Re: Better encrypting files

From: Mike Brannigan [MSFT] (mikebran_at_online.microsoft.com)
Date: 08/06/04 

Date: Fri, 6 Aug 2004 00:28:17 +0100

"TC2" <neinspam.tomcantlon@vispath.com> wrote in message
news:eqPC1J0eEHA.2804@TK2MSFTNGP11.phx.gbl...
> I'd like to secure the files on our company president's laptop. Encryption
> seem to be the way to go to prevent, for instance, someone removing his HD
> and putting it in another system as a 2nd drive and just reading the data.
> But XP encyption can be beaten just by reseting the logon password and you
> have access to all the files. I need something as easy as XP encryption
> but
> which forces the user to enter the encryption password once per logon. Any
> ideas?
>
> Thanks,
> Tom

TC2,

Please read an understand more fully the implications of an administrator
"resetting" a users password to gain access to their account.
This is covered in the Help and Support center.
Basically if an admin resets an end users password that will NOT provide
them access to the end users files if they logon as that user.
You need a deeper understanding of EFS and the impact of the admin account
and recovery agent.
It will suffice for your needs but before using it you need to do some more
reading around the subject. 

-- 
Regards,
Mike
--
Mike Brannigan [Microsoft]
This posting is provided "AS IS" with no warranties, and confers no
rights
Please note I cannot respond to e-mailed questions, please use these
newsgroups
"TC2" <neinspam.tomcantlon@vispath.com> wrote in message 
news:eqPC1J0eEHA.2804@TK2MSFTNGP11.phx.gbl...
> I'd like to secure the files on our company president's laptop. Encryption
> seem to be the way to go to prevent, for instance, someone removing his HD
> and putting it in another system as a 2nd drive and just reading the data.
> But XP encyption can be beaten just by reseting the logon password and you
> have access to all the files. I need something as easy as XP encryption 
> but
> which forces the user to enter the encryption password once per logon. Any
> ideas?
>
> Thanks,
> Tom
>
>