EFS - copy without encryption



dejanr
07-09-2005, 11:39 PM
I used EFS to protect some sensitive data on my desktop PC. I exported
certificates and all that, but still feel insecure about this encryption
thing. I would like to make an occasional backup of files without encryption
and save them in the secure place in their basic form.

I use a rack hard disk for backup. However, when I backup data, the backup
is also encrypted.

The best I could think of was to format the backup disk with FAT32 and then
use XCOPY /G command.

Is there a way to copy files to the NTFS partition and to remove encryption
while coping, so that the files on the target drive are not encrypted?

Kerry Brown
07-09-2005, 11:39 PM
"dejanr" <dejanr@discussions.microsoft.com> wrote in message
news:F2756D3C-D9A5-4B6E-8737-858D006A18D6@microsoft.com...
>I used EFS to protect some sensitive data on my desktop PC. I exported
> certificates and all that, but still feel insecure about this encryption
> thing. I would like to make an occasional backup of files without
> encryption
> and save them in the secure place in their basic form.
>
> I use a rack hard disk for backup. However, when I backup data, the backup
> is also encrypted.
>
> The best I could think of was to format the backup disk with FAT32 and
> then
> use XCOPY /G command.
>
> Is there a way to copy files to the NTFS partition and to remove
> encryption
> while coping, so that the files on the target drive are not encrypted?

XCOPY then CIPHER. You can write a cmd file to do it.

Kerry

dejanr
07-09-2005, 11:39 PM
Thank you, I had the same idea. The command is something like:

cipher /i /a /d /s:h:\diskd

It works, but not always, sometimes after many decryptions and encryptions
you get a message "this file cannot be encrypted" and xcopy wouldn't copy the
file even with the /G switch.

Even without this bug, it takes time to decrypt long files and it is a real
waste, as there must be a way to do the decryption while copying.

In other words, there must be a way to somehow declare the complete volume
with "do not encrypt anything on this disk". I just don't know how.

Kerry Brown
07-09-2005, 11:39 PM
"dejanr" <dejanr@discussions.microsoft.com> wrote in message
news:92B27A54-BA49-4D67-84CD-4319CD1ED988@microsoft.com...
> Thank you, I had the same idea. The command is something like:
>
> cipher /i /a /d /s:h:\diskd
>
> It works, but not always, sometimes after many decryptions and encryptions
> you get a message "this file cannot be encrypted" and xcopy wouldn't copy
> the
> file even with the /G switch.
>
> Even without this bug, it takes time to decrypt long files and it is a
> real
> waste, as there must be a way to do the decryption while copying.
>
> In other words, there must be a way to somehow declare the complete volume
> with "do not encrypt anything on this disk". I just don't know how.

I don't know of any way to do it.

Kerry

dejanr
07-09-2005, 11:39 PM
> I use a rack hard disk for backup. However, when I backup data, the backup
> is also encrypted.
>
> The best I could think of was to format the backup disk with FAT32 and then
> use XCOPY /G command.
>
> Is there a way to copy files to the NTFS partition and to remove encryption
> while coping, so that the files on the target drive are not encrypted?

Huh, I am usually not THIS stupid :))

The solution is trivial - just do not use any Microsoft copy method (drag
and drop, copy/past, copy, xcopy, backup etc.) to transfer files. When I copy
the encrypted file to other NTFS volume using Total Commander, the copy is
not encrypted :)

Does anybody know some alternative xcopy.exe program with parameters for
copying only files with archive attribute set, resetting this attribute etc?

Kerry Brown
07-09-2005, 11:39 PM
"dejanr" <dejanr@discussions.microsoft.com> wrote in message
news:ECF39019-D703-480F-8BBE-4133A5A71503@microsoft.com...
>> I use a rack hard disk for backup. However, when I backup data, the
>> backup
>> is also encrypted.
>>
>> The best I could think of was to format the backup disk with FAT32 and
>> then
>> use XCOPY /G command.
>>
>> Is there a way to copy files to the NTFS partition and to remove
>> encryption
>> while coping, so that the files on the target drive are not encrypted?
>
> Huh, I am usually not THIS stupid :))
>
> The solution is trivial - just do not use any Microsoft copy method (drag
> and drop, copy/past, copy, xcopy, backup etc.) to transfer files. When I
> copy
> the encrypted file to other NTFS volume using Total Commander, the copy is
> not encrypted :)
>
> Does anybody know some alternative xcopy.exe program with parameters for
> copying only files with archive attribute set, resetting this attribute
> etc?

LOL no idea it was that easy.

Kerry


EFS - copy without encryption