Windows 10: EFS decryption

I have a Lenovo laptop that required a new motherboard. After Lenovo installed the replacement motherboard, they advised that the laptop needed to be re-imaged. in advance of the reimaging, I saved my important folders to an external ssd. However, when I copied them back to the laptop, they could not be opened. There is a yellow lock next to each file. the error message is "Word cannot open the document: user does not have access privileges".

:)

 

decrypting efs file

I assume that you never created a backup key or recovery agent as would have been suggested when you first started using EFS.

The way that Elcomsoft and other data recovery experts attempt to recover encrypted files is to search through the system's hard drive for information that they can use to recreate the decryption key. If you threw away the laptop and its system drive and
all you have now is the encrypted file itself, you're out of luck.

From Elcomsoft's explanation (Advanced EFS Data Recovery | Elcomsoft Co.Ltd.):

You can always email or call Elcomsoft or one of the other data recovery firms, but I would expect them to tell you the same thing.

 

decrypting efs file

are you telling me that even microsoft who created this efs dont have a tool to decrypt?

do you know any other apps that may be useful ?

 

Decrypt Files and Folders with EFS in Windows 10


Command:
Code:

Code:

fsutil behavior set disableencryption 1

Disabling EFS does not decrypt files, a user might want to decrypt them to be able to access them after reinstall.
Code:

Code:

cipher /d /s:C:\

Decrypt Files and Folders with EFS in Windows 10 Security System Tutorials