Lock windows folders

[Micheal]

Is there a way to lock a windows folder using a password,
even in the administrators log in?

 

[Miha Pihler]

Hi Micheal,

You could use NTFS file permissions and set up who can access files and
folders on your drive. That said, member of administrator group can always
take permissions back. The only way to really protect your files from
administrator is to use encryption (e.g. EFS) and that will only help if
administrator is not a recover agent (RA)...
Be careful when using EFS. Make sure you have backup copy of your private
keys. If you lose your private keys you will lose access to your files!


Other then that there is no built in system in WindowsXP of protecting your
files.


Mike

 

[Bruce Chambers]

Greetings --

Like Win2K, WinXP's file security paradigm doesn't rely on, or
allow, the cumbersome method of password protection for individual
applications, files, or folders. Instead, it uses the superior method
of explicitly assigning file/folder permissions to individual users
and/or groups.

HOW TO Create and Configure User Accounts in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;279783

HOW TO Set, View, Change, or Remove File and Folder Permissions
http://support.microsoft.com/default.aspx?scid=kb;en-us;q308418

HOW TO Set, View, Change, or Remove Special Permissions for Files and
Folders
http://support.microsoft.com/default.aspx?scid=kb;[LN];Q308419

HOW TO Set the My Documents Folder as Private in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;298399

Of course, if you have WinXP Pro, you can encrypt the desired
files/folders.

Best Practices for Encrypting File System
http://support.microsoft.com/default.aspx?scid=kb;en-us;223316

As a work-around, you can place the file in a compressed folder,
and set a password to uncompress the folder to view/access its
contents.

Even so, you cannot completely protect files from another
administrative user. This is why administrative privileges should
only be granted to individuals who are completely trustworthy.


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. - RAH

 

[Star Fleet Admiral Q]

Miha Pihler,
The "system" account starts windows and other services long before the
user even logs in, so if only one user can decrypt the "Windows"
folder, how is the PC even going to boot?

Micheal,
Windows folder is always available to all users, but depending on
their profile group, what they can/can't do is controlled (providing
you have used the NTFS file system, if its FAT16/32, then their is no
security), some can read/execute but not view/change, some can
read/execute/view, but not change, some can read/execute/view/change
some, but not all, and then finally, admins can
read/execute/view/change at their discretion - and of course you have
system accounts which also have these same varying degrees of access
in order for Windows to function properly.