Gerry said:
How do I password protect a specific file on my C drive? Using XP home
NT-based versions of Windows rely on permissions to dictate who can do
what with a file. These permissions are enforced only within the
instance of Windows in which the user accounts are defined. If you put
the hard drive in another box and/or boot using a different instance of
Windows, the SIDs for those accounts won't be defined under the new
instance of Windows that were created under the old instance of Windows,
which means the permissions won't be enforced because the SIDs aren't
defined. However, the SID for the Administrator account is the same
under all instances of Windows and allows that account to take
ownership.
If you don't want anyone but yourself to view the contents of a file,
you will need to encrypt it. If you use EFS included in Windows, you
will need to make sure that you don't have someone else assigned as a
recovery agent for EFS. Under Windows 2000, the Administrator was
automatically added as an EFS recovery agent (so you had to remove
Administrator from the EFS certificate). Under Windows XP, no one else
is automatically assigned as an EFS recovery agent. With EFS, only your
login can get into the contents of the encrypted file. The
Administrator can still change ownership and could even change
permissions so you can't access the file but not even the Administrator
could look inside the EFS encrypted file. If you don't backup your EFS
certificate and try to put the encrypted files under a new instance of
Windows, you won't be able to decrypt the file yourself. A new SID gets
generated when you create you new account under the new instance of
Windows. Your username does not identify your account.
File permissions help to secure *access* to files (and what functions
are allowed under that access) but are enforced only under the instance
of Windows in which those permissions were defined. EFS provides
additional security by requiring you to use the correct login
credentials to decrypt the EFS-protected file. However, changing your
login, like your password, can render the EFS-protected files unreadable
even to you.
You might want to look into using TrueCrypt (free). It does what you
want. If you later forget your password, don't bother crying to anyone
about it because no one can help you.