Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 5 subscribers
  • Views 13318 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Corrupt windows, need to remove safeguard client 6.0 from slave drive

Rudedawg

Hello all,

    I have found myself in the unique situation that My previously encrypted drive had gotten a windows startup corruption.  I had to slave it to another machine to decrypt the drive and do the repairs to the startup but I am facing something new now.  The drive that was giving the issues is now booting to the windows login page but it is shutting itself down after a few seconds.  I have read that it can be attributed to a corrupt local cache but I cannot get into safe mode or windows to remove the local client via control panel.  I have to connect the drive as a slave in order to work on it.  Is there a way to manually remove all parts of the local client in order for it not to shut down my machine?

Second idea I had was to re-encrypt the drive.  Will this work in order to stop it from shutting down?

Any help is greatly appreciated.

Thank you,

Rudy

:50530


This thread was automatically locked due to age.
  • 0

    Hi Rudy,

    Learning / Getting up-to-speed on Sophos products myself.  Is your version SafeGuard Easy (6.00.x), SafeGuard Enterprise, or SafeGuard Disk Encryption? (..or something else altogether?)

     For Recovery on SafeGuard Easy, I see "Uninstallation" and "Boot environment recovery options" with a variety of CAUTION type statements on "Rescue and Recovery" (RnR) media that (I believe) must have been prepared in advance of a Windows O.S. issue developing.  The information is HERE on page 74.

    One of the essentials of many full-disk encryptions is that the entire disk including the MBR is encrypted.  If you are operating in an environment where O.S. or hard drive failure is somewhat more likely, following the Recovery instructions ahead of time is CRITICAL otherwise you MUST train and coach End Users to move all valuable data off of their computer and onto a network share -- this is the easiest and cheapest form of user data & document preservation I know of.

    Best wishes, ~ Dennis

    :50542
  • 0

    Hi again Rudy,

    There are some good recovery instructions in the discussion thread HERE.

    "Data on encrypted drive, corrupted OS" (08-May-2014)

    It is on this board, a little ways down.  See the 4th post for slaving a drive to another encrypted PC instructions.

    You also have to move a Key for the failed PC onto the Host PC's object within Sophos Management Center.

    Best wishes,  ~ Dennis

    :50548
  • 0
    ABCR-TRP wrote:

    Hi again Rudy,

    There are some good recovery instructions in the discussion thread HERE.

    "Data on encrypted drive, corrupted OS" (08-May-2014)

    It is on this board, a little ways down.  See the 4th post for slaving a drive to another encrypted PC instructions.

    You also have to move a Key for the failed PC onto the Host PC's object within Sophos Management Center.

    Best wishes,  ~ Dennis

    Dennis,

    Thank you for the replies.  I already slaved the drive and was able to backup my data.  I am using sophos Enterprise.  The issue I was having was AFTER doing these steps and doing the MBR repairs the computer would get to the windows login screen and then shut down after 3-5 seconds.  I am assuming this is a corrupt local cache because I read about someone with similar symptoms from that.  I need to mark this thread closed because I unfortunately could not wait any longer and I had to do a clean format and install...  Thank you for the thoughts though! :-)

    -Rudy

    :50890
Unfiltered HTML