Better encrypting files

  • Thread starter Thread starter TC2
  • Start date Start date
T

TC2

I'd like to secure the files on our company president's laptop. Encryption
seem to be the way to go to prevent, for instance, someone removing his HD
and putting it in another system as a 2nd drive and just reading the data.
But XP encyption can be beaten just by reseting the logon password and you
have access to all the files. I need something as easy as XP encryption but
which forces the user to enter the encryption password once per logon. Any
ideas?

Thanks,
Tom
 
TC2 said:
I'd like to secure the files on our company president's laptop. Encryption
seem to be the way to go to prevent, for instance, someone removing his HD
and putting it in another system as a 2nd drive and just reading the data.
But XP encyption can be beaten just by reseting the logon password and you
have access to all the files. I need something as easy as XP encryption
but
which forces the user to enter the encryption password once per logon. Any
ideas?

Thanks,
Tom
Click to expand...

TC2,

Please read an understand more fully the implications of an administrator
"resetting" a users password to gain access to their account.
This is covered in the Help and Support center.
Basically if an admin resets an end users password that will NOT provide
them access to the end users files if they logon as that user.
You need a deeper understanding of EFS and the impact of the admin account
and recovery agent.
It will suffice for your needs but before using it you need to do some more
reading around the subject.

--

Regards,

Mike
--
Mike Brannigan [Microsoft]

This posting is provided "AS IS" with no warranties, and confers no
rights

Please note I cannot respond to e-mailed questions, please use these
newsgroups
 
As an addition to Mike's advice, see:

http://www.microsoft.com/windowsxp/using/security/data/default.mspx

You'll find a number of articles there that will help you to understand the EFS part of the Windows XP file system.

As a matter of fact, if you change the user's password from another account, or via some brute force method, no one will be able to access the encrypted files, not even the user they belonged to.
 
TC2 said:
I'd like to secure the files on our company president's laptop. Encryption
seem to be the way to go to prevent, for instance, someone removing his HD
and putting it in another system as a 2nd drive and just reading the data.
But XP encyption can be beaten just by reseting the logon password and you
have access to all the files. I need something as easy as XP encryption but
which forces the user to enter the encryption password once per logon. Any
ideas?
Click to expand...
Hi

SafeGuard Easy is an option (it is able to encrypt the
complete hard disk and it asks for the encryption password
at bootup of the computer):

http://www.utimaco.com/indexmain.html

We are using this product for local hard disk encryption on all
laptops, and we are very satisfied with the product.
 
Oh.

Tom


As an addition to Mike's advice, see:

http://www.microsoft.com/windowsxp/using/security/data/default.mspx

You'll find a number of articles there that will help you to understand the
EFS part of the Windows XP file system.

As a matter of fact, if you change the user's password from another account,
or via some brute force method, no one will be able to access the encrypted
files, not even the user they belonged to.
 
Back
Top