question

EntraneurPatrick-9447 avatar image
0 Votes"
EntraneurPatrick-9447 asked ·

Certificat EFS formaté, comment récupérer ?

Hello, I formatted and reinstall Windows 10. Now I find myself with 2 files in .rar extension having a padlock icon and which can no longer be opened. It was encrypted to the owner's EFS attribute which I formatted. How to recover, I need help from an expert computer scientist with formatted EFS recovery.

windows-10-general
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TeemoTang-MSFT avatar image
0 Votes"
TeemoTang-MSFT answered ·

Without the private key and certificate associated with the original user (or possibly the Administrator account recovery agent key/cert) you will not be able to decrypt your files. Having a user with the same account name and password won't be enough since a specific EFS key pair is used for the encryption.

If you don't have backups of the original Windows installation with user data then I'm afraid your files will remain inaccessible.


If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Engineers in the field will be able to do this in the laboratory.

0 Votes 0 ·
EntraneurPatrick-9447 avatar image
0 Votes"
EntraneurPatrick-9447 answered ·

Windows 10 has a bug which sometimes causes people to catch this bug, where EFS encryption kicks in on old encryption disabled. So it is believed to be without EFS encryption, whereas Windows reactivated it after formatting.
It is therefore impossible to find the private key, apart from having made a recovery agent. It should be taken to the professional EFS key recovery lab, so they will have to connect to the old saved session while recovering from a partition lost after formatting.
They will also be able to find the private key in the system partitions lost from the old partition deletion before reinstallation.

It should be understood that as long as the hard drive is not damaged, it still exists intact; then doctoral students and engineers can find everything to the extent of their skills.
Also provided that the hard disk must not be used after reinstallation Windows, see little day. In order to best preserve the deleted and formatted and overwritten parts

· 1 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hope in future there will be a advanced method for user to restore their encrypted files after reinstall, but now if you didn't backup ca, the best bit is asking for help from data recovery company

0 Votes 0 ·