Windows 10: Windows EFS Issues

Discus and support Windows EFS Issues in AntiVirus, Firewalls and System Security to solve the problem; Hey Everyone! I'm having quite a bit of trouble with Windows EFS encrypted files currently. I recently migrated backup systems for the server, found... Discussion in 'AntiVirus, Firewalls and System Security' started by jkjoker43, Mar 4, 2021.

  1. jkjoker43 Win User

    Windows EFS Issues


    Hey Everyone!

    I'm having quite a bit of trouble with Windows EFS encrypted files currently. I recently migrated backup systems for the server, found that the backups are completing with errors, and those particular files are encrypted through EFS. I was able to decrypt a majority of them because the one user that (maybe unknowingly) encrypted these files was still in active directory.

    Unfortunately, the other two users that have encrypted files are no longer in AD. I can't simply take control of the file through permissions and decrypt it because of the certificates assigned to the old users. I can't export the old user private keys because they weren't set up with the function to export by the previous tech. The certs are still in the server, so I'm unsure if they can be leveraged at all?

    I've tried (not really thinking it would work) recreating the old user account to see if maybe the naming convention was enough to trick Windows - but no luck. So I think I have two options potentially, figuring out a way to assign the old certs to another user (which I'm unsure is possible without the private keys), or figure out how to utilize the admin recovery cert.

    The admin account was assigned a recovery cert, and that admin account is still in play. Maybe I'm not googling the right terms, but I can't find any way to actually decrypt the file using the recovery cert instead of the user cert that encrypted the file. I tried signing into the admin account and decrypting the files like normal, but I get access denied. I've tried decrypting them through cipher on the cmd, access denied. I've tried adding additional certs to the files/folders (including the admin cert), yet again access denied.

    Any suggestions? Thanks a bunch in advance!

    The server is running Windows Server 2012 R2 Version 6.3 (Build 9600)

    :)
     
    jkjoker43, Mar 4, 2021
    #1

  2. Win 10 pro EFS Encrypting File System Problem (Dell)

    Hi,

    Thank you for being a part of Windows 10.

    I appreciate you for providing details about the issue and we are happy to help you.

    I suggest you to start the Encrypting File System (EFS) Service and check if it helps.

    Follow the below steps:

    • Press Windows key + R from the Keyboard.
    • Type services.msc and hit Enter.
    • Search for Encrypting File System (EFS) Service.
    • Double click on Encrypting File System (EFS) Service and click on
      Start button.
    • Click on the dropdown list and set the Startup type to
      Automatic.
    If the issue still persists then, I suggest you to post the same question in TechNet forum for further assistance with this issue. Follow the below link to post your question in TechNet forum.

    Technet forums

    Kindly let us know if you need any further assistance with Windows. We are glad to assist you.

    Thank you.
     
    Harshavardhan Rathod, Mar 4, 2021
    #2
  3. Smittychat., Mar 4, 2021
    #3
  4. Windows EFS Issues

    How find Private key of EFS?

    Hi VijayKumhar,

    Thank you for posting your question in the Microsoft Community Forums.

    I appreciate your efforts to work on this issue.

    Follow these steps to back up the private key using the Command Prompt as the option ‘export the private key’ is not available.

    1. Open CMD or Command Prompt in Admin mode.
    2. Type ‘cipher /x "%UserProfile%\Desktop\EFSCertificates".
    3. You will now get a prompt confirming if you are sure if you want to back up the certificates associated to your files encrypted with EFS Encryption. Click on OK.
    4. It will work as you to enter a password to protect your .PRX file from unauthorized users. Enter the password and hit Enter.
    5. Now, enter the same password to confirm it and then hit Enter.
    Once this is done, a file by name ‘EFSCertificates.PRX’ will be saved on to your Desktop.

    Further, if you still face issues, suggest you to post your question in the
    TechNet Windows 10 IT Pro Security where we have support professionals who are
    well equipped with the knowledge and skill to handle queries regarding EFS Certificates issue.

