Re: Cached Domain Password on Notebook, secure?

From: Olav Seyfarth (olav.seyfarth@mediaways.net)
Date: 02/20/02 

Date: Wed, 20 Feb 2002 10:09:52 +0100
From: Olav Seyfarth <olav.seyfarth@mediaways.net>
To: "Laura A. Robinson" <larobins@bellatlantic.net>

Laura,

>> We plan to roll out EFS to secure our notebooks in case they get lost but
>> as I see the security of EFS stands and falls with the security of the
>> password of the user.

> No, the security of EFS stands or fails with the location of the user and
> recovery agent keys. Get them off the hard drive.

So where to put it? SmartCard? USB-KryptoToken?
Isn't the Problem then to ensure users don't leave these with the notebook?

Olav

Relevant Pages

  • Re: EFS is a joke!
    ... > You seem to be missing a couple of basics of security yourself. ... And if he could do that, why use EFS at all? ... they can't decrypt the file and see your information. ... multiple layers of encryption for security. ...
    (comp.security.misc)
  • Re: File Encryption
    ... the mechanism used to protect the EFS ... private key. ... > account appears to be the only account whose security ... > my certificate and security information is intact (the ...
    (microsoft.public.windowsxp.security_admin)
  • RE: File Encryption - Laptop
    ... Windows XP with SP1 and then using Encrypting File System (EFS). ... This provides paramount security - even if the laptop is stolen, ... Captus Networks ...
    (Security-Basics)
  • Re: hd security
    ... Microsoft security products, and to provide a resource for ... additional capabilities over "EFS Key", ... >> Encryption password must be known or SAM database must ... Subverting the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to get full access to all contents?
    ... You are dealing with an EFS issue it appears. ... Security) ... > "Roger Abell" wrote in message ... >> MCSE MCDBA ...
    (microsoft.public.windowsxp.security_admin)