Decrypting EFS w/o altering timestamp - possible?

Posted by grojo on Server Fault See other posts from Server Fault or by grojo
Published on 2009-12-14T12:31:28Z Indexed on 2010/06/02 1:04 UTC
Read the original article Hit count: 321

Hi,

I'd like to decrypt some EFS-encrypted files, but I do not know how to do that without altering the timestamp. When encrypting/decrypting files, the modified-time is set to the current time. I'd like to preserve the original timestamp, as the files have not really changed.

Is this possible? Solutions i dont think work

  • copy to/from FAT (timestamp resolution differs)

  • copy to from Samba share (same)

  • programmatically copy original timestamp and reapply after decryption (possible, but need to handle decryption time which may vary)

© Server Fault or respective owner

Related posts about Windows

Related posts about filesystems