Anyway to decrypt an EFS file?

Question

I have the user's password, but nothing else - is there a way to decrypt an EFS-protected file?

Answer 1

Is there still an account for that use that you can log on to? The EFS file is encrypted using a certificate that's attached to the account (if I remember right).

You may be able to use a "recovery agent account" to decrypt the file. Look up EFS in the online TechNET/MSDN knowlegebases for the convoluted, gory details - such as:

• http://technet.microsoft.com/en-us/library/cc962103.aspx
• http://technet.microsoft.com/en-us/library/cc875821.aspx