Re: Windows Encryption - All too easy workaround?

From: Malke (noreply_at_invalid.com)
Date: 03/11/05 

Date: Fri, 11 Mar 2005 13:38:22 -0800

AberTech wrote:

> I have recently been looking into using the encryption tool in WinXP
> Pro for
> added privacy/security. Then someone at work told me about a bootable
> CD from winternals.com(?) called Super Acronis or Locksmith which
> allows you to
> change the password for any user on that machine. A reboot later and
> you can log on to that account - including Administrator with the new
> password. As it is the account that your files were encrypted with,
> anyone who did
> this would automatically be granted access to the encrypted files.
> They even give you a 5 day working demo available for free!
>
> On looking at this NG I can see recent posts 'Forgotton Logon
> password' which also cover this.
>
> If this is so easy to do, it made wonder if there is much point in
> using
> Windows' encryption? Is the purchase of 3rd party software necessary
> to ensure that files can be made secure/private?

The encryption for files is completely different from the ability to get
the password to get into Windows. Anyone with skill and time can get
into a computer, no matter what operating system is running. Again,
this is different from data encryption. Here are links to help you
understand XP's encryption:

http://tinyurl.com/6l6xx - MS information about EFS (Encryption)
http://www3.telus.net/dandemar/encrypt.htm - encryption info
http://www.beginningtoseethelight.org/efsrecovery/ - more encryption
info
http://www3.telus.net/dandemar/private.htm - making stuff private

If you use XP's encryption, please make very sure that you understand
completely how to use it and how to back up your certificates and set a
recovery agent.

Malke 

-- 
MS MVP - Windows Shell/User
www.elephantboycomputers.com
In Memoriam - MVP Alex Nichol
The world is diminished without him.

Relevant Pages

  • Re: user does not have acces privileges
    ... to reinstall the windows to do that. ... ownership is the reason of the inaccessibility. ... I'm not an expert but I find out, it is not the encryption but ... "Zorro" wrote: ...
    (microsoft.public.windowsxp.accessibility)
  • Re: user does not have acces privileges
    ... But now at the new files I should have the right EFS key in my computer. ... That means there is something wrong with the ownership settings and that was ... Or it is only matter if the encryption is combined with the ownership change? ... to reinstall the windows to do that. ...
    (microsoft.public.windowsxp.accessibility)
  • Re: Cannot access encrypted files after reinstalling Windows XP Professional
    ... able to break the encryption in a reasonable amount of time. ... > keys are generated each time you do an install, ... > they would be related to the Windows serial key, ... >>> All data files are stored on partition D:. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Windows Server 2003 - Not secure from my test but OSX from Mac is secure from the start
    ... When enabled in mode 3 you can store the system encryption key ... Sadly most Windows admins are not fully aware of all the security tools ... Worms & Port Scans ...
    (Security-Basics)
  • Re: "Rule 30" CA encryption implementation
    ... never ever let the plaintext touch the hard disk. ... You should use a disk encryption program and not a file encryption ... Windows user so haven't kept track. ... laptops for work or something like that (company managers get laptops ...
    (sci.crypt)