Lost access to Encrypted Files

I already posted this on Technet but haven't received any responses yet so I'm hoping you guys have some ideas. Thanks in advance!

Lost access to Encrypted Files

By the way, I just got a new job with another company (well few months ago). I leveled up from Service Desk Specialist to Network Specialist! I'm learning so much and it's worth the pay cut.

Find more posts tagged with

Free for TechExams community: Cybersecurity salary guide

Compare cert salaries and plan your next career move

Button

Comments

demonfurbie

is there a dra setup

ayori

No DRA and system restore. =(

Priston

I have an encrypted folder where I store confidential files. Just today I lost access to it. I still have the encryption keys which was generated when I encrypted this folder and it is listed on the Advanced Attributes - "Users who can access this file". I did not reinstall the OS or changed my user profile. I'm admin of the PC and the files inside this folder lists the Administrators group as the owner which has Full Access. It was just weird that randomly I lost access to it. Only thing that I did like a week ago was change my password but reverted it back on the same day as I was just testing something (which shouldn't affect EFS anyway). My OS is Windows 7 Enterprise 64 bit. I appreciate any help.

If your an admin couldn't you just
right click file -> Security tab -> advanced - > Change Permissions - > Add.. -> yourself
If that doesn't work is this a work PC or home PC

ayori

My account and the Administrators group already have Full Control of the folder and the files. I did try to re-add myself but that didn't help. I'm getting this message when opening the files:
Access to <file path\File name> was denied.

Thanks for your suggestions and response!

demonfurbie

have ya tried the local admin account?

Priston

What if you take over ownership of the file?

Rappeller

Check the TPM in BIOS. I have seen it just disable itself and when I go back and re-enable it, it works fine.

blargoe

Was your password reset from the AD console rather than you changing your password yourself during a logon session? That can screw up things with EFS...

ayori

For whatever reason, the private key associated with the certificate has been lost/corrupted. When I try to export the certificate (to try and re-add it), the option "Yes, export the private key" is greyed out. There's also a note at the export window saying that "The associated private key cannot be found. Only the certificate can be exported." Pretty strange that it would happen without any changes aside from password (which has been reverted).

I pretty much gave up and just looked for my back up and luckily I saved them.

Thank you for your help! Didn't expect I would get more responses here than TechNet. You guys are awesome.