Hello. I'm sort of in a pickle and need some help. I am the system administrator for a small organization and management wants to be able to log on and access data from a recently terminated employee's hard drive. I have the laptop in my physical possession and it is encrypted using SES PGP. I load the PGP client on the desktops so the users can synchronize their Windows passwords with the PGP encryption password. So users are prompted to enter their password on boot to decrypt, then again once the drive is decrypted and the OS login splash screen pops up.
So, the user is gone, the laptop is not on the domain anymore, and the default local admin password is not working. Normally this would be an incredibly easy fix. I'd use MS Dart, KonBoot, BackTrack, or something simliar to crack the admin password and be on my way. Problem is, I can't find a way to decrypt the hard drive while also allowing myself to boot to removable media. I can boot to a USB, enter into MS Dart, but since the drive is still encrypted it doesn't show up as an available volume to use.
How can I decrypt the hard drive, then boot into DART (or anything like DART)? As soon as I enter the Token I retrieve from the SES Management server for this HD, the system boots straight into Windows. If it would allow me the option to boot into a USB after the decryption process this could be solved.
If what I am trying to do is not possible, would someone recommend taking the drive out and hooking it up as a secondary drive to another working Windows laptop and running a decryption tool that way?