Link to home
Create AccountLog in
Avatar of Frank Angelini
Frank AngeliniFlag for United States of America

asked on

Lenovo Full Disk Encryption

Hi,

I have a Lenovo Laptop for a client of mine.  Support ended in 2014.  He did not properly back-up his files and let his kids play with the laptop (how many times do we warn users of this !).  Now the Windows Registry is damaged and can't boot to Windows.  In the past I boot up with a Windows DVD and be able to run a number of tools like Automated Repair.  Now here is he problem.  None of the usual options I use will work.  It appears to be the Windows image is not mounted and able to be worked on.  I can see the files and file structure via the command prompt.  Basically the tools error out that Windows was not found on this system.

Laptop is UEFI.  In order to be able to boot to a disk in the optical drive I disabled Secure boot and enabled Legacy BIOS support.  I can now boot to a repair disk or other tool.  I want to be careful what options I change since if I am not careful

I am pretty sure nothing is working because of the FDE.  As of right now it appears my only option is to do a full system factory reset which of course will wipe out his data.  This is Windows 8.

There has to be a way to temporarily decrypt this drive so I can use a tool and go back to a System Restore Point or other methods to repair Windows.  Anyone run into this ?  Any help would be appreciated.  Let me know if you have any other questions.  Thank you.
ASKER CERTIFIED SOLUTION
Avatar of John
John
Flag of Canada image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of Shaun Vermaak
Most encryption tools allow you to disable/encrypt from safe-mode or another computer with a key or file. I have experienced this with BitLocker and decrypted drive on another computer.

What was drive encrypted with?
Avatar of Frank Angelini

ASKER

Shaun Vermaak the disk was encrypted with Lenovo's UEFI BIOS/motherboard.  It's proprietary technology.

I can't hit F8 and get to Windows Safe Mode or any other option for that matter.

This situation is looking uglier by the hour !  I thought about encrypting my drives but if I can't fix small issues like this or clone the drives for backup I am not interested !
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
I opened a command prompt window off of the Windows 8 DVD after booting to it. It's under "Advanced Tools". I could see the files and directories. I then used xcopy to save the important files to an external hard drive.

After that I transversed to C:\Windows\System32\Config directory where the registry is located. I went to the regback directory and copied all the registry hives to the directory above thus over-writing the corrupted registry hives. I rebooted.

It booted just fine. The backup hives were10 days old. This idea popped in my head while sleeping !
Are you sure the drive is encrypted?
Avatar of btan
btan

Not supposed ro see file if boot up straight from DVD as HDD is encrypted
Encrypted disk is not recoverable and needs to be rebuilt.