How do I securely delete e-mail

[Guest]

I just installed Outlook 2007 professional with business contacts. There
does not appear to be any way to securely delete e-mail. I was told by an IT
professional that this was one of the improvements. Does anyone know where
this facility might be and where instructions on how to use it are?

 

[Roady [MVP]]

What do you mean with "securely delete email"? You might want to ask the IT
guy what functionality he/she was thinking about when saying that.

 

[Guest]

What I mean is a secure algorithm like DOD or Gutman. He is not available
now, and he knew what I meant. Thank you for your reply. This is the first
time it has occured. I have Outlook 2003 by Jim Boyce. There is nothing in
there to suggest that this capability exists in 2003. Michael

What do you mean with "securely delete email"? You might want to ask the IT
guy what functionality he/she was thinking about when saying that.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

I just installed Outlook 2007 professional with business contacts. There
does not appear to be any way to securely delete e-mail. I was told by an
IT
professional that this was one of the improvements. Does anyone know
where
this facility might be and where instructions on how to use it are?

 

[Roady [MVP]]

Ah, I think he is confused with Windows Vista which has BitLocker
functionality in certain editions ;-)

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

What I mean is a secure algorithm like DOD or Gutman. He is not available
now, and he knew what I meant. Thank you for your reply. This is the
first
time it has occured. I have Outlook 2003 by Jim Boyce. There is nothing
in
there to suggest that this capability exists in 2003. Michael

What do you mean with "securely delete email"? You might want to ask the
IT
guy what functionality he/she was thinking about when saying that.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

I just installed Outlook 2007 professional with business contacts.
There
does not appear to be any way to securely delete e-mail. I was told by
an
IT
professional that this was one of the improvements. Does anyone know
where
this facility might be and where instructions on how to use it are?

 

[Guest]

I do not know much about Vista yet, but what I have read BitLocker would not
perform a secure erase. From time to time I receive email from friends that
I consider to be something I would not want on my computer in any form. I
want the capability to remove it completely. It seems that a secure erase
capability would do the job and give me peace of mind. From your response I
am guessing that there is no such capability in Outlook 2007. Thanks, Michael

Ah, I think he is confused with Windows Vista which has BitLocker
functionality in certain editions ;-)

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

What I mean is a secure algorithm like DOD or Gutman. He is not available
now, and he knew what I meant. Thank you for your reply. This is the
first
time it has occured. I have Outlook 2003 by Jim Boyce. There is nothing
in
there to suggest that this capability exists in 2003. Michael

What do you mean with "securely delete email"? You might want to ask the
IT
guy what functionality he/she was thinking about when saying that.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more

-----
I just installed Outlook 2007 professional with business contacts.
There
does not appear to be any way to securely delete e-mail. I was told by
an
IT
professional that this was one of the improvements. Does anyone know
where
this facility might be and where instructions on how to use it are?

 

[Roady [MVP]]

I still don't get your definition of "secure delete" here. If you press
Delete and remove it from your Deleted Items the message is gone. What are
you still afraid of afterwards?

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

I do not know much about Vista yet, but what I have read BitLocker would
not
perform a secure erase. From time to time I receive email from friends
that
I consider to be something I would not want on my computer in any form. I
want the capability to remove it completely. It seems that a secure erase
capability would do the job and give me peace of mind. From your response
I
am guessing that there is no such capability in Outlook 2007. Thanks,
Michael

Ah, I think he is confused with Windows Vista which has BitLocker
functionality in certain editions ;-)

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

What I mean is a secure algorithm like DOD or Gutman. He is not
available
now, and he knew what I meant. Thank you for your reply. This is the
first
time it has occured. I have Outlook 2003 by Jim Boyce. There is
nothing
in
there to suggest that this capability exists in 2003. Michael

:

What do you mean with "securely delete email"? You might want to ask
the
IT
guy what functionality he/she was thinking about when saying that.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more

-----
message
I just installed Outlook 2007 professional with business contacts.
There
does not appear to be any way to securely delete e-mail. I was told
by
an
IT
professional that this was one of the improvements. Does anyone
know
where
this facility might be and where instructions on how to use it are?

