Encrypting a folder and all its contents.

[Frank Martin]

I cannot get any results from the WindowsXP pro help section
on how to encrypt files and folders.

What I want is:

A particular folder that I can encrypt, and this will
automatically encrypt all files put into it. Then to open
the folder to read the files a password would be required.

Please help, Frank

 

[Paul]

I cannot get any results from the WindowsXP pro help section
on how to encrypt files and folders.

What I want is:

A particular folder that I can encrypt, and this will
automatically encrypt all files put into it. Then to open
the folder to read the files a password would be required.

Please help, Frank

What happens if you enter "EFS" as a search term ?

If encrypting stuff, make sure you understand how the
recovery system works. The "best practices" in the Help and Support,
hints about preparing some kind of disk with the recovery key
on it.

For example, say you install WinXP Pro, and encrypt a folder.
Later, you reinstall the OS. And to your shock and horror, you
can no longer access the folder. This is the time you go
looking for the disk with the key on it.

You should also contemplate the consequences, of the files
remaining locked permanently. What would you do ? Say
your only copy of the recovery key or whatever, is lost.
Maybe you burned a DVD, with the key on it, and five months
later, the DVD got "bit rot" and the key is gone. Then, someone
reinstalls your OS. Etc. I mean, make up a horror story,
and somewhere in the world, it has probably happened.

(an overview)
http://en.wikipedia.org/wiki/Encrypting_File_System

"This led to coining of the term "delayed recycle bin",
to describe the seeming inevitability of data loss if
an inexperienced user encrypts his or her files."

HTH,
Paul

 

[David H. Lipman]

From: "Frank Martin" <[email protected]>

| I cannot get any results from the WindowsXP pro help section
| on how to encrypt files and folders.

| What I want is:

| A particular folder that I can encrypt, and this will
| automatically encrypt all files put into it. Then to open
| the folder to read the files a password would be required.

| Please help, Frank


If you want a password, put it in a ZIP file.

If you want it encrypted for one user, use EFS.

 

[Tim Meddick]

Encrypting folders in XP does not require you to enter a password to enter
them.

The 'password' is your logon password and then you will have automatic
access to encrypted folders.

However, if you change your password, you may not be warned that you will
loose ALL access to any encrypted files or folders you may have.

If you want to enter a password to gain access to some files then use
'right-click' > 'Send To' > 'Compressed (zipped) folder'

Then, once you have created your new (ZIP) file, you can password protect it
by going into it within 'Windows Explorer' and selecting 'Add a password...'
from the 'File' menu at the top.

If you want to 'encrypt' or 'decrypt' a file or folder then you will have to
enable these 'right-click' items in 'Windows Explorer'.

Enable 'Encrypt' and 'Decrypt' on 'right-click' file context menu by
copying and pasting the following into either the "Run" box on the 'Start
Menu' or into a 'Command Prompt' (dos-box) window :


reg ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v
EncryptionContextMenu /t REG_DWORD /d 1 /f


(the above command should be all on one line but may not appear so due to
line-wrap. Please ensure that the command begins with 'reg' and ends with
'/f' )

....this will show the added command on your file's and folder's context
menus, but you may need to logoff / logon to see the change.

==

Cheers, Tim Meddick, Peckham, London.

 

[Lem]

I cannot get any results from the WindowsXP pro help section
on how to encrypt files and folders.

What I want is:

A particular folder that I can encrypt, and this will
automatically encrypt all files put into it. Then to open
the folder to read the files a password would be required.

Please help, Frank

Do *NOT* use Windows Encrypting File Service to encrypt anything until
you have read and become familiar with -- and commit to follow -- all of
the Best practices for the Encrypting File System:
http://support.microsoft.com/kb/223316

In particular, read and follow the advice under "Why you must back up
your certificates," or eventually you WILL be sorry. The article means
what it says: "there is no way to recover data that has been encrypted
with a corrupted or missing certificate."

--
Lem -- MS-MVP

To the moon and back with 2K words of RAM and 36K words of ROM.
http://en.wikipedia.org/wiki/Apollo_Guidance_Computer
http://history.nasa.gov/afj/compessay.htm

 

[Patrick Keenan]

I cannot get any results from the WindowsXP pro help section on how to
encrypt files and folders.

What I want is:

A particular folder that I can encrypt, and this will automatically
encrypt all files put into it. Then to open the folder to read the files
a password would be required.

Please help, Frank

The Windows Encrypting File System makes it extremely easy to encrypt files
and folders. It's a couple of mouse clicks.

It also makes it extremely easy to permanently lose access to those files
and folders.

When you tell Windows that a particular folder should be encrypted, a
too-frequently-neglected option - and this should NOT be optional at all -
is to back up the account credentials or set up a Recovery Agent.

If you do not back those up, and anything happens to the account profile
(including resetting the password from outside the account), you will never
be able to recover the files.

