Pro v Home-encryption?

K

kp

I have a friend who wants to upgrade to XP. He's been saving his dimes and
pennies for XP Pro. I told him I thought Home would work well for him, as
he doesn't have need for remote networking.

He's wondering about the encryption capabilities of Pro. He has a small
parttime business with a website and thinks Pro might serve his encryption
needs.

Is it worth the $80 difference in price between the Home and Pro upgrades?
Or is there another, less expensive thing he could do for encryption?

thanks,
kp
 
G

Guest

kp said:
I have a friend who wants to upgrade to XP. He's been saving his dimes and
pennies for XP Pro. I told him I thought Home would work well for him, as
he doesn't have need for remote networking.

He's wondering about the encryption capabilities of Pro. He has a small
parttime business with a website and thinks Pro might serve his encryption
needs.

Is it worth the $80 difference in price between the Home and Pro upgrades?
Or is there another, less expensive thing he could do for encryption?

thanks,
kp
The major difference in my opinion , is that Back up is not installed on XP
Home. But can be downloaded from our Computer Club's web site:
http://www.myscacc.org/Forms/ntbackup.msi

Here is a good read on the subject.
http://www.microsoft.com/windowsxp/pro/howtobuy/choosing2.mspx
 
R

Rick \Nutcase\ Rogers

Hi,

There are other encryption programs available, but the cost is roughly the
same. Using EFS has some caveats, your friend would do well to fully
understand them before employing it. All too often we see reports of loss of
data here because the user failed to follow the proper methods of preparing
for (or guarding against) a system failure. If not properly prepared, the
loss can be permanent, it's *very* good encryption.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
D

David H. Lipman

But he would also gain NTFS security via XP pro as compared with XPHE.

Dave



| Hi,
|
| There are other encryption programs available, but the cost is roughly the
| same. Using EFS has some caveats, your friend would do well to fully
| understand them before employing it. All too often we see reports of loss of
| data here because the user failed to follow the proper methods of preparing
| for (or guarding against) a system failure. If not properly prepared, the
| loss can be permanent, it's *very* good encryption.
|
| --
| Best of Luck,
|
| Rick Rogers, aka "Nutcase" - Microsoft MVP
|
| Associate Expert - WindowsXP Expert Zone
|
| Windows help - www.rickrogers.org
 
R

Rick \Nutcase\ Rogers

Um, no, NTFS, and the resultant permissions, is available and configurable
on both versions. Only difference is that on Home systems you have to access
the security settings in Safe mode. Both versions can use NTFS with equal
alacrity. EFS itself is only available on XP Pro, and is reliant on the NTFS
file system, but they are two different things. However, regardless of
version, NTFS security can be overridden by sloppy system security (lack of
firewall, improper port settings, etc.).

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
D

David H. Lipman

Thank you for that clarification Rick.

Dave



| Um, no, NTFS, and the resultant permissions, is available and configurable
| on both versions. Only difference is that on Home systems you have to access
| the security settings in Safe mode. Both versions can use NTFS with equal
| alacrity. EFS itself is only available on XP Pro, and is reliant on the NTFS
| file system, but they are two different things. However, regardless of
| version, NTFS security can be overridden by sloppy system security (lack of
| firewall, improper port settings, etc.).
|
| --
| Best of Luck,
|
| Rick Rogers, aka "Nutcase" - Microsoft MVP
|
| Associate Expert - WindowsXP Expert Zone
|
| Windows help - www.rickrogers.org
|
| | > But he would also gain NTFS security via XP pro as compared with XPHE.
| >
| > Dave
 
G

Guest

Keep in mind that some of the more advanced features allowed by Pro also
requires an advanced knowledge of the operating system. Playing with
functions such as EFS can get you into trouble (file loss) if you don't know
how to use it. This becomes critical when dealing with company files. The
bottom line is you can't go wrong with purchasing the Pro edition, but many
of the extra feautures would probably not be used in this case. I do find it
very helpful to be able to use remote desktop which is a pro feature.

Thanks,

John
http://www.americantechie.com
 
D

David H. Lipman

Remote desktop -- Just another example of a third party product that Microsoft wants to
takeover and dominate. ReachOut and PC AnyWhere are just two of the many Remote Control
software.

