Encryption??

[Ken]

I use XP Pro with all updates. A while ago I encrypted some
sensitive folders and was surprised that I wasn't asked for
a key to start the encryption - I thought that's the way
encryption/decryption works - the only effect was that Win
Explorer changed the color of the folder.

I have never created a user ID for myself since I'm the only
one that uses the system. I now want to create one because
others will using it.
that raises some questions:

- Will my encrypted folders be hidden or unaccessible to
other users? For that matter, will I be able to access since
I encrypted them as an Administrator?

- If I carry my data to another system via a key fob
will it be encrypted? and if so how do I decrypt without a key?

 

[GreenieLeBrun]

I use XP Pro with all updates. A while ago I encrypted some
sensitive folders and was surprised that I wasn't asked for
a key to start the encryption - I thought that's the way
encryption/decryption works - the only effect was that Win
Explorer changed the color of the folder.

I have never created a user ID for myself since I'm the only
one that uses the system. I now want to create one because
others will using it.
that raises some questions:

- Will my encrypted folders be hidden or unaccessible to
other users? For that matter, will I be able to access since
I encrypted them as an Administrator?

- If I carry my data to another system via a key fob
will it be encrypted? and if so how do I decrypt without a key?

Read the following CAREFULLY. You could endup losing access to those folders
if you do not backup your key etc.

The Encrypting File System
http://www.microsoft.com/technet/security/topics/cryptographyetc/efs.mspx

Best practices for the Encrypting File System
http://support.microsoft.com/kb/223316/en-us

How to back up the recovery agent Encrypting File System (EFS) private key
in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/kb/241201

How To Encrypt a Folder in Windows XP
http://support.microsoft.com/?id=308989

How To Remove File Encryption in Windows XP
http://support.microsoft.com/?id=308993

How To Encrypt a File in Windows XP
http://support.microsoft.com/?id=307877

HOW TO: Share Access to an Encrypted File in Windows XP
http://support.microsoft.com/?id=308991

 

[Ken]

Read the following CAREFULLY. You could endup losing access to those folders
if you do not backup your key etc.

The Encrypting File System
http://www.microsoft.com/technet/security/topics/cryptographyetc/efs.mspx

Best practices for the Encrypting File System
http://support.microsoft.com/kb/223316/en-us

How to back up the recovery agent Encrypting File System (EFS) private key
in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/kb/241201

How To Encrypt a Folder in Windows XP
http://support.microsoft.com/?id=308989

How To Remove File Encryption in Windows XP
http://support.microsoft.com/?id=308993

How To Encrypt a File in Windows XP
http://support.microsoft.com/?id=307877

HOW TO: Share Access to an Encrypted File in Windows XP
http://support.microsoft.com/?id=308991

Thx for the leads.

 

[Ken]

Read the following CAREFULLY. You could endup losing access to those folders
if you do not backup your key etc.

The Encrypting File System
http://www.microsoft.com/technet/security/topics/cryptographyetc/efs.mspx

Best practices for the Encrypting File System
http://support.microsoft.com/kb/223316/en-us

How to back up the recovery agent Encrypting File System (EFS) private key
in Windows Server 2003, in Windows 2000, and in Windows XP
http://support.microsoft.com/kb/241201

How To Encrypt a Folder in Windows XP
http://support.microsoft.com/?id=308989

How To Remove File Encryption in Windows XP
http://support.microsoft.com/?id=308993

How To Encrypt a File in Windows XP
http://support.microsoft.com/?id=307877

HOW TO: Share Access to an Encrypted File in Windows XP
http://support.microsoft.com/?id=308991

I've reviewed these documents and don't see a specific
mention of one my questions.
To prevent others from seeing files as I see it I must

1) - decrypt all files
2) - create my Win user ID
3) - encrypt the appropriate files while signed on to my new
user ID

Does that sound right?

 

[GreenieLeBrun]

I've reviewed these documents and don't see a specific
mention of one my questions.
To prevent others from seeing files as I see it I must

1) - decrypt all files
2) - create my Win user ID
3) - encrypt the appropriate files while signed on to my new
user ID

Does that sound right?

I don't use the EFS myself so I can not say. You may be able to get an
answer if you post your question to the microsoft.public.security news
group.

 

[Poprivet]

I've reviewed these documents and don't see a specific
mention of one my questions.
To prevent others from seeing files as I see it I must

1) - decrypt all files
2) - create my Win user ID
3) - encrypt the appropriate files while signed on to my new
user ID

Does that sound right?

Yup, and you should also create your encryption key and store it somewhere
safe, NOT on that drive, in case you ever need it. I know it's part of the
reading you had in the links.

Pop`