recovering NTFS volumes

From: Parhez Sattar (pxs01_at_grh.org)
Date: 06/09/04


Date: Tue, 8 Jun 2004 15:04:41 -0700

We have this debate going in the office about NTFS and how
it protects files from falling in the wrong hands.
Basically, the questions are:
-What are the risks if a backup tape, that was used to
backup an NTFS volume on a machine (W2K/XPpro)that was
part of a corporate domain/AD, falls into the hands of a
person who is curious (but not very savvy to know hacking
tools) and has a tape drive on their home machine. Can
this person just restore the tape onto their computer and
gain full access to the files (mind you that they were
protected via NTFS 5.0 on the original partition) without
taking any additional steps (such as taking ownership,
bypassing the original ACL, etc.)?? Add EFS to the
scenario above. What changes? Thanks in advance.