Windows - Decrypt encrypted file when user account is destroyed

Posted by dc2 on Super User See other posts from Super User or by dc2
Published on 2013-11-09T23:56:26Z Indexed on 2013/11/12 21:57 UTC
Read the original article Hit count: 190

I have a Virtual Machine running on my Windows Server 2008 computer that originally was received by me encryped, as the builder of the VM did it on a MAC, which decrypts files by default.

I never thought to decrypt these files, as they automatically 'decrypt' when you have permission over them, so the VM has been running for over a year despite the encryption.

I just upgraded my computer to Domain Controller (dcpromo.exe).

Now when I try to access/run the VM, I can't because I don't have permission to decrypt the files as that was on another logon (local administrator) and now I am the domain administrator.

Apparently the local admin is totally nuked when you upgrade to domain controller.

I have tried EVERYTHING -

  • taking ownership of the files, which works. Doesn't do anything for me.
  • Adding full control to everyone on the files.
  • I go to File Properties > Advanced > Details (under encryption) > Users who can access this file. The only user is administrator@localcomputername, and there is a cert number. I try adding a new cert, I don't have permission.

I don't have permission to:

  • Decrypt the file (access is denied).
  • Copy the file (to another computer) - access denied.

I am totally stumped and this VM is a production machine and needs to get up right now.

Does anyone have any ideas?

© Super User or respective owner

Related posts about security

Related posts about encryption