 

[Guest]

As far as I understand file storage, the flags or whatever are erased so that
the user can no longer access them, but the data remains and the disk space
is identified as available for use, but the data is not erased. That is why
when I select delete I want to have the choice of a plain deletion or a DOD
or Gutman secure erase. The difference betweed DOD and Gutman is DOD uses a
7 times overwrite and then two additional overwrites and Gutman overwrites 35
times. A bit slow, but effective. Again by the questions you have I suspect
Outlook does not have this capability. Since it does not is there any way
that the email location addresses can be passed to a secure erase program?
Thank you very much for your time, I appreciate it, sincerely, Michael

I still don't get your definition of "secure delete" here. If you press
Delete and remove it from your Deleted Items the message is gone. What are
you still afraid of afterwards?

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

I do not know much about Vista yet, but what I have read BitLocker would
not
perform a secure erase. From time to time I receive email from friends
that
I consider to be something I would not want on my computer in any form. I
want the capability to remove it completely. It seems that a secure erase
capability would do the job and give me peace of mind. From your response
I
am guessing that there is no such capability in Outlook 2007. Thanks,
Michael

Ah, I think he is confused with Windows Vista which has BitLocker
functionality in certain editions ;-)

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more

-----
What I mean is a secure algorithm like DOD or Gutman. He is not
available
now, and he knew what I meant. Thank you for your reply. This is the
first
time it has occured. I have Outlook 2003 by Jim Boyce. There is
nothing
in
there to suggest that this capability exists in 2003. Michael

:

What do you mean with "securely delete email"? You might want to ask
the
IT
guy what functionality he/she was thinking about when saying that.

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more

-----
message
I just installed Outlook 2007 professional with business contacts.
There
does not appear to be any way to securely delete e-mail. I was told
by
an
IT
professional that this was one of the improvements. Does anyone
know
where
this facility might be and where instructions on how to use it are?

 

[Billusa]

I would suggest this, but it is only a guess. Also, it is a bit time
consuming.

Download and install Eraser 5.82 -- it's free. Set it to 'pseudorandom 1
pass' for erasing unused disk space.

After your email delete, compact the Outlook store -- this will compress the
DB and (supposedly) remove the free space occupied by the messages you
deleted. The run Eraser on the folder the Outlook data store is in, using
the option to 'erase unused disk space.'

 

[Gordon]

I would suggest this, but it is only a guess. Also, it is a bit time
consuming.

Download and install Eraser 5.82 -- it's free. Set it to 'pseudorandom 1
pass' for erasing unused disk space.

After your email delete, compact the Outlook store -- this will compress
the DB and (supposedly) remove the free space occupied by the messages you
deleted. The run Eraser on the folder the Outlook data store is in, using
the option to 'erase unused disk space.'

Isn't the Op being just a TAD paranoid?

 

[Guest]

To Billusa, thank you for the information. I have been using Eraser from its
earliest and it is an excellent piece of software. Regarding your idea, I
need more specific information. Where is Outlook storage and how do I
compact it. It sounds like a great option and I would like to try it.

To Gordon, paranoia is the answer when it comes to computer security. If
you had worked the places I have worked, you would understand. If you have
other helpful suggestions or amplifiocations on what Billusa has provided,
please do.

Sincerely, Michael

 

[Billusa]

Where is Outlook storage and how do I

compact it. It sounds like a great option and I would like to try it.

Michael... you compact your pst by a right-click on Outlook Today in
shortcut list OR Personal Folders from the folders list. Select
Properties. Select 'Advanced' button. Select 'Compact now' button. Empty
'Deleted Items' before doing this.

If you have never done a compact, it could easily spend up to 10 minutes
compacting. I recommend doing a compact every couple of days if you
move/delete a lot of email. It really makes your past a lot more efficient.

