Re: encyption?



Patrick Keenan wrote:
"pentium" <pentium@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:F1AEFD9B-FFF0-4278-89A9-1B51A5768A76@xxxxxxxxxxxxxxxx
this PC (winXP pro) is being used by my kid brother and sometimes his friends
will open up folders containing some pictures, we just want to password
protect some folders.

This is only possible when separate user accounts are used, as far as native XP tools are concerned.

I told him to create a guest or a 2nd account for his
friends but he doesn't want to.

As they say - too bad. Whose system is this?

If he wants to use the machine, he needs to respect it and its owners wishes. Create the new accounts for him, and password-protect him out of the others. And back up the data, because he'll probably lose it trying to get in.

Add passwords to the accounts and only give him the passwords to the *limited* accounts you want him to have. Add passwords to the Administrator account as well, and change them regularly. Don't give him full rights to the system till he demonstrates he can use them responsibly.

is there a simple way to do that without 3rd
party softwares?

No. XP Pro encryption allows full access once you're logged onto the account.

As well, note that you *must* also back up the account credentials and verify them. Changing the password from outside the account, such as from a boot/reset CD will permanently remove decrypt access to encrypted files and folders. You have to have the credentials floppy to get access, and making this floppy is NOT required when you encrypt; lots of people lose data because of this.

I have a question about the credentials floppy. My machine doesn't have a floppy drive in it, so is it possible to create the credentials disc on a CD? Sorry to but into the thread.

Later, Ray Parrish

Otherwise, you are looking at 3rd party software, and be aware that the encrypted files can probably be deleted by careless users.

If these files are are important, get them off that system.

HTH
-pk


"Malke" wrote:

pentium wrote:

you still can delete the files when zip it right?
Yes, but you can still delete encrypted files too. Perhaps you'd get more
focused answers if you tell us your situation (home or office, standalone,
Workgroup, domain member, etc.) and what your end goal is.

Malke
--
MS-MVP
Elephant Boy Computers - Don't Panic!
FAQ - http://www.elephantboycomputers.com/#FAQ





--
http://www.rayslinks.com/ Web index of human reviewed links.
<http://www.rayslinks.com/Troubleshooting%20and%20fixing%20Windows.html>
Trouble shooting and Fixing Windows
http://www.writingsoftheschizophrenic.com My poetry in web pages
.

Relevant Pages

  • Re: win2003 File Server in a Workgroup -- User Access
    ... Limit local account use of blank passwords to console logon only ... Do not allow anonymous enumerations of SAM accounts ... Also check the permissions that you set on your shared folders (give ...
    (microsoft.public.windows.server.networking)
  • Re: password expiration policy for admin and system accounts ?
    ... policy that Admins manually reset these important account passwords every ... You can still have the passwords set to never expire, ... > Privileged accounts should be the most, not the least, well guarded. ...
    (microsoft.public.security)
  • Re: password expiration policy for admin and system accounts ?
    ... policy that Admins manually reset these important account passwords every ... You can still have the passwords set to never expire, ... > Privileged accounts should be the most, not the least, well guarded. ...
    (microsoft.public.win2000.security)
  • RE: Security Logging - Passwords & Accounts
    ... Security Logging - Passwords & Accounts ... Does anybody know of any way to log changes to user & group accounts and ...
    (RedHat)
  • Antivirus programs for XP - best ones?
    ... DON'T create user accounts during setup as they will become ... Turn of transmission of passwords and user credentials in clear ... Keep your system and ALL installed applications uptodate (Microsoft ...
    (alt.computer.security)