Windows – How to decrypt files on a Windows domain, without user account password

domainencryptionpasswordwindows

I have a Server 2008 file server, and and while here an employee encrypted several files, and has now since left to seek greener pastures.

I want to decrypt the files, so others can access them. Can I simply change the account password, then login as the user, and uncheck the encryption? Or will doing so destroy the encryption keys, rendering the files forever lost?

If logging in with a new password isn't going to work, how can I go about decrypting the files? The employees user account was a domain account, and I have domain administrator access.

I am not sure what method of encryption is being utilized, beyond the File Properties > Advanced > Encrypt contents to secure data checkbox, and the filenames are green.

Thanks

Best Answer

Use the recovery agent account, usually local admin or domain admin account.

Check out this answer over on StackOverflow

Related Topic