Simple question about laptop file security

[here]

I've browsed through various Windows docs and can't seem to get a
simple answer to the following question.

I've always used third-party encryption software to encrypt sensitive
files on my laptop in case it was lost or stolen but I'm wondering if
that's really necessary. My question is, if my laptop is lost or
stolen and I have a password on the administrator account and password
on my user account, would someone be able to access my files somehow
if they're not encrypted? I'm using XP Home and can't use the built-in
file encryption available in the Professional edition.

 

[Pegasus [MVP]]

I've browsed through various Windows docs and can't seem to get a
simple answer to the following question.

I've always used third-party encryption software to encrypt sensitive
files on my laptop in case it was lost or stolen but I'm wondering if
that's really necessary. My question is, if my laptop is lost or
stolen and I have a password on the administrator account and password
on my user account, would someone be able to access my files somehow
if they're not encrypted? I'm using XP Home and can't use the built-in
file encryption available in the Professional edition.

If I got hold of your laptop then I would be able to read/modify all of your
files in less than two minutes. I wouldn't even need to crack your
password - an ordinary Bart PE boot disk would do. You must use encryption
software if you wish to protect your files.

 

[3c273]

Yes. It is very trivial to reset the admin password in Windows. (Or put the
drive in another machine.)
Louis

 

[John Wunderlich]

(e-mail address removed) wrote in
m:

I've browsed through various Windows docs and can't seem to get a
simple answer to the following question.

I've always used third-party encryption software to encrypt
sensitive files on my laptop in case it was lost or stolen but I'm
wondering if that's really necessary. My question is, if my laptop
is lost or stolen and I have a password on the administrator
account and password on my user account, would someone be able to
access my files somehow if they're not encrypted? I'm using XP
Home and can't use the built-in file encryption available in the
Professional edition.

It's a simple matter to try on your own...

Download and burn a free live Linux boot CD (such as Knoppix) then boot
from this CD and access all of your files.

Knoppix: <http://www.knopper.net/knoppix/index-en.html>

-- John

 

[Bruce Chambers]

I've browsed through various Windows docs and can't seem to get a
simple answer to the following question.

I've always used third-party encryption software to encrypt sensitive
files on my laptop in case it was lost or stolen but I'm wondering if
that's really necessary.

Well, it'd stop a rank amateur from accessing your files, but would
hardly slow down a professional who stole the laptop with the goal of
getting at your data. Encryption is helpful, but none is 100% iron-clad.

My question is, if my laptop is lost or
stolen and I have a password on the administrator account and password
on my user account, would someone be able to access my files somehow
if they're not encrypted?

Certainly. It's take less than 5 minutes for anyone with physical
access to the computer and any of the dozens of Linux-based password
cracking tools that are freely available to anyone who can use Google.

I'm using XP Home and can't use the built-in
file encryption available in the Professional edition.

Without physical security, you have no security. If you have data that
you absolutely cannot afford to have accesses, don't store it on the
laptop's internal drive.


--

Bruce Chambers

Help us help you:


http://support.microsoft.com/default.aspx/kb/555375

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. ~Benjamin Franklin

Many people would rather die than think; in fact, most do. ~Bertrand Russell

The philosopher has never killed any priests, whereas the priest has
killed a great many philosophers.
~ Denis Diderot

 

[Twayne]

Well, it'd stop a rank amateur from accessing your files, but would
hardly slow down a professional who stole the laptop with the goal of
getting at your data. Encryption is helpful, but none is 100%
iron-clad.



Certainly. It's take less than 5 minutes for anyone with physical
access to the computer and any of the dozens of Linux-based password
cracking tools that are freely available to anyone who can use Google.

That's a rather curious statement. I wonder why not? OP?

Without physical security, you have no security. If you have data
that you absolutely cannot afford to have accesses, don't store it on
the laptop's internal drive.

Right on!


Actually, XP's native encryption is an excellent implementation as long
as you remember to export your encryption keys in case you ever do a
repair install, put in a new drive, etc. etc.. To break that is an
expensive prospect and there are few work-arounds without the keys. But
if anyone has physical access to the machine, well ...

 

[John John (MVP)]

That's a rather curious statement. I wonder why not? OP?

Maybe because the Encrypting File System (EFS) is not available in XP
Home? Do you know a way around this small detail?

John

 

[Twayne]

Maybe because the Encrypting File System (EFS) is not available in XP
Home? Do you know a way around this small detail?

John

D'oh! Of course, that's it; good call.

Twayne