Re: Encrypted files on NTFS partition secure if XP OS Partition is fat32?

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 02/05/03 

From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Wed, 5 Feb 2003 00:14:43 -0700

7 char is too short for a crack resistant password. 

-- 
Roger 
"Wayne Phillipw" <chaotos@nospam.net> wrote in message news:FIR_9.312$r84.34143@news.uswest.net...
> I would like to thank everyone for their quick and informative replies!
> 
> It sounds like my current setup would provide adequate security for my
> purposes. I contains information I would not want anyone to see but it is
> unlikely anyone would have a specific interest in breaking my encryption.
> 
> I could make my password more complex. Right now it is only 7 characters but
> has no recognizable words and uses both letters and symbols.
> 
> "Roger Abell [MVP]" <mvpNOSPAM@asu.edu> wrote in message
> news:##EQ4QfyCHA.2184@TK2MSFTNGP09...
> 
> "Wayne Phillips" <chaotos@nospam.com> wrote in message
> news:TcJ_9.98$63.111631@news.uswest.net...
> > I have upgraded from W2K to XP on my laptop. The Boot Partion is fat32. I
> > have a second NTFS partition. How secure are encrypted files on the NTFS
> > partition should the laptop be stolen?
> >
> > I am nervous about converting the OS partiton to NTFS without reformating
> > first and reinstalling XP, from what have read.
> >
> > Thanks in advance.
> >
> >
> 
> Whether the .\Documents and Setting and the .\Windows
> are stored on FAT or NTFS does not make much difference
> in this case.  If they have physical control of the machine and
> it can be booted from a floppy or CD they can slap a password
> on an account and log in.  However, that does not really much
> matter (unless they slapped a password on the encrypting
> account, in which case they have made it impossible for
> them to get at the EFS files in the clear).   In order to access
> the EFS encrypted files they will need to log in with an
> account identified in the encrypted files as allowed to
> decrypt, and they must log in with the password that was
> last in use by the account.  For this they would have to
> crack the SAM.  You can prevent the crack attempts from
> succeeding by using either smart cards or extremely long
> and complex passwords (remember an XP password can
> be something like 128 characters).   Having the system and
> profiles stored on FAT only makes one step (one that is
> rather insignificant relative to getting at the EFS protected
> files) in their process no longer necessary.
> 
> --
> Roger Abell
> MS MVP (Security, Windows), MCDBA,  MCSE both
> Associate Expert - Windows XP ExpertZone
> http://www.microsoft.com/windowsxp/expertzone
> 
>

Relevant Pages

  • Re: Whats the Password?
    ... Depending on the length and complexity of the password it could literally ... Big Blue to crack a complex password! ... they just give the account a new password. ... and if you have encrypted files and use the utility you can kiss the ...
    (microsoft.public.windowsxp.general)
  • Re: Password
    ... Mine was the only user account on the system - administrator-level. ... your password makes all your encrypted files INACCESSIBLE with not ... "For Windows XP and Windows Server 2003 local accounts, a password reset disk can ... If an administrator uses the "reset password" option from the user's ...
    (microsoft.public.windowsxp.general)
  • Re: Encrypted files inaccessible after reinstalling OS
    ... > reinstallation" i.e. in every other respect all Windows ... that my encrypted files should likewise ... > still remain accessible to me on my user account. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cracking Oracle Passwords
    ... Post a query to an Oracle newsgroup - they might know some tricks. ... program that does a dictionary attack on the SYS account. ... the number of guesses potentially needed to crack it jumps ... > networked and the cracking program will have to run on the computer ...
    (comp.security.misc)
  • Re: password expired
    ... I have never used EFS but the conversation prompted the questions asked. ... since the Guest account doesn't have those ... Wouldn't the OP be able to access the encrypted files by setting the ... account credentials, which are built from several inputs. ...
    (microsoft.public.windowsxp.general)
Quantcast