EFS does not permit you to add a separate password to the encrypted folders.
Anyone who enters the account will have clear access to the files.

HTH
-pk

 

[Anthony Buckland]

The Windows Encrypting File System makes it extremely easy to encrypt
files and folders. It's a couple of mouse clicks.

It also makes it extremely easy to permanently lose access to those files
and folders.

When you tell Windows that a particular folder should be encrypted, a
too-frequently-neglected option - and this should NOT be optional at all -
is to back up the account credentials or set up a Recovery Agent.

If you do not back those up, and anything happens to the account profile
(including resetting the password from outside the account), you will
never be able to recover the files.

EFS does not permit you to add a separate password to the encrypted
folders. Anyone who enters the account will have clear access to the
files.
...

Making the whole exercise useless if, for instance, you want
to protect a laptop's data against the risk of someone gaining
access to the laptop and then the data (this problem is a common
one for businesses that must allow their employees to
transport laptops with proprietary data on them). If, that is, I
understand this conversation correctly.

 

[Patrick Keenan]

Making the whole exercise useless if, for instance, you want
to protect a laptop's data against the risk of someone gaining
access to the laptop and then the data (this problem is a common
one for businesses that must allow their employees to
transport laptops with proprietary data on them). If, that is, I
understand this conversation correctly.

If the account is properly password protected and the laptop is stolen, the
encrypted data is instantly rendered permanently unavailable at the moment
that the account password is reset or removed from outside the account (for
example with a password reset disk).

Encrypted data is not viewable from other accounts, so if the Administrator
account for some reason had no password, the data would not be viewable.

If the password was easily guessable or taped to the keyboard, well, bets
are off.

-pk

 

[John Wunderlich]

I cannot get any results from the WindowsXP pro help section
on how to encrypt files and folders.

What I want is:

A particular folder that I can encrypt, and this will
automatically encrypt all files put into it. Then to open
the folder to read the files a password would be required.

Please help, Frank

The best solution here is to install the freeware "Truecrypt". It has a
good history and pedigree.

EFS has a lot of disadvantages including lack of portability and lack
of control of encryption keys (without searching for and reading the
fine print). EFS is affectionately known as a Delayed Recycle Bin.

Truecrypt's only deviation from your requirements is that it creates a
virtual disk instead of a folder... which I actually prefer (I don't
often accidentally put wrong data in wrong place).

<http://www.truecrypt.org>

HTH,
John

 

[JaimeZX]

Frank, check out TrueCrypt.
http://www.truecrypt.org/

Sounds more up your alley. It's *slightly* more complicated than what you're
asking for, but it should get the job done. Basically it creates a file of a
user-defined size, say 100MB; then mounts it as a drive when you type your
password. The file itself is encrypted to a user-specified level. So when you
shut down the computer or unmount the drive, it goes back to being a 100MB
encrypted file. Then you're only limited by the complexity of the password
you choose.

I use it for my financial and other personal documents.

Regards,

Jim

 

[Richard]

I cannot get any results from the WindowsXP pro help section on how to
encrypt files and folders.

What I want is:

A particular folder that I can encrypt, and this will automatically
encrypt all files put into it. Then to open the folder to read the files
a password would be required.

Please help, Frank

Hi Frank,

No results? That's strange. Have you modified the search "Options" (on
toolbar) from the default settings? I got 40 results by entering
"encryption" in my XP-pro Help search box. (Some results were not related to
files and folders.) Here are some topic phrases that you can copy and paste
into the search box that seem to cover some of your questions:

Storing Data Securely
Encrypting File System overview
Best practices: File encryption
Back up default recovery keys to a floppy disk
Encrypt a file or folder
Recover an encrypted file or folder without the file encryption certificate
Creating strong passwords

(Couldn't find a way to both encrypt and password protect folders.)

Hope that helps. --Richard
- - -

P.S. It's Story Time kiddies! "Tails from the unCrypt!"

[This just happened when I decided to try a few things.]

First, I created a new folder, named it "TestEncrypt", right-clicked it,
chose Properties, clicked Advanced, put checkmark in "Encrypt contents to
secure data", (noticed "Details" button is grayed out,) clicked OK, opened
that folder, created a Text document, named it "MyTest.txt", opened that,
boldly typed "This is a test!", save/closed it, closed TestEncrypt folder,
pressed F3 to activate search from Parent folder of TestEncrypt, phrase
searched for "this is a test", it found "MyTest.txt", and displayed in
Search Results window in green letters, instead of default black. I was able
to double-click open it. Closed it. Right-clicked "MyTest.txt", clicked
Properties, clicked Advanced, it also had checkmark by "Encrypt contents to
secure data", clicked Details, upper box is labeled "Users Who can
Transparently Access This File", (and my User Name, and a "Certificate
Thumbprint", with 40 characters, space-separated into groups of 4,) clicked
Cancel, Cancel, Cancel. Noticed that the TestEncrypt folder name is green
text instead of black like other folders and files.