    We look forward for your response.

    Regards,

    Srimadhwa B

    Microsoft Community-Moderator
     
    Srimadhwa_B, Mar 4, 2021
    #4
Thema:

Windows EFS Issues

Loading...
  1. Windows EFS Issues - Similar Threads - EFS Issues

  2. Can I recover encrypted files with EFS without having key.pfx file ?

    in Windows 10 Network and Sharing
    Can I recover encrypted files with EFS without having key.pfx file ?: [ATTACH]So I know that this is answer but my files are not recovered. I had some encrypted efs folder in win 7 pc that was in office domain. Upgraded to win10, there was some issue, so had to format C$. Now my encrypted folder is in d drive but I guess the key was in C drive....
  3. EFS encryption can not be removed after a windows reset

    in Windows 10 Network and Sharing
    EFS encryption can not be removed after a windows reset: So here is the situation... I updated some pc parts on my computer including MOBO, cpu, etc. And I flashed my bios and did everything well however upon loading the windows OS there was a lot of buggy things going on and I thought what better way to clear all the bugs than to...
  4. Cannot access EFS encrypted files/folders using File Sharing SMB

    in Windows 10 Network and Sharing
    Cannot access EFS encrypted files/folders using File Sharing SMB: I searched and found an article similar to this one on Microsoft's site: https://www.fonepaw.com/windows/access-denied-folder-file-windows.html And from my diagnosis I have trouble accessing EFS encrypted files and folders....
  5. Cannot access EFS encrypted files/folders using File Sharing (SMB)

    in Windows 10 Network and Sharing
    Cannot access EFS encrypted files/folders using File Sharing (SMB): I searched and found an article similar to this one on Microsoft's site: How to Fix Access Denied Folder/File Errors on Windows 10/8/7 And from my diagnosis I have trouble accessing EFS encrypted files and folders. 'Network Error', 'Windows cannot access... You do not have...
  6. Blue screen CRITICAL_PROCESS_DIED ef

    in Windows 10 BSOD Crashes and Debugging
    Blue screen CRITICAL_PROCESS_DIED ef: I have a temperamental PC that probably twice a month blue screens, and I can not find out why so I am looking for help. Looking at this community it pointed me to the memory and hard drive. I have ran multiple memory test and hard drive test and all pass with 0 errors... I...
  7. Bluescreen Error Code: ef, 154, 7a and 3b

    in Windows 10 BSOD Crashes and Debugging
    Bluescreen Error Code: ef, 154, 7a and 3b: I'm not sure why my laptop is blue screening. It started 2 months ago without any reason. Since then I have run various tests on my hardware and have found nothing wrong. I also tried a clean install of Windows 10 and have updated and downloaded all drivers. The most common...
  8. Cant open Encrypted Files Though EFS Disabled and Blocker not activated

    in AntiVirus, Firewalls and System Security
    Cant open Encrypted Files Though EFS Disabled and Blocker not activated: Hello, I am stuck on this issue on my local PC , still couldn't find any resolution. All my files getting yellow pad lock . When try to open it it shows message that I don't have permissions to open it. Whereas , I have set permissions for everyone and working as admin ....
  9. Encryption File System EFS decryption issue

    in Windows 10 Network and Sharing
    Encryption File System EFS decryption issue: Hello everyone, I have a huge problem and i need help. Windows encrypted my files with EFS and bit locker for the hard drive. I had to restore my computer after i noticed malicious program was running and causing problems. I was unable to restore from a known good point so...
  10. EFS Certificate issue!!!!

    in AntiVirus, Firewalls and System Security
    EFS Certificate issue!!!!: Hi. Here's what happened. I encrypted my files with EFS a while ago and I THINK I backed up the certificate. I moved a bunch of files over to a new HDD, copied the User folder from the old SSD, ran Samsung Disk Erase Manager on the SSD, and installed New Windows 10. Of...