Encrypting File System XP Pro'

Before you start using 'Microsoft Windows EFS', BACKUP YOUR PRIVATE KEY