Re: EFS for the entire user profile

It is not possible because the user profile contains the EFS private key in
the application data\Microsoft\crypto folder. You can however encrypt other
folders that have data that you want to secure such as my documents folder.
FYI Windows 2000 does not have a very secure version of EFS because all an
attacker has to do is to use a password reset disk to reset the built in
administrator account password that is by default the RA and then can access
any EFS file on the computer. XP Pro fixed that vulnerability. You can
export/delete the EFS private key for your user account and RA account but
that gets to be real tedious because you need to import them again to access
EFS files. --- Steve


"Michael D. Ober" <obermd.@.alum.mit.edu.nospam> wrote in message
news:uJwgg1qnGHA.780@xxxxxxxxxxxxxxxxxxxxxxx

Is is possible/advisable to encrypt the entire user profile for a logged
in
user? The machine is a laptop.

Thanks
Mike Ober.





.

Relevant Pages

  • Re: Please Help with Encrypted Folder
    ... user account and then encrypt them again. ... the old user account then you may have lost permanent access to those EFS ... there is a backup of your EFS private key in a password ... > fare for an encrypted folder, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cannot get EFS recovery agent function to work!
    ... The user profile is where the EFS private key is stored and thus your EFS ... is required which would be the built in administrator account for a non ...
    (microsoft.public.win2000.security)
  • Re: CANNOT EFS DECRYPT AFTER A GHOST RESTORE
    ... There would not be a .pfx file unless you took the effort to create one at ... some point in time by exporting your EFS private key at which time you would ... the user profile probably because of performance and security reasons and it ... shareware data recovery tools ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS for the entire user profile
    ... Mike Ober. ... It is not possible because the user profile contains the EFS private key ... administrator account password that is by default the RA and then can ...
    (microsoft.public.win2000.security)
  • Re: Problem re-installing XP
    ... On the Tools menu, click Folder Options, and then click the View tab. ... In the Name list, click your user name, Administrator if you are logged ... > "Create a New User Profile in Windows XP Professional ...
    (microsoft.public.windowsxp.general)