Re: help please on passwords, encryption etc

From: Markus Jansson (jansson_markus@ziplip.com)
Date: 06/29/02 

From: Markus Jansson <jansson_markus@ziplip.com>
Date: Sat, 29 Jun 2002 20:43:07 GMT

On Sat, 29 Jun 2002 21:24:05 +0100, "L Smith"
<lsmith.mail@btinternet.com> wrote:
> First, I'm confused about the difference between making a folder private
> and encrypting it. Either method makes the contents inaccessible to
> other users (or at least appears to do so), so why are there two options?

If someone uses tool like NTFSDOS, they can access all files and folders if
they are just marked "private". If they are encrypted, they can be access but
the data is encrypted and cant be decrypted so...

> Second, I've made a password reset disk. In the event of having to do a
> full system reinstall, will I be able to use this to recover my data ? I
> suspect not, so if I am right, how can I recover data that is in either
> private or encrypted folders?

You must export the EFS certificates on the computer and store them on
safe place. Use MMC and and snapin called "certificates" and export the
proper certificate.

 

> Third, I have made backups which are stored in a standard folder on a
> second drive, but will these be usable in the event of a complete re-install
> as described above? As the backup is of a private or encrypted folder, will
> the recovered data be accessible?

Without you exporting the EFS certificates and then importing them to new
installation...they cannot be decrypted at all.

> Finally, I have tried to use the mmc to a) designate either myself or the
> administrator account as the recovery agent so that b) I could back up the
> recovery key, but without success. In fact, I fear I may have made things
> worse! Console Root / Certificates / Trusted People shows my logon but
> then chuckling properties of the certificate shows it is not trusted, and I
> am told to install it in the Trusted Authorities Store - but I don't know how
> to do this. Console Root / Certificates / Recovery / Certificates shows two
> certificates - called 'A' and 'L' (my initial and the administrator
> initial?)but again neither are trusted and I get the same advice.

Just copy/paste it to "Trusted" certificates. :)

> Having lost data once before due to a system crash I am really anxious to
> ensure I do all I can to safeguard my data. Any help you can offer will be
> gratefully received!

Use PGPdisk instead. Then you only need to remember the passphrase
and have PGP installed. PGP 6.58ckt8 works like a dream on XP too.
http://www.ipgpp.com

Markus Jansson

----------------------------------------
My privacy related homepages and PGPkey
http://www.markusjansson.net

Relevant Pages

  • Re: help please on passwords, encryption etc
    ... I'm confused about the difference between making a folder private ... >> and encrypting it. ... > they are just marked "private". ... Use MMC and and snapin called "certificates" and export the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How to share between multiple people?
    ... I am trying to share data in a folder that is currently encrypted with ... EFS. ... stating "No appropriate certificates for the corresponding user". ... The Encrypting File System ...
    (microsoft.public.windowsxp.general)
  • Re: Fast Size Folder
    ... as far as I know that is exactly what Windows itself does when you right click a folder and choose Properties. ... Private Declare Sub CopyMemory Lib "kernel32" _ ... ByVal sDir As String) As Long ... Dim s1 As String, sectorsPerCluster As Long ...
    (microsoft.public.vb.general.discussion)
  • Re: Hard Drive Folder Size
    ... The drive and folder will always be the same. ... Private Declare Sub CopyMemory Lib "kernel32" _ ... (ByVal lItem As Long, ByVal sDir As String) ... Dim s1 As String, sectorsPerCluster As Long, bytesPerSector As Long ...
    (microsoft.public.vb.general.discussion)
  • Re: file sizes
    ... You can count either the files in the selected folder only or you can include all files in all subfolders within that folder. ... Private Declare Sub CopyMemory Lib "kernel32" _ ... ByVal sDir As String) As Long ... Dim bytespercluster As Long, free As Long, total As Long ...
    (microsoft.public.vb.general.discussion)