Question
From: Chuck Flink (cwf@att.net)
Date: 07/10/02
- Next message: chris: "Question"
- Previous message: Sherwin Flight: "Re: Question"
- In reply to: Sherwin Flight: "Question"
- Next in thread: chris: "Question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Chuck Flink" <cwf@att.net> Date: Tue, 9 Jul 2002 15:16:20 -0700
Convert to NTFS filesystem.
Fact: FAT filesystem supports NO CONCEPT of identity.
All files on a FAT filesystem are equally accessible to
all users.
After conversion to NTFS, files and directories can have
Access Control Lists with specify the type of access
allowed each user. But...
Administrators can always "take ownership" of files that
belong to others and thus access them. (You trust your
administrator, right?) But...
NTFS also supports file encryption. Thus you could
encrypt your files so that the other admins can't read
them.... but then you better research "key recovery" and
make sure you never forget your key and the other admins
can't perform a "key recovery" to get your key.... etc.
Paranoia is a pain! Best solution: don't have secrets!
Next best solution: get your own PC, install XP, convert
to NTFS, setup an admin ID that you use only to install
software (and recover your encryption key if you forget
it), setup a limited personal ID for your normal use and
use encryption on really sensitive files!
Note: it is bad practice to operate continually
as "administrator" or an administrative user. Any program
you run with admin rights could do something critical to
system integrity/security. Unfortunately, many pre-XP
(not "XP Ready" certified) programs do not deal gracefully
with security.... hence many people run as administrative
users, seriously weakening the security of their systems.
>-----Original Message-----
>Is there any way for me to protect my files from other
users on this
>computer? The file system is FAT 32, I am using Windows
XP Pro. I am an
>administrator but there are also 2 other admins. Is there
any way to stop
>them from being able to open my files?
>
>
>.
>
- Next message: chris: "Question"
- Previous message: Sherwin Flight: "Re: Question"
- In reply to: Sherwin Flight: "Question"
- Next in thread: chris: "Question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
