Decrypting issue...

So I have group of file encrypted with the built in Windows 7 encryption and it worked fine. But, now I am trying to decrypt the files on the same machine it was encrypted on but I am not allowed to. It asks for administrative permission(my account is the admin account) and I click continue to allow the action to be done. However, after that is where the problem arises. It tells me that an error occurred applying attributes to the file....access is denied. Which from there asks me to either ignore it try again or cancel. Ignoring does nothing, and trying again does nothing either. So, what are my options in getting the files decrypted? Thanks.

 

So, I found this on the MS site but the solution is a bit confusing to me, and I am not sure if its really going to work or not. Any ideas? http://support.microsoft.com/kb/264064/en-us

 

So, any ideas please?

 

Even if you are the admin, access can be denied. You need to check the Access control List and make sure your account is listed with effective permissions to change the properties. Right click the file and select properties. Look under security and make sure you have access and that other groups you may belong too also don't have a deny flag.

Deny flags take precedence over access flags.

 

There is only one account on this comp an its mines so, does that still apply?

 

Yes.

:yes: :yes:

Edit:

I was gonna type up a brief summary of NTFS permissions. But I think that will confuse you even more. Just stick to the basics here.

Besides, which folder is this that you are encrypting?

 

Alright so I see my user name, System and Admin. I tired denying all the various accounts listed there and no dice.

I am trying to decrypt a bunch of files i have(some photos) and the folder looks decrypt but the files are not.

 

Don't Deny them. Make sure they have access.

Might just be easier to go the the Effective permissions tab and typing your account name there.

Edit:
Also type in SYSTEM and make sure it has full permissions.

 

Well that is the thing, all them do have permission when I tried it before. I guess I misread what you said.

 

Yeah, they have permissions by default. If SYSTEM and Administrators all have full control under the Effective permission tab, then it's not the NTFS permissions.

When was the last time these files decrypted?

 

begging of the month.

 

Odd, the only other thing I can think of is an update to a background process. I'm out of ideas atm.

They are data files in your user folder?

 

They are all just pictures.

 

any other suggestions?

 

I know it is a bit of an old thread, but the issue was never solved. Any different ideas?

 

Humm, does the group "users" have modify permissions?

 

Something is missing in your story. Can you describe (if you still remember, that is), what exactly it is that you did, and what happened between the time you encrypted the files and the time you tried to access them?

To me this sounds like you simply encrypted the files as a different user from the one that is trying to decrypt them. In that case you will get these "Access Denied" messages even though your permissions would allow you access. Notice that it doesn't matter what the name of the user is: If you reinstalled the OS, or, if you changed your password (or created one in the first place) while logged on as a different user, then you may be out of luck, plain and simple.

First rule of business when encrypting files: If those files are of any value to you, make sure you have a backup of your security credentials...

 

Something I haven't considered.

Pirx is right. If you are typing to decrypt the files from an account other than the original, you are plain out of luck. The files are encrypted with a private key unique to every account. Only if you had backed up the key or had designated a Recovery Agent in Group Policy, you can kiss those files bye bye.

 

User as in my user name, or an actually group in permissions called user? Because, I never modified anything, at least I don't think I did, until I tired to decrypt the files. Unless Windows 7 did it the modifying itself?

NO, this was all crypted under the current user name with no change at all. All I did was crypt the files with the built in software that comes with windows 7 ultimate. I didn't touch the files at all for a few weeks, then those after a few weeks(like 3 or 4), I tried to decrypt the files and here we are now. Well, I did during that time have my computer sent to Sony(part of the reason the files were crypted in the first place) so they can replace the broken dvd drive, but I doubt it was because of that. Could it?

Thanks

 

Humm, nah. I don't think they would of wiped your drive and reinstalled everything. Or tried to wipe your password and reinstate it (which is impossible).

Users is an actual group. It will show up as YourComputerName\ Users under the security tab. But I doubt that will solve things.

All the permissions are there. I'm at a lost.....

 

I called MS tech support and they were terrible at helping me. The person sounded pretty newbish. So, I called again and spoke to someone else they were also at a loss. Both kept saying if If un-checking encryption to decrypt the file didn't work then nothing should work. They really frustrated me.

 

I think you're talking about two different things here. surfasb, take a look at coldmack's link. It's a knowledgebase article explaining that encrypting/decrypting EFS can fail if System doesn't have the appropriate rights for "System Volume Information".

So, am I right that you, coldmack, applied surfasb's suggestions exclusively to that folder? If so, please check the effective rights of the encrypted file/s folder/s themselves using rightclick -> properties, "Security" tab, "Advanced" button, "Effective rights" tab, "Choose" button, and enter "Administrators" or "System". System is supposed to have full rights on "System Volume Information", the administrator group ("Administrators") isn't.

 

I think it actually did what surfasb suggestion to the file not the folder its in(which is also encrypted).

I tried what you suggested, but the files are still encrypted. Then again I saw select and not choose button. Thank you though.

 

I have the same issue. I encrypted some files that were on my external hard drive using win 7 RC 7100 encryption, then I wiped my internal HD and installed Win 7 ultimate and now I can't access them. I didn't type in any passphrase when I encrypted the files. there must be a solution. what if I install the RC again?

 

Your issue is different. The encryption key was tied to your old account. If you did not backup the private key and you used NTFS encryption to encrypt your files, they are now lost.

 

i understand the private key fact, but is that generated based on what exactly? I thought it was based upon some hardware serial number. or is it just a random number which is then associated with the account and then deleted upon formatting the hard disk?

 

It's random.

 

I can't believe I lost everything! I am so upset. I don't think the way encryption works is explained very well by microsoft.

 

With encryption you always need to back up your key. If it were recoverable then someone else could easily retrieve the information, which would void the purpose. With both EFS and BitLocker Microsoft urges you strongly to backup the encryption key during its creation. With EFS it constantly starts pop-ups in the taskbar until you tell it to stop. I'm unsure what more Microsoft could do.

Nevertheless, it is very disappointing. I'm sorry to hear.