None of the various dialog boxes had an option to add a password. Apparently
you can add a password to a compressed zip folder, but not an encrypted
folder, and you can't encrypt a compressed folder.

I selected TestEncrypt, and tried "Delete", there was a pause, then message,
"Error Deleting File or Folder. Cannot delete TestEncrypt: It is being used
by another person or program. Close any programs that might be using the
file and try again. [OK]" Clicked OK. Opened test folder again, selected
MyTest.txt, pressed Delete key, gone! pressed ctrl+Z to bring it back from
recycle bin, and shift-deleted it into oblivion. Closed folder. Noticed
mouse pointer over TestEncrypt tooltip said, "Folder is empty". Tried Delete
again, verified that there was exactly 5 (Mississippi) seconds delay before
error message, clicked OK. Hmmm...

Right-clicked TestEncrypt, Properties, Advanced, un-checked "Encrypt..."
option. Clicked OK. Message appeared: "Error Applying Attributes. An error
occurred applying attributes to the file: C:\Parent\TestEncrypt The process
cannot access the file because it is being used by another process." Clicked
Retry. Same result. Clicked Ignore. No go. Noticed Property dialog had gray
checkmark in Read Only, unchecked, tried unchecking Encrypt again, No go.
Oh oh! This is getting serious!

(Maybe I need to put on an "I [heart] Microsoft" T-shirt?

Back to WinXPpro Help, to read the Struck-Shuns, searched "decrypt", clicked
"Decrypt a file or folder", and this appeared:

[begin quote:]
To decrypt a file or folder
1. Open Windows Explorer.
2. Right-click the encrypted file or folder, and then click Properties.
3. On the General tab, click Advanced.
4. Clear the Encrypt contents to secure data check box.

Note
....
When you decrypt a folder, you are asked if you want all files and
subfolders within the folder to be decrypted as well. If you choose to
decrypt the folder only, the encrypted files and folders within the
decrypted folder remain encrypted. However, new files and folder that you
create within the decrypted folder will not be automatically encrypted.
[:end quote]

I was not "asked" that. Opened TestEncrypt, created "New Text Document.txt",
closed folder, right-click, Properties, Advanced, unchecked, OK, OK,
Whoopee! ... the "asked" message appeared. Default checked option says
"Apply changes to this folder, subfolders and files", clicked OK.

No, No, No! There's that pesky "Error Applying Attributes" message again,
"Ignore" it already! Tried to rename "TestEncrypt" to "TestEncryptMe",
'nuther error msg... being used by another person or program. What other
person is here besides me? What sneaky programs might be using the file
besides Windows Explorer? (Grrr... bad Windows, bad bad!

Maybe if I try Command Prompt? C:\Parent>del TestEncrypt
(Y/N? Yes I'm sure! I always know exactly what I'm doing, don't I?

That didn't work. Back to Parent folder view. Opened TestEncrypt,
ALT-CTRL-DEL to Task Manager, End Task, all folders closed, reopened to
Parent folder, tried uncheck Encrypt thingy again, Wow! it worked! Green
changed to black, so I quickly held the shift key and pounced on the Delete
key, and punched absolutely sure [Y] key, and SO totally obliviated it!
(Good Rid Dance and Prance!

Thus endeth the lesson. FWIW. --Richard

 

[Frank Martin]

The best solution here is to install the freeware
"Truecrypt". It has a
good history and pedigree.

EFS has a lot of disadvantages including lack of
portability and lack
of control of encryption keys (without searching for and
reading the
fine print). EFS is affectionately known as a Delayed
Recycle Bin.

Truecrypt's only deviation from your requirements is that
it creates a
virtual disk instead of a folder... which I actually
prefer (I don't
often accidentally put wrong data in wrong place).

<http://www.truecrypt.org>

HTH,
John

Thanks, I think I will go this way.

 

[Frank Martin]

I cannot get any results from the WindowsXP pro help
section on how to
encrypt files and folders.

What I want is:

A particular folder that I can encrypt, and this will
automatically
encrypt all files put into it. Then to open the folder
to read the files
a password would be required.

Please help, Frank

Hi Frank,

No results? That's strange. Have you modified the search
"Options" (on
toolbar) from the default settings? I got 40 results by
entering
"encryption" in my XP-pro Help search box. (Some results
were not related to
files and folders.) Here are some topic phrases that you
can copy and paste
into the search box that seem to cover some of your
questions:

Storing Data Securely
Encrypting File System overview
Best practices: File encryption
Back up default recovery keys to a floppy disk
Encrypt a file or folder
Recover an encrypted file or folder without the file
encryption certificate
Creating strong passwords

(Couldn't find a way to both encrypt and password protect
folders.)

