General Find All EFS Encrypted Files in Windows 11


  • Staff
Lock_banner.png

This tutorial will show you how to find and list all EFS encrypted files that belong to the current user on all connected NTFS local drives in Windows 10 and Windows 11.

The Encrypted File System, or EFS, provides an additional level of security for files and folders. It provides cryptographic protection of individual files on NTFS file system volumes using a public-key system.

Files or folders saved into an existing encrypted folder will automatically be encrypted by EFS.


Contents

  • Option One: Find All Encrypted Files and Output List in Command Prompt
  • Option Two: Find All Encrypted Files and Output List to Text File




Option One

Find All Encrypted Files and Output List in Command Prompt


1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Copy and paste the command below into Windows Terminal, and press Enter. (see screenshot below)

cipher /u /n /h

3 Windows will now search all NTFS local drives for all encrypted files that belong to the current user, and will output a list of them in the terminal.

List_all_EFS_encrypted_files.png





Option Two

Find All Encrypted Files and Output List to Text File


1 Open Windows Terminal, and select either Windows PowerShell or Command Prompt.

2 Copy and paste the command below you want into Windows Terminal, and press Enter. (see screenshots below)

(Command Prompt - output to "MyEncryptedFiles.txt" file on your desktop)​
cipher /u /n /h > %UserProfile%\Desktop\MyEncryptedFiles.txt

OR​

(PowerShell - output to "MyEncryptedFiles.txt" file on your desktop)​
wmic useraccount list full >"$Env:userprofile\Desktop\MyEncryptedFiles.txt"

List_all_EFS_encrypted_files_to_txt_file-1.png
List_all_EFS_encrypted_files_to_txt_file-2.png

3 Windows will now search all NTFS local drives for all encrypted files that belong to the current user, and will output a list of them to the MyEncryptedFiles.txt file created on your desktop.

List_all_EFS_encrypted_files_to_txt_file-3.png



That's it,
Shawn Brink


 

Attachments

  • Lock.png
    Lock.png
    4.1 KB · Views: 62
Last edited:
I'm psyched. I have NO EFS files. :-)
 

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22631.3447 ♦♦♦♦♦♦♦23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 4702)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?
EFS files can be created by paid Microsoft Store apps as copy protection for DLC content.
 

My Computer

System One

  • OS
    Windows 7
Back
Top Bottom