Re: Security of Windows XP for remote users



You need 3rd party software to encrypt the whole hard drive. With the built in encryption, EFS, the key to decrypt is stored in the user profile. If the profile is encrypted it can't be read.

--
Kerry Brown
MS-MVP Windows - Shell/User
www.vistahelp.ca

"Track read messages" <Trackreadmessages@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:E46FC343-5582-4AA9-80AF-F60437DA6476@xxxxxxxxxxxxxxxx
Thanks for your reply. Can you please let me know how can I encrypt the
entire HD? Do I have to do it folder by folder?
K.

"sgopus" wrote:

If someone can get physical access to the computer, their are many ways to
either bypass a password, or delete it and get access to the data, unless you
encrypt the entire HD

"Track read messages" wrote:

> Dear colleagues,
>
> We have lots of remote users in our company and they travel a lot > within our
> branch offices. Imagine, if during these trips their laptops are stolen > or
> the flight company simply lose them.
> Does anyone know about any features of Windows XP that can be > implemented to
> avoid the use of programs such as Microsoft Key
> (http://www.lostpassword.com/windows-xp-2000-nt.htm)?
> Microsoft Key is a program to reset Windows 2003 / XP / 2000 / NT > security
> if Administrator password, secure boot password or key disk is lost.
>
> Looking forward to hear from you.
> Katia Schneider
>
>

.



Relevant Pages

  • Re: Encrypt profile directory
    ... You should not encrypt the whole user profile because the user's private key ... folder or appropriate subfolder if you need to encrypt emails. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: using efs
    ... EFS does not support encryption of the user profile. ... > I would like to use win2k's built-in file encryption efs to encrypt the my ... > documents folder on my laptop. ...
    (microsoft.public.win2000.security)
  • Re: deleted user remains
    ... to encrypt the file, i am rigtht click, properties, advanced, "encrypt ... properties/advanced - user profile settings, ... account "User 1", encryt it, and deny other users access. ... the users that can access are local administrators. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: user does not have acces privileges
    ... Well what happens is when you encrypt a file with EFS a certificate and ... private key is created for you and stored in your user profile. ... reinstalled XP if you formatted your system drive then your EFS ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS for the entire user profile
    ... It is not possible because the user profile contains the EFS private key in ... folders that have data that you want to secure such as my documents folder. ... Is is possible/advisable to encrypt the entire user profile for a logged ...
    (microsoft.public.win2000.security)