Dave



| Keep in mind that some of the more advanced features allowed by Pro also
| requires an advanced knowledge of the operating system. Playing with
| functions such as EFS can get you into trouble (file loss) if you don't know
| how to use it. This becomes critical when dealing with company files. The
| bottom line is you can't go wrong with purchasing the Pro edition, but many
| of the extra feautures would probably not be used in this case. I do find it
| very helpful to be able to use remote desktop which is a pro feature.
|
| Thanks,
|
| John
| http://www.americantechie.com
|
| "David H. Lipman" wrote:
|
| > Thank you for that clarification Rick.
| >
| > Dave
| >
| >
| >
| > | > | Um, no, NTFS, and the resultant permissions, is available and configurable
| > | on both versions. Only difference is that on Home systems you have to access
| > | the security settings in Safe mode. Both versions can use NTFS with equal
| > | alacrity. EFS itself is only available on XP Pro, and is reliant on the NTFS
| > | file system, but they are two different things. However, regardless of
| > | version, NTFS security can be overridden by sloppy system security (lack of
| > | firewall, improper port settings, etc.).
| > |
| > | --
| > | Best of Luck,
| > |
| > | Rick Rogers, aka "Nutcase" - Microsoft MVP
| > |
| > | Associate Expert - WindowsXP Expert Zone
| > |
| > | Windows help - www.rickrogers.org
| > |
| > | | > | > But he would also gain NTFS security via XP pro as compared with XPHE.
| > | >
| > | > Dave
| >
| >
| >
 
R

Rick \Nutcase\ Rogers

I don't know if I would use the term "dominate", as if that were the case
they would want to put it in all versions of XP, not just Pro - and release
a compatible version for other Win-OS's. Right now you must be accessing a
Pro or Server2003 system to use this feature, though you can download a file
that will allow you to access the machine from any version of Win. But it
doesn't work in reverse.

I have never tried ReachOut, have you used it and what do you think of it?
Am curious.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org
 
A

Alex Nichol

kp said:
I have a friend who wants to upgrade to XP. He's been saving his dimes and
pennies for XP Pro. I told him I thought Home would work well for him, as
he doesn't have need for remote networking.

He's wondering about the encryption capabilities of Pro. He has a small
parttime business with a website and thinks Pro might serve his encryption
needs.

I regard NTFS encryption as a mistake. First it is very dangerous
unless you are absolutely sure of backup of the encryption certificates,
off the machine. If they are not there after a reinstall the data is
going to be permanently irretrievable

But more important, it gives a false sense of security. The files are
completely transparent to the owner once logged in, so that they are in
fact no more secure than his log on password - probably not very.

Third party programs , using passwords for the files would be more
appropriate.

The only other thing is that if he wants to run a web site *on* the
machine, Home does not support Internet Information Server. But there
is apache. And Home only provides five connections - Pro ten, neither
of which is enough for a serious web server anyway
 
D

DILIP

I regard NTFS encryption as a mistake. First it is very dangerous
unless you are absolutely sure of backup of the encryption certificates,
off the machine. If they are not there after a reinstall the data is
going to be permanently irretrievable

But more important, it gives a false sense of security. The files are
completely transparent to the owner once logged in, so that they are in
fact no more secure than his log on password - probably not very.

Why do you use the words - false sense of security? EFS is meant to work
that way. A third party encryption program works on a password as well.
EFS works with the user account password to safeguard encrypted files. So
they are similar in that respect, except that EFS is more convenient to use
with simple drag and drop functionalities in various folder trees once
you're logged in. The reason why EFS was created was due to third party
NTFS programs capable of easily destroying MS's NTFS permissions, which made
the concept very silly, really. But if EFS is implemented in conjunction
with permissions, without the PK, data is virtually impenetrable.
Third party programs , using passwords for the files would be more
appropriate.

They are really not very effective - I've used Folder Guard XP, and a few
others, but getting past them is easy, either booting into safe mode or
corrupting their drivers is all that's required (Then they are helpless).
Simply password protection isn't enough. You see, unless files are
physically encrypted, getting past any flaky 'add-on' program is just a
matter of practice or waiting for its driver to break. EFS, on the other
hand, being built into the NTFS file system is virtually impossible to break
if used properly. Stuff like Cryptainer or PGP might be a better choice for
more features...

That said, which software do you have in mind for applying 'passwords for
files'?
 
D

David H. Lipman

Rick:

When Citrix first came out and our office was at Win3.1 level, we looked at Remote Access
and Remote Control options. We played with the first version of Citrix Server and did not
like. ( But, that was a pre web server based solution) We ended up getting a Cubix system
with ReachOut Remote. Interesting system. There were two drawers and each drawer had 12
ISA slots. Using a CPU on a card (each card had its own 486 CPU, RAM, hard disk, RS-232,
video, etc) you could then partition the drawer for as many CPU cards you need and each
drawer had a management unit. The two management units (one per drawer) communicated
together to act as one whole management console.

