How to get a definate answer from Microsoft on bitlocker?

[Andy]

I need to get the 100% right answer to a question which only Microsoft can
provide. Anyone know a MS presales email address which is answered?

The problem i have:

Since having some notebooks stolen we are interested in upgrading all our
notebooks and pc's to vista ulitmate so we can enable bitlocker.
The problem is all our hardisks have partitions and we are unsure if
bitlocker will lock all the partitions or only the OS drive i.e. C:/
Whoever we speak to gives us different opinions.

Example of 2 respected sites giving different answers:

=================================================================================
http://www.windows-vista-update.com/Bitlocker_Drive_Encryption.html
show lots of partitions allowed to be enabled

http://www.vnunet.com/personal-computer-world/features/2166361/vista-encrypted-disks
However, if you activate the Bitlocker Drive Encryption then you must bear
in mind that it does not protect the entire hard disk. Bitlocker only
encrypts the partition on which Windows Vista is installed. If data-only
partitions exist, they will remain unprotected.

 

[MICHAEL]

BitLocker will only encrypt Vista's volume.


-Michael

 

[MICHAEL]

http://technet2.microsoft.com/Windo...8ae6-4957-b031-97b4d762cf311033.mspx?mfr=true

<quote>
BitLocker Drive Encryption is an integral new security feature in the Windows Vista operating
system that provides considerable protection for the operating system on your computer and data
stored on the operating system volume.
</quote>


-Michael

 

[Malke]

I need to get the 100% right answer to a question which only Microsoft can
provide. Anyone know a MS presales email address which is answered?

The problem i have:

Since having some notebooks stolen we are interested in upgrading all our
notebooks and pc's to vista ulitmate so we can enable bitlocker.
The problem is all our hardisks have partitions and we are unsure if
bitlocker will lock all the partitions or only the OS drive i.e. C:/
Whoever we speak to gives us different opinions.

Example of 2 respected sites giving different answers:

=================================================================================
http://www.windows-vista-update.com/Bitlocker_Drive_Encryption.html
show lots of partitions allowed to be enabled

http://www.vnunet.com/personal-computer-world/features/2166361/vista-encrypted-disks
However, if you activate the Bitlocker Drive Encryption then you must bear
in mind that it does not protect the entire hard disk. Bitlocker only
encrypts the partition on which Windows Vista is installed. If data-only
partitions exist, they will remain unprotected.

Here is a link to MS TechNet's BitLocker FAQ page:

http://tinyurl.com/3y9frd

It looks extremely thorough and should answer your questions. If you
still need more questions answered, then I would contact Microsoft tech
support directly.

http://www.microsoft.com/technet/contactus.mspx


Malke

 

[Andy]

BitLocker will only encrypt Vista's volume.


-Michael

Any ideas why this appears ot be showing the ability enable on multi
partitions

http://www.windows-vista-update.com/image-files/bitlocker2.jpg

 

[Andy]

http://technet2.microsoft.com/Windo...8ae6-4957-b031-97b4d762cf311033.mspx?mfr=true

<quote>
BitLocker Drive Encryption is an integral new security feature in the
Windows Vista operating system that provides considerable protection for
the operating system on your computer and data stored on the operating
system volume.
</quote>


-Michael

So in our case no use whatsoever.
Any ideas on what we can do in the event of theft to secure the working data
files on the d:/ e:/ partitions ?

 

[Tom Porterfield]

I need to get the 100% right answer to a question which only Microsoft can
provide. Anyone know a MS presales email address which is answered?

The problem i have:

Since having some notebooks stolen we are interested in upgrading all our
notebooks and pc's to vista ulitmate so we can enable bitlocker.
The problem is all our hardisks have partitions and we are unsure if
bitlocker will lock all the partitions or only the OS drive i.e. C:/
Whoever we speak to gives us different opinions.

On Vista, BitLocker encrypts the operating system volume. On Longhorn
Server (not yet released) you will also be able to encrypt data volumes.
See
http://technet2.microsoft.com/Windo...ce4d5a2e-59a5-4742-89cc-ef9f5908b4731033.mspx
for additional information.

 

[MICHAEL]

So in our case no use whatsoever.
Any ideas on what we can do in the event of theft to secure the working data files on the d:/
e:/ partitions ?

EFS?

http://windowshelp.microsoft.com/Windows/en-US/Help/e895bd18-36e5-4229-8424-dff307b155c21033.mspx

Encrypting File System (EFS) is a feature of Windows that allows you to store information on
your hard disk in an encrypted format. Encryption is the strongest protection that Windows
provides to help you keep your information secure.

 

[MICHAEL]

Any ideas why this appears ot be showing the ability enable on multi
partitions

http://www.windows-vista-update.com/image-files/bitlocker2.jpg

Actually, if you look closely at that picture, the other partitions/volumes
do not say/offer "Turn On BitLocker". Which means it is not available for
those volumes.


-Michael

 

[Isaac Hunt]

You definately want bitlocker?
There are a few full disk encryption apps out there.
The best I have personally used is Bestcrypt FVE but it conflicts with
offline defrag in Perfectdiskv8. Works great with removeable media too.
PGP whole disk encryption is good but the licensing can be expensive.
Compusec is free even for commercial use & a Vista compatible version is
forthcoming, works great.
There are a few others like safeboot but I haven't tried them for years.

 

[Bill]

Would a third party application, True Crypt, work for you? It works well
with Windows XP. I have not tested it with Vista.
http://www.truecrypt.org/
You would not have to update your computers.

 

[Andy]

EFS?

http://windowshelp.microsoft.com/Windows/en-US/Help/e895bd18-36e5-4229-8424-dff307b155c21033.mspx

Encrypting File System (EFS) is a feature of Windows that allows you to
store information on your hard disk in an encrypted format. Encryption is
the strongest protection that Windows provides to help you keep your
information secure.

Just given this a go right click folder and encrypt however reading the
above and seeing it i am unsure how this is enabled.
Is this tied to the user account of xp?, there is no password etc for the
folder i have encrypted.

 

[Michael Price]

Bitlocker in Vista will allow you to encrypt more than the system volume. I
have done it myself. Here is the link that describes how to do it. You must
follow the directions carefully.

http://www.windowsecurity.com/articles/Best-practice-guide-how-configure-BitLocker-Part1.html

If the machines involved use Active Directory you should take the time to
learn how to properly implement the recovery setup. This is for either
bitlocker or EFS.

Also the combination of Bitlocker on the system drive and EFS on the data
drives would be secure as the keys for the EFS would be stored on the
Bitlocker protected drive.

 

[MICHAEL]

Interesting. Thanks.


-Michael

Bitlocker in Vista will allow you to encrypt more than the system volume. I have done it
myself. Here is the link that describes how to do it. You must follow the directions
carefully.

http://www.windowsecurity.com/articles/Best-practice-guide-how-configure-BitLocker-Part1.html

If the machines involved use Active Directory you should take the time to learn how to
properly implement the recovery setup. This is for either bitlocker or EFS.

Also the combination of Bitlocker on the system drive and EFS on the data drives would be
secure as the keys for the EFS would be stored on the Bitlocker protected drive.