EFS - RECOVERING FILES from an orphaned User Profile

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

XP Newsgroup:

I have unknowingly left some encrypted files in a user's Profile when I
moved the PC over from an NT V4 domain to a new SBS 2003 Domain. The User
Profile is still intact, but orphaned ( There is no way (that I know of) to
logon to that profile).

Is there a procedure to recover these files? I have not attempted to
do anything fearing that I may make matters worse.
I have found some links on the MS Support website, but the KB articles
appear to be no longer available.

The files are in the user's MY Documents folder.
The PC is still on WinXP Pro SP1.

Much Thanks in Advance !!

Bob G.

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Here are three options:
1. Rejoin the machine temporarily to the NT4 domain, log on as the NT4 user
(same password), and decrypt the files (or export the EFS certificate/key).
2. Establish a trust relationship between the NT4 and WS2003 domains so that
you can log onto the machine as the NT4 user (same password) and decrypt the
files (or export the EFS certificate/key).
3. Contact Microsoft Product Support (PSS) for Windows XP about a utility
named reccerts.exe. Reccerts.exe can be used to recover EFS
certificates/keys from a profile if you know the password for that profile.

Hope one of those works for you. Going forward, if you use EFS, remember to
back up your certificates/keys.

Thanks.
Pat


--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Bob G." wrote:

> XP Newsgroup:
>
> I have unknowingly left some encrypted files in a user's Profile when I
> moved the PC over from an NT V4 domain to a new SBS 2003 Domain. The User
> Profile is still intact, but orphaned ( There is no way (that I know of) to
> logon to that profile).
>
> Is there a procedure to recover these files? I have not attempted to
> do anything fearing that I may make matters worse.
> I have found some links on the MS Support website, but the KB articles
> appear to be no longer available.
>
> The files are in the user's MY Documents folder.
> The PC is still on WinXP Pro SP1.
>
> Much Thanks in Advance !!
>
> Bob G.
>