Looking at just one CPU card; DOS 6.0 was loaded on the hard disk and Win31 was loaded
ontop of DOS with ReachOut server loaded on that. The CPU card had a dedicated Hayes modem
attached. We had a hunt group of 12 lines with a 800 number on the lead phone number.

A user would call the 800 number and the hunt group would find a free phone number and
ReachOut Remote would then take control of the Win3.1 system. It worked *extremely* well
and ReachOut was very stable and maximized the modem bandwidth. Of course the only items
that went across the modem were mouse strokes, key strokes and screen updates. They were
smooth and worked well connected to our then Novell LAN.

When we moved to Win95 and were using NT4 Domain, we had a shift in what we did and our
company provided Terminal Services to "all" employess and our Cubix system was "turned-in"
thus ending its use. So we then shifted from Remote Control via a modem to Remote Access
via PPP over a modem. We are now in a new change of process as v.90/v.92 doesn't cut the
mustard anymore. Citrix has greatly matured and has dominated the market. We are in the
process of implementing a corporate Citrix Remote Control server via https. This should be
both secure and musch faster than v.90/v.92 modems as many of our personnel have xDSL or
Cable Internet or are TDY at a hotel with Internet connectivity or at a contractors location
and use the contractors ISP.

I have seen lots of changes and I have been glad to be in the middle of their
implementation. While I have not used ReachOur remote in several years, and the product
line was sold to another compnay, my experiences with it were excellent.

Dave



| I don't know if I would use the term "dominate", as if that were the case
| they would want to put it in all versions of XP, not just Pro - and release
| a compatible version for other Win-OS's. Right now you must be accessing a
| Pro or Server2003 system to use this feature, though you can download a file
| that will allow you to access the machine from any version of Win. But it
| doesn't work in reverse.
|
| I have never tried ReachOut, have you used it and what do you think of it?
| Am curious.
|
| --
| Best of Luck,
|
| Rick Rogers, aka "Nutcase" - Microsoft MVP
|
| Associate Expert - WindowsXP Expert Zone
|
| Windows help - www.rickrogers.org
|
| | > Remote desktop -- Just another example of a third party product that
| > Microsoft wants to
| > takeover and dominate. ReachOut and PC AnyWhere are just two of the many
| > Remote Control
| > software.
| >
| > Dave
| >
| >
| >
| > message
| > | > | Keep in mind that some of the more advanced features allowed by Pro also
| > | requires an advanced knowledge of the operating system. Playing with
| > | functions such as EFS can get you into trouble (file loss) if you don't
| > know
| > | how to use it. This becomes critical when dealing with company files.
| > The
| > | bottom line is you can't go wrong with purchasing the Pro edition, but
| > many
| > | of the extra feautures would probably not be used in this case. I do
| > find it
| > | very helpful to be able to use remote desktop which is a pro feature.
| > |
| > | Thanks,
| > |
| > | John
| > | http://www.americantechie.com
| > |
| > | "David H. Lipman" wrote:
| > |
| > | > Thank you for that clarification Rick.
| > | >
| > | > Dave
| > | >
| > | >
| > | >
| > | > | > | > | Um, no, NTFS, and the resultant permissions, is available and
| > configurable
| > | > | on both versions. Only difference is that on Home systems you have
| > to access
| > | > | the security settings in Safe mode. Both versions can use NTFS with
| > equal
| > | > | alacrity. EFS itself is only available on XP Pro, and is reliant on
| > the NTFS
| > | > | file system, but they are two different things. However, regardless
| > of
| > | > | version, NTFS security can be overridden by sloppy system security
| > (lack of
| > | > | firewall, improper port settings, etc.).
| > | > |
| > | > | --
| > | > | Best of Luck,
| > | > |
| > | > | Rick Rogers, aka "Nutcase" - Microsoft MVP
| > | > |
| > | > | Associate Expert - WindowsXP Expert Zone
| > | > |
| > | > | Windows help - www.rickrogers.org
| > | > |
| > | > | | > | > | > But he would also gain NTFS security via XP pro as compared with
| > XPHE.
| > | > | >
| > | > | > Dave
| > | >
| > | >
| > | >
| >
| >
|
|
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Cannot delete User Accounts 2
XP Pro Back to XP Home 5
User -> administrator ? 8
XP PRO Educational Update 1
Re-install XP 4
Playing a DVD problem 7
Changing XP from Chinese to English 4
XP Home vs XP Pro 2

Top