Hope that helps. --Richard
- - -

P.S. It's Story Time kiddies! "Tails from the unCrypt!"

[This just happened when I decided to try a few things.]

First, I created a new folder, named it "TestEncrypt",
right-clicked it,
chose Properties, clicked Advanced, put checkmark in
"Encrypt contents to
secure data", (noticed "Details" button is grayed out,)
clicked OK, opened
that folder, created a Text document, named it
"MyTest.txt", opened that,
boldly typed "This is a test!", save/closed it, closed
TestEncrypt folder,
pressed F3 to activate search from Parent folder of
TestEncrypt, phrase
searched for "this is a test", it found "MyTest.txt", and
displayed in
Search Results window in green letters, instead of default
black. I was able
to double-click open it. Closed it. Right-clicked
"MyTest.txt", clicked
Properties, clicked Advanced, it also had checkmark by
"Encrypt contents to
secure data", clicked Details, upper box is labeled "Users
Who can
Transparently Access This File", (and my User Name, and a
"Certificate
Thumbprint", with 40 characters, space-separated into
groups of 4,) clicked
Cancel, Cancel, Cancel. Noticed that the TestEncrypt
folder name is green
text instead of black like other folders and files.

None of the various dialog boxes had an option to add a
password. Apparently
you can add a password to a compressed zip folder, but not
an encrypted
folder, and you can't encrypt a compressed folder.

I selected TestEncrypt, and tried "Delete", there was a
pause, then message,
"Error Deleting File or Folder. Cannot delete TestEncrypt:
It is being used
by another person or program. Close any programs that
might be using the
file and try again. [OK]" Clicked OK. Opened test folder
again, selected
MyTest.txt, pressed Delete key, gone! pressed ctrl+Z to
bring it back from
recycle bin, and shift-deleted it into oblivion. Closed
folder. Noticed
mouse pointer over TestEncrypt tooltip said, "Folder is
empty". Tried Delete
again, verified that there was exactly 5 (Mississippi)
seconds delay before
error message, clicked OK. Hmmm...

Right-clicked TestEncrypt, Properties, Advanced,
un-checked "Encrypt..."
option. Clicked OK. Message appeared: "Error Applying
Attributes. An error
occurred applying attributes to the file:
C:\Parent\TestEncrypt The process
cannot access the file because it is being used by another
process." Clicked
Retry. Same result. Clicked Ignore. No go. Noticed
Property dialog had gray
checkmark in Read Only, unchecked, tried unchecking
Encrypt again, No go.
Oh oh! This is getting serious!

(Maybe I need to put on an "I [heart] Microsoft" T-shirt?


Back to WinXPpro Help, to read the Struck-Shuns, searched
"decrypt", clicked
"Decrypt a file or folder", and this appeared:

[begin quote:]
To decrypt a file or folder
1. Open Windows Explorer.
2. Right-click the encrypted file or folder, and then
click Properties.
3. On the General tab, click Advanced.
4. Clear the Encrypt contents to secure data check box.

Note
...
When you decrypt a folder, you are asked if you want all
files and
subfolders within the folder to be decrypted as well. If
you choose to
decrypt the folder only, the encrypted files and folders
within the
decrypted folder remain encrypted. However, new files and
folder that you
create within the decrypted folder will not be
automatically encrypted.
[:end quote]

I was not "asked" that. Opened TestEncrypt, created "New
Text Document.txt",
closed folder, right-click, Properties, Advanced,
unchecked, OK, OK,
Whoopee! ... the "asked" message appeared. Default checked
option says
"Apply changes to this folder, subfolders and files",
clicked OK.

No, No, No! There's that pesky "Error Applying Attributes"
message again,
"Ignore" it already! Tried to rename "TestEncrypt" to
"TestEncryptMe",
'nuther error msg... being used by another person or
program. What other
person is here besides me? What sneaky programs might be
using the file
besides Windows Explorer? (Grrr... bad Windows, bad bad!


Maybe if I try Command Prompt? C:\Parent>del TestEncrypt
(Y/N? Yes I'm sure! I always know exactly what I'm doing,
don't I?

That didn't work. Back to Parent folder view. Opened
TestEncrypt,
ALT-CTRL-DEL to Task Manager, End Task, all folders
closed, reopened to
Parent folder, tried uncheck Encrypt thingy again, Wow! it
worked! Green
changed to black, so I quickly held the shift key and
pounced on the Delete
key, and punched absolutely sure [Y] key, and SO totally
obliviated it!
(Good Rid Dance and Prance!

Thus endeth the lesson. FWIW. --Richard

Seems complicated. The program I am using at the moment is
"PC-Encrypt" which does the job I want, but it is very slow
for big files such as movies.

Also, this one will not automatically encrypt a file when it
is transferred to an already-encrypted file.

Regards, Frank