EFS on File Server

I have a use that has EFS encrypted files under her home folder on a network
share. efsinfo gives me the thumb print for the certificate and tells me she
is allowed to unencrypt . I cannot find this certificate in her store in
ADU+C or on her local pc using the certificates MMC. (We are using an
enterprise CA). She has several certs listed, but none with that thumb
print. I can find the EFS recovery cert under the admin account, but that
particular cert is expired. Is there anyway to unencrypt the files?

Which certificate store are you targeting using the Certificates MMC (more
specifically, are you logged on as the user)?
Do you have any designated recovery agents? Have you tried using the
built-in domain Administrator account?

hth
Marcin

"Barry Alan" <BarryAlan@discussions.microsoft.com> wrote in message
news:4F891FDF-36D9-4BE8-98EB-C132A1EC698D@microsoft.com...
>I have a use that has EFS encrypted files under her home folder on a
>network
> share. efsinfo gives me the thumb print for the certificate and tells me
> she
> is allowed to unencrypt . I cannot find this certificate in her store in
> ADU+C or on her local pc using the certificates MMC. (We are using an
> enterprise CA). She has several certs listed, but none with that thumb
> print. I can find the EFS recovery cert under the admin account, but
> that
> particular cert is expired. Is there anyway to unencrypt the files?

I had the user logged in to her computer and was looking at the personal
store.
I do have a recovery cert, but it has expired. I have tried to decrypt
using the built-in admn account, but it will not let me. I can run efsinfo
/r /c. It gives me the recovery agent, but when I match the thumbprint to
the certificate in AD, the cert has expired.

"Barry Alan" wrote:

> I have a use that has EFS encrypted files under her home folder on a network
> share. efsinfo gives me the thumb print for the certificate and tells me she
> is allowed to unencrypt . I cannot find this certificate in her store in
> ADU+C or on her local pc using the certificates MMC. (We are using an
> enterprise CA). She has several certs listed, but none with that thumb
> print. I can find the EFS recovery cert under the admin account, but that
> particular cert is expired. Is there anyway to unencrypt the files?