- EFS and File Recovery
- Use NTBACKUP to Transport Encrypted Files
- Import the DRA Private Key
- Reset Encryption Flag or Copy Contents to New File
Reset Encryption Flag or Copy Contents to New File
While logged on as the DRA, you can now open the file to verify that you have access. If you get an "access denied" error, either you did not import the key correctly, you imported the wrong key, or the user's computer was not a member of the domain.
At this point, you can either copy the contents of the file to another file that is not encrypted, or simply reset the encryption flag in the file properties. Then you can copy the file across the network to another location where the manager or authorized agent can access it.
Remove the DRA private key when you've finished recovering the file. You must be vigilant about keeping this key secure so that you do not compromise EFS throughout your domain.