Friend of mine sent me on this little project to save his dad's files.
Is there a way to decrypt files from a Windows XP system that was encrypted? I have the drive pulled and would like to access the files.
Are the files encrypted based on the password so if you know the password you can decrypt them or are there private keys in play here?
I assume I could maybe pull the password from the SAM file or would that not work if this was a network account.
This is not BitLocker. This is the Windows XP encryption system.
EDIT: I have the password. What would be the way to go about getting the key decrypted to decrypt the rest of the files?