The Outlook pst can be found in Docs & Settings / YourUserID / Local
Settings / Application Data / Microsoft / Outlook. If it was me, I would do
'eraser' on the Outlook folder.

Make VERY sure you have the latest Eraser build -- there was a bug in
'erasing empty space' in all versions before the latest 2. A one pass is
all that's recommended (by them) for cleansing clean space.

Have fun -- we're not watching... ;-)

 

[Guest]

Thanks for your assistance. I checked eraser and I am using 5.82. There is
not a lot to erase so I do not think it will be a problem. I will try it
tomorrow. Michael

 

[Roady [MVP]]

Sounds to me that you should make a backup of your Outlook pst-file when
walking this route.
http://www.howto-outlook.com/howto/backupanrestore.htm

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

 

[Guest]

Roady, thank you so much for reminding me of this important step. I have
learned the hardway when experimenting with anything be sure to back up
before hand. When doing almost anything with the computer be sure to back it
up. Again thanks, I had forgotten and will write it in my instruction list
from Billusa.

Sounds to me that you should make a backup of your Outlook pst-file when
walking this route.
http://www.howto-outlook.com/howto/backupanrestore.htm

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Michael... you compact your pst by a right-click on Outlook Today in
shortcut list OR Personal Folders from the folders list. Select
Properties. Select 'Advanced' button. Select 'Compact now' button.
Empty 'Deleted Items' before doing this.

If you have never done a compact, it could easily spend up to 10 minutes
compacting. I recommend doing a compact every couple of days if you
move/delete a lot of email. It really makes your past a lot more
efficient.

The Outlook pst can be found in Docs & Settings / YourUserID / Local
Settings / Application Data / Microsoft / Outlook. If it was me, I would
do 'eraser' on the Outlook folder.

Make VERY sure you have the latest Eraser build -- there was a bug in
'erasing empty space' in all versions before the latest 2. A one pass is
all that's recommended (by them) for cleansing clean space.

Have fun -- we're not watching... ;-)

 

[Billusa]

Michael... a few things...

I checked and you can only right-click and 'erase unused space' at the drive
level, not the folder level. Makes sense, because unused space as a concept
does not exist at the (logical) folder level. That folder could be in
extents across the drive, for example.

You must do it at the drive level and that will take a LOT longer. Thus,
the backup of the drive's data would be a better idea than just a backup of
the pst. Depending on your desire to keep things "clean" you could always
install another very small drive and relocate the pst there, speeding the
cleanse up.

Compressible encryption (default pst attribite, you see it on the 'compress'
dialogue box) is NOT encrypted. You could create a new pst, this time
selecting the option of 'high encryption' instead of the misnamed
'compressible encryption' and import all your stuff to it. I do not know
what kind of encryption 'high' is, but the resulting file cannot be
compressed much at all.

See here: http://blogs.msdn.com/larryosterman/archive/2005/04/19/409723.aspx
and here:
http://support.microsoft.com/default.aspx?scid=kb;en-us;829971&Product=out2003

Here is a forensics article on how someone may be able to relocate deleted
emails from a pst with the default 'compressible encryption.'
http://128.175.24.251/forensics/outlookcompencryptionsearch.htm

I guess, if you are looking for true deleting, the ideal way would be a new
'high encryption' pst on a small drive that you could cleanse-Erase
regularly!

 

[Guest]

Well, you are right a small drive for only the .pst would seem to be the
answer. I read the article you recommended and barely understood. It would
seem that any encription that allows it self to be easily read is not
encryption at all. I called the author Stephen Bunting. He does not know
whether high encryption allows this decryption or not. I told him about what
I wanted to do and tried to explain what you had recommended. He suggested
there might be a similar capability within Microsoft itself. It is a command
line capability called cipher and it allows you to do the same kind of
cleaning. It would still have to be at the drive level. He is very easy to
talk with and was willing to spend whatever time was necessary. I asked if I
might use email rather than bothering him with telephone calls. You know
where to find them if you want to correspond with him. Again thank you for
all of your time, support, and interest in this small problem. Michael

 

[Billusa]

Gotcha! The best way to see if the software tool Bunting refers to can find
an email from a pst created with 'high encryption' would be for him to try
it -- and then update that link -- or you... ;-)

'Compressible encryption' (pst default) only compesses the file -- like
WinZip -- so the contents may be scambled, but they are still "find-able."

