Windows Encription
Piggy
I keep all my data on a external hard drive and I want to prevent any of the
data being read if the hard drive was stolen.
Would it be possible to have encrypted data on an external hard drive that
more than one person can read? I'm only using Win XP Pro.
:o)
Ronnie Vernon MVP
Yes, you can encrypt the data that you place on that drive. The external drive must be using the NTFS file system.
Make absolutely sure that you read up on file encryption prior to doing this. There are some pitfalls that are associated with the encryption certificates being backed up that must be avoided. When you back up the encryption certificates, they should be stored on removeable media other than the removeable drive where your encrypted backup files are stored.
Read the following articles thoroughly.
Best practices for the Encrypting File System:
http://support.microsoft.com/kb/223316
How To Encrypt a Folder in Windows XP:
http://support.microsoft.com/kb/308989
How To Encrypt a File in Windows XP:
http://support.microsoft.com/kb/307877
How To Remove File Encryption in Windows XP:
http://support.microsoft.com/kb/308993
HOW TO: Share Access to an Encrypted File in Windows XP:
http://support.microsoft.com/kb/308991
--
Ronnie Vernon
Microsoft MVP
Windows Shell/User
Ian
http://www.truecrypt.org might be what you need.
Since this relies on a password / passphrase rather than a key stored in the
userprofile, it would be more suitable for multiple users.
As with all encryption systems, beware that there is a significant risk of
losing the data if it goes pear-shaped.
Patrick Keenan
You can share encrypted files, but you may find that you have to specify
them individually (as opposed to the entire folder).
Please bear in mind that the XP encryption does work. The keys are tied to
your account at a low level, so should changes occur to your account - say,
during a re-install - you can permanently lose access to the data.
If your machine is stolen and you create a new account without being able to
import the credentials, you will have permanently lost access to your data.
If you choose to invoke encryption, be absolutely certain that you have
backed up and verified the credentials, stored a tested, extra copy in a
secure offsite location, and created a recovery agent.
So, you may also wish to consider other encryption packages that are more
portable. However, you must still be careful with the keys and regularly
verify access to the data.
HTH
-pk
Piggy
account (The one that encrypted the files) then import the encryption
certificate to all the accounts I want to have access to the files?
If this encryption certificate was securely backed up on say a CD, then
whatever happened to the computers or accounts I could always have access to
my files, and as long as the certificates where secure my files would be
safe....
:o)
"Patrick Keenan" <te...@dev.null> wrote in message
news:OrWxACls...@TK2MSFTNGP02.phx.gbl...
> "Piggy" <pi...@sty.com> wrote in message
> news:dsKdndHD5q3yvlTZ...@bt.com...
>>
>>SNIP<<