Having Issues Opening A Windows EFS Encrypted File In Win7 Pro. HELP!

Hello. I have a question.

I am using Windows 7 Professional. The Professional/Business and higher editions of Windows since Windows XP version have the EFS (Encrypting File System) feature as part of the operating system. This is the main reason why I will not go lower in using/purchasing Windows editions than the Windows Professional/Business line editions.

Okay, I have an issue. Some time ago, I have a PDF file and I placed inside the a folder that happens to be EFS encrypted. When I moved/copied the PDF file into the encrypted folder the PDF file automatically became encrypted too. The text or file name turns from the normal black type to the green type indicating that it is encrypted. Good, I say. It is now secure. When I created the EFS folder I was NOT in Windows 7 Professional. I was using Windows XP Professional when I created the EFS folder. Also, when I created the PDF file and moved it into the EFS folder, I was ALSO using Windows XP Professional as well. (As we know, Windows XP Pro has the EFS technology as well.) WELL, SADLY I LOST MY WINDOWS XP PRO INSTALLATION SOME TIME AGO -- HARD DRIVE FAILURE AND IT IS LONG GONE. The hard drive was sent back to the Western Digital. NOTE: This EFS folder that has the EFS PDF file inside is safe on another hard drive. Now today, I am using Windows 7 Professional that has EFS technology as well. So I am trying to access this EFS folder/EFS PDF file inside with Windows 7 Professional.

Now, I get an acces is denied issue from PDF software programs. I have both the free version (limited version) of Adobe Reader installed (v.9.4) and a program called Nuance PDF Viewer Plus that also is a more advanced PDF application. For your information, I have set the PDF file “Associate a file type or protocol with a program” to the Nuance PDF Viewer Plus to open and view my PDF files. When I open the PDF file in that EFS encrypted file, I have an issue. As the Nuance PDF Viewer Plus opens the encrypted PDF file, I get a message or dialog box in the middle of the screen stating, “Access denied.” Okay, I go ahead and open this same PDF file with my Adobe Reader. Again, I get a similar message that states, “There was an error opening this document. Access denied.”. So I see I cannot open this PDF document that Windows EFS encrypted.

For your information, I did not password protect the PDF file with a more advanced PDF editing software that allows for password protection of PDF documents. So there is no PDF password protection on this Windows EFS encrypted PDF file.

Questions: Please tell me what I can do to still access this EFS PDF file NOW when I am using another Windows operating system that offers EFS.

So what I am looking to understand:
1. Why am I having issues? Please explain.
2. How do I resolve it? Please explain. Do have to only be in my user account of the same Windows operating system I originally created the EFS file or folder in order to open an Windows EFS encrypted file? Please explain.

I guess I do not understand Windows EFS File Encryption system works as it shows.

Please reply.

Thank you!

 

I'm no expert on file encryption but your encryption key is kept on the OS that created the encrypted folder/file. When you lost that particular OS installation the key was destroyed. I don't think there is any way to gain access to the file again. Trying to use software to decrypt is rather pointless because if it was that easy there would be no use to encrypting in the first place.

If you choose to use encryption for important files you must back up the key to another device so you have access to it in case of mechanical failure such as you experienced. I know that is not helpful now but it is a consideration for the future. Instructions should be similar for both Vista and Win 7 http://www.howtogeek.com/howto/windows-vista/back-up-your-file-encryption-key-in-windows-vista/

 

@ sach2:

Hello. You're absolutely correct. There is nothing I can do as I have learned today from other sources. If the EFS certificate and key are lost from Windows XP Pro and never backed up (and now that I have totally lost Windows XP Pro some time ago and don't even have the hard drive it was on any longer anyways), I am a dead in the water and I can never ever again recover the data (decrypt the files). The EFS recovery agents (the 3rd party programs that are designed to recover EFS encrypted files) NEED either the EFS certificate or the EFS private key in order to decrypt EFS files and folders.

I have learned my lesson and learned to back-up to a USB flash drive or blank CD/DVD-ROM both the EFS certificate and the key to one of them for safe keeping away from the Windows operating system ***IMMEDIATELY AFTER*** creating my FIRST EFS file or folder with that version of Windows that includes EFS functionality. I did this time with Windows 7 Professional! Now I am safe in case Windows 7 Pro completely fails me and dies. (Lets hope not!)

It is sad that Microsoft Windows does not DEMAND the user (with some sort of dialog boxes) to back-up to some external media the EFS certificate and key at the FIRST time the user performs to EFS encrypt an file or folder. I didn't know to begin with!

Website to read to perform the tasks: http://windows.microsoft.com/en-US/windows7/Back-up-Encrypting-File-System-EFS-certificate

Thank for your help!

Take care!

 

Sorry you lost access to your files.

Every time I see people extolling the virtues of encrypting I think to myself, "I can barely keep track of my pitifully non-secure passwords. How are they going to keep track of their encryption keys over long periods of time?" I've never figured out a system myself so I avoid encryption for now.

Not to make light of your situation but I am sure the CIA has backroom deals with Microsoft and their powerful computers could break the encryption in short order. Maybe it is time to make a new friend in Langley, VA.

 

@ sach2:

Yah, I was told to keep the EFS files alone and be patient. Some far out day, some hacker will find a way to decrypt them. Of course by then, Microsoft will have something better than the current EFS anyways.

Thanks again for your help.