The other alternative -- likely best for you -- would be to use Windows
encryption on the pst file. Just don't ever lose your key. And don't ever
re-install Windows WITHOUT decrypting the pst file FIRST, or the key will
not work and your are forever SOL. It's rock solid encryption.

See here:
http://www.microsoft.com/resources/...proddocs/en-us/encrypt_overview.mspx?mfr=true

Cipher (as he mentioned) is the command line execution for various NTFS
encryption commands.

 

[Roady [MVP]]

Which brings us back to the original question; I think the IT Professionall
was confused with Windows Vista's BitLocker feature as that provides
encryption on hardware level; pre-boot!

 

[Guest]

Thanks again, I quickly read the reference and bookmarked it so that I can
really read it tomorrow. It is getting late here and I am making many typos.
My first thoughts are to what was originally suggested to use the small disk
for pst only and use Erase on a schedule to wipe the available disk. Again I
really appreciate the time you all have taken and the valuable information
you have provided.

Roady, when will your books on Outlook 2007 Professional be ready? Thanks
again to both of you, sincerely, Michael

Which brings us back to the original question; I think the IT Professionall
was confused with Windows Vista's BitLocker feature as that provides
encryption on hardware level; pre-boot!

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Gotcha! The best way to see if the software tool Bunting refers to can
find an email from a pst created with 'high encryption' would be for him
to try it -- and then update that link -- or you... ;-)

'Compressible encryption' (pst default) only compesses the file -- like
WinZip -- so the contents may be scambled, but they are still "find-able."

The other alternative -- likely best for you -- would be to use Windows
encryption on the pst file. Just don't ever lose your key. And don't
ever re-install Windows WITHOUT decrypting the pst file FIRST, or the key
will not work and your are forever SOL. It's rock solid encryption.

See here:
http://www.microsoft.com/resources/...proddocs/en-us/encrypt_overview.mspx?mfr=true

Cipher (as he mentioned) is the command line execution for various NTFS
encryption commands.

 

[Roady [MVP]]

"Roady, when will your books on Outlook 2007 Professional be ready?"
No official plans or deal yet but maybe end this year. I want it to include
Service Pack 1 changes as mainstream deployment always takes off after the
first SP. I'm currently working on my master thesis (on mobility) so that
has the main priority. When the plans become more official I'll make sure I
post it on my main page ;-)

Thanks for asking!

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Thanks again, I quickly read the reference and bookmarked it so that I can
really read it tomorrow. It is getting late here and I am making many
typos.
My first thoughts are to what was originally suggested to use the small
disk
for pst only and use Erase on a schedule to wipe the available disk.
Again I
really appreciate the time you all have taken and the valuable information
you have provided.

Roady, when will your books on Outlook 2007 Professional be ready? Thanks
again to both of you, sincerely, Michael

Which brings us back to the original question; I think the IT
Professionall
was confused with Windows Vista's BitLocker feature as that provides
encryption on hardware level; pre-boot!

--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003


-----

Gotcha! The best way to see if the software tool Bunting refers to can
find an email from a pst created with 'high encryption' would be for
him
to try it -- and then update that link -- or you... ;-)

'Compressible encryption' (pst default) only compesses the file -- like
WinZip -- so the contents may be scambled, but they are still
"find-able."

The other alternative -- likely best for you -- would be to use Windows
encryption on the pst file. Just don't ever lose your key. And don't
ever re-install Windows WITHOUT decrypting the pst file FIRST, or the
key
will not work and your are forever SOL. It's rock solid encryption.

See here:
http://www.microsoft.com/resources/...proddocs/en-us/encrypt_overview.mspx?mfr=true

Cipher (as he mentioned) is the command line execution for various
NTFS
encryption commands.