Re: EFS for the entire user profile


Thanks, Steve.

Mike Ober.

"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:e7tmlJwnGHA.1444@xxxxxxxxxxxxxxxxxxxxxxx

It is not possible because the user profile contains the EFS private key
in
the application data\Microsoft\crypto folder. You can however encrypt
other
folders that have data that you want to secure such as my documents
folder.
FYI Windows 2000 does not have a very secure version of EFS because all an
attacker has to do is to use a password reset disk to reset the built in
administrator account password that is by default the RA and then can
access
any EFS file on the computer. XP Pro fixed that vulnerability. You can
export/delete the EFS private key for your user account and RA account but
that gets to be real tedious because you need to import them again to
access
EFS files. --- Steve


"Michael D. Ober" <obermd.@.alum.mit.edu.nospam> wrote in message
news:uJwgg1qnGHA.780@xxxxxxxxxxxxxxxxxxxxxxx

Is is possible/advisable to encrypt the entire user profile for a logged
in
user? The machine is a laptop.

Thanks
Mike Ober.









.

Relevant Pages

  • EFS for the entire user profile
    ... Is is possible/advisable to encrypt the entire user profile for a logged in ... The machine is a laptop. ... Mike Ober. ...
    (microsoft.public.win2000.security)
  • Re: 0xc0000022 error
    ... "Syed Zeeshan Haider" wrote: ... Does this happen with an Admin Account?. ... How to Identify a Damaged User Profile and Create a New Profile ... Permissions and see those limited users as they shouldn't have access ...
    (microsoft.public.windowsxp.general)
  • Re: 0xc0000022 error
    ... Does this happen with an Admin Account?. ... How to Identify a Damaged User Profile and Create a New Profile ... "Syed Zeeshan Haider" wrote: ... Permissions and see those limited users as they shouldn't have access ...
    (microsoft.public.windowsxp.general)
  • RE: NT > SBS account transfer not working!
    ... you do not need to migrate the user profile manually. ... and other partners who read the newsgroups regularly can ... NT> SBS account transfer not working! ... Browse to the C:\Documents and Settings folder, ...
    (microsoft.public.windows.server.sbs)
  • Re: Help with OE 6/IE 7
    ... identity but as soon as it tries to connect OE stops responding. ... "PA Bear" wrote: ... password-protected User Profile, and unless you're running WinXP Home, none ... OE will use the default mail account when beginning a new message. ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)