I just installed Windows 7 RC1 from having Windows XP SP3. However i had some NTFS encrypted files on Win XP which i forgot to decrypt before upgrading, and i did not backup the certificate. Thankfully, the Windows 7 install backed up my old windows directory to Windows.Old. I managed to find the Certificated in "C:\Windows.old\Documents and Settings\Anthony\Application Data\Microsoft\SystemCertificates\My\Certificates\". I proceeded to import this certificate with certmgr.msc. However, after i had done this, i could still not Copy, Open or Modify these files. The only thing i could do with them was move them around, or toggle the Read-Only and Hidden attributes. If i try to copy them i get "You need permission to perform this action" although it clearly states the owner as "Blackangel\Anthony" in the file properties and that i have Full Access to it. If i try to remove the encryption by unticking the "Encrypt contents to secure data" box in Advanced settings, as soon as i click "Apply" i get an "Access is denied" message. Also, if i click "Details" next to "Encrypt contents to secure data" the user that is in there is "Anthony(Anthony@BLACKANGEL)" which is me. And the certificate Thumbnail is identical to the one i imported from my Windows.old directory. Also, if i try to add a new certificate i get "To add users to this file, you must have access to the file and Write or Modify permissions for it", which i seemingly do have. Despite all evidence seemingly pointing to the fact that i should be able to copy/modify this file or remove the encryption i still am unable to. Perhaps i am missing something, and i'd be extremely grateful to anyone who may be able to help, as these files are very valuable to me. Thanks very much in advance, Anthony Donato.

bump.

<I just installed Windows 7 RC1 from having Windows XP SP3. However i had some NTFS encrypted files on Win XP which i forgot to decrypt before upgrading, and i did not backup the certificate.>To the best of my knowledge, you're hosed. EFS, as I recall, uses two keys for access: a machine (public) key (stored in a system directory), as well as your user key (stored in your user profile.) Without both, you have no access to the data. The following articles explain a lot of the technical background of EFS, as well as recovery methodshttp://technet.microsoft.com/en-us/library/bb457065.aspxhttp://technet.microsoft.com/en-us/library/bb457116.aspxHowever, even re-reading those articles (it's been a while), I don't see how to recover the public key, now that the original Windows installation is no longer there.-Chris[If this post helps to resolve your issue, please click the "Mark as Answer" or "Helpful" button at the top of this message. By marking a post as Answered, or Helpful you help others find the answer faster.]

You misunderstand I DO have the original windows folder and users folder. I'm just unsure as to what certificates to use, where they are and how to import them. If you could help me, it would be greatly Appreciated. -Anthony.

I went into "Control Panel->User Accounts->Manager your file encryption certificates" and tried select the old certificate from "C:\Windows.old\Documents and Settings\Anthony\Application Data\Microsoft\SystemCertificates\My\Certificates\" which i imported with certmgr.msc. However i get the error "Keyset does not exist".I believe this certificate lacks a key because its filesize is smaller than a Certificate i create with Windows 7 and i can only export it as a .CER file (after i had imported it) and not a .PFX file like with the newer certificate. There is a file in "C:\Windows.old\Documents and Settings\Anthony\Application Data\Microsoft\SystemCertificates\My\Keys\" which i'd assume to be the key. However, i have no idea what to do with this file or how to add it to the certificate. Is there anyone on this forum who is an expert in this area? Help would be tremendously loved and appreciated.-Anthony Donato

Athony,See this post.http://social.technet.microsoft.com/Forums/en-US/winserversecurity/thread/a7eebc72-2e77-4baf-a0c3-c64811fa55fbAswell this site.http://www.beginningtoseethelight.org/efsrecovery/Does this resolve your issue?Kind RegardsDFTIM me

Thank you verymuch the Elcomsoft software was VERY useful and worked flawlessly. I HIGHLY reccomend it to anyone with similiar issues. =). Thanks for the links!! -Anthony Donato