Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a Server 2008 file server, and and while here an employee encrypted several files, and has now since left to seek greener pastures.

I want to decrypt the files, so others can access them. Can I simply change the account password, then login as the user, and uncheck the encryption? Or will doing so destroy the encryption keys, rendering the files forever lost?

If logging in with a new password isn't going to work, how can I go about decrypting the files? The employees user account was a domain account, and I have domain administrator access.

I am not sure what method of encryption is being utilized, beyond the File Properties > Advanced > Encrypt contents to secure data checkbox, and the filenames are green.


share|improve this question
Call the person and tell them to provide their password. Setup group policies to prevent encryption, so things cannot be encrypted in the future. Or plan, and setup a Recovery Agent. – Zoredache Feb 6 '13 at 1:28
Somewhat useful information can be found here.… – Zoredache Feb 6 '13 at 1:29

Use the recovery agent account, usually local admin or domain admin account.

Check out this answer over on StackOverflow

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.