Help, Locked Myself Out.
sheena_yanai
Join Date: 2002-12-23 Member: 11426Members

in Off-Topic
ohnoes.. ive backuped important data to a different computer in our companynetwork. the files where encrypted with xp´s build in ntfs encryption function.
now i want my data back,but neither my puter or the other computer in the network where the files are now can read/write the files anymore :-/
man.. im so screwed...
on my machine i could access them, because i have the right certificate.
the other machine cant access them without it.
and i cant open/copy them over the network, because the remote computer dont have read/write rights on this files.. <!--emo&:(--><img src='http://www.natural-selection.org/forums/html//emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif' /><!--endemo-->
now i want my data back,but neither my puter or the other computer in the network where the files are now can read/write the files anymore :-/
man.. im so screwed...
on my machine i could access them, because i have the right certificate.
the other machine cant access them without it.
and i cant open/copy them over the network, because the remote computer dont have read/write rights on this files.. <!--emo&:(--><img src='http://www.natural-selection.org/forums/html//emoticons/sad.gif' border='0' style='vertical-align:middle' alt='sad.gif' /><!--endemo-->
Comments
EDIT:: And a couple more bucks might get you a new car!
Umm...
Could you try burning/copying those files do a disk? Worth a try...
/me puts away TNT.
thought you had locked your self out of your house....
sooo.
you backed up files from machine a to machine b
now you are at machine c, and neither machines b or c can access the files?
or am I missing something?
there should be some one who is a superadmin (aka has root on all the machines)...
then again , I am just sorta thinking based off of the machines I have used...
where is MonsE when yah need him?
(i'm usually $10/hr, but for forumites i'll let it slide ... plus you'll be doing all the work <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->)
machine A wants to access the files on B, but B cant read the files because they are protected.. B got no read or write rights on this files, because of the missing security certificate.. A does have this certificate, but A turns virtually into machine B when accessing the files because its not A who accesses the files at this moment..its B with the order from A to send him the files..aaarrhh.. this sucks..
it does not even ask for a identity..or a password... because theres all saved in this windows internal certificate.. i hate windows..
If you have access to the computer and user account on which the EFS cert is stored, go <a href='http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/windowsserv/2003/standard/proddocs/en-us/encrypt_howto_backup_certificate.asp' target='_blank'>here</a> (IE _required_ to view all the info, curse MS). It tells you how to back up/import the certs on Win2K3, but i just tested it and certmgr.msc exists on WinXP too (pro at least). It has a link on how to import the certs too.
yeah... and whos paying the plane to bring the hdd to me?
yeah... and whos paying the plane to bring the hdd to me? <!--QuoteEnd--></td></tr></table><div class='postcolor'><!--QuoteEEnd-->
I'll bring it! <!--emo&:D--><img src='http://www.unknownworlds.com/forums/html//emoticons/biggrin.gif' border='0' style='vertical-align:middle' alt='biggrin.gif' /><!--endemo-->
password recovery is a cakewalk if you have a few spare hours and a decent box (i wrote a paper on how xp uses NTLM [weak] hashes by default and how that cuts "recovery" time significantly ... for my school district ofcourse ^^)
oh, and NTFS-EFS uses your password hash to encrypt files, so if you can change your passsword hash to their password hash, bewm! you got files
machine A wants to access the files on B, but B cant read the files because they are protected.. B got no read or write rights on this files, because of the missing security certificate.. A does have this certificate, but A turns virtually into machine B when accessing the files because its not A who accesses the files at this moment..its B with the order from A to send him the files..aaarrhh.. this sucks..
it does not even ask for a identity..or a password... because theres all saved in this windows internal certificate.. i hate windows.. <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
A B A B A B A BB A BA BAB A A B A B A B B B A B B A AAAAAAAAAAAAAAAAA!
<span style='font-size:24pt;line-height:100%'>GAH!</span>
*DarkATi's Head Explodes*
SYSTEM OVERLOAD... TOO MUCH DATA....
~ DarkATi
password recovery is a cakewalk if you have a few spare hours and a decent box (i wrote a paper on how xp uses NTLM [weak] hashes by default and how that cuts "recovery" time significantly ... for my school district ofcourse ^^)
oh, and NTFS-EFS uses your password hash to encrypt files, so if you can change your passsword hash to their password hash, bewm! you got files <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
Please let me take this time to refer to your signature disclaimer. Ah yes, just as I expected.
password recovery is a cakewalk if you have a few spare hours and a decent box (i wrote a paper on how xp uses NTLM [weak] hashes by default and how that cuts "recovery" time significantly ... for my school district ofcourse ^^)
oh, and NTFS-EFS uses your password hash to encrypt files, so if you can change your passsword hash to their password hash, bewm! you got files <!--QuoteEnd--> </td></tr></table><div class='postcolor'> <!--QuoteEEnd-->
Hrm good to know... i guess my XP box just hated me <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo--> Wouldn't let me open any of the files even with an identical password (which produces an identical hash). But I imagine that was just XP showing how "solid and reliable" it is (hah what a joke). But I do agree with you on how weak security is... the IT guy in charge of a few laptops for the local health authority got fired and changed all the passwords. 5 minutes per laptop to reset them. He was so **** when they called him to tell him that all the passwords were reset <!--emo&:p--><img src='http://www.unknownworlds.com/forums/html//emoticons/tounge.gif' border='0' style='vertical-align:middle' alt='tounge.gif' /><!--endemo-->
i found a utility that can crack it if you have access to the c:\Windows on the machine to access the SAM file, but then this util asked me to register it and pay for it to get more than the first few bytes of the files. so it is possible... but not easy, look for "Advanced EFS File Recovery" maybe at www.[link removed].box.sk
that website is all about cracking security, network security etc. they say they are to help you in situations like these but since they list many illegal programs, i might get in trouble for linking to them... eh.
edit: HAHA, the link was automatically filtered out. very funny.