encryption/
The web is full of queries about this. Haven't found a free and effective
tool ,but maybe Cipher (above link)
might work too.
Peter E.
--------------------------------------------------
From: "ian-c"
Sent: Sunday, 19 June, 2011 11:19 AM
To: <[log in to unmask]>
Subject: Re: [PCSOFT] File Permissions issues
Drive was bootable before pulled from old system. Was master drive in
two-drive XP/Ubuntu dual boot PC. But tried booting it on a Thinkcentre
9637-Q2U and it did not. Most of the files I want are encrypted with
EFS, even simple ones like a frequently updated plain text file of book
titles I want to read.
This morn' I booted off a Ubuntu-based livecd and both the drive in
question and my system drive mounted with R/W allowed. But same issue.
I could read/wrtie to/from system drive but still could not open or copy
anything from the My Documents folder (neither to livecd desktop nor
system drive folders).
So I guess I have to find something to decrypt EFS on XP drive from Win7
system.
Ian Carmichael
The NOSPIN Group has added a new feature on our website,
web based bulletinboard for questions and answers:
Visit our sister website at http://nospin.com
|