Serious problem with files encrypted with EFS, inaccessible after an update

Question

I commented on my problem in the community because in Support they could not give me a solution to the problem and they suggested that I seek advice in this community.

Since my previous notebook with all my personal files was stolen, in the new one I created a folder with activated EFS to encrypt the content. This was back in 2015.

I never had any problem with EFS or anything else, until a Windows 10 update that was made in late December 2018 early January 2019.

After it, ALL FILES previously encrypted were inaccessible. It is not possible to edit them, copy them, or perform any operation with them, except to delete them.

The user did not change, nor was it erased, the user's password was not changed, and the encryption certificates were not deleted (I verified it with certmgr.msc).

It seems that the user's certificate had been disconnected, and therefore when the user (original creator and owner of the files) tries to decrypt them, the system does not allow it.

Someone has had a similar problema?. Any idea or suggestion will be infinitely grateful, since the encrypted files are almost totally familiar images, of no monetary value but irreplaceable affectively.

From now on I advance that I have backup of the files ... also encrypted, as is logical. Greetings,

Answer 1

Hi, Lee.

As far as I can know, the key(s) are all in the notebook's HDD.

Using certmgr.msc I can see a branch "Personas de Confianza" ("People Trusted" I think is the aproximate translate) and here there are -I believe- the certificates for all user in the pc, except the present user, which is located in the branch "Personal

• Certificates".

In this branch "Personas de Confianza" there are certificates for all the user that sometime used the pc.

Nothing has been deleted in the pc.

But, regardless what user be in use or logged in, it is impossible to do any operation on this files: you can't edit, view, copy, decript, etc., only can be deleted.

It seems like the "connection" between the user (I always used the same username and password, even to encript the files) has been lost, and despite to have the certificates, I can't "link" both the user with the certificate…

All this trouble began with an Win10 update.

Again, thanks for your deference and kindness.

I'll be hearing all your suggestions. Many thanks!!

J.-

Answer 2

HI

If you still have the key, transfer the file to an old windows 7 PC and Decrypt the EFS file.

Answer 3

Dear Lee:

In the very first place, many thanks for your attention and advice, and apologies because my bad English, it's not my mother's language.

But, yes, I've tried using "cypher /d …", and the result is "Error - Couldn't decrypt the file" (or something like this message)…

I still can't understand what happened...

Answer 4

Hi

My name is Lee; an Independent Consultant, I'm here to help you with your problem.

Have you tried to Decrypt the EFS file?

Run command prompt with admin privileges

cipher /d "full path of file with extension

Thanks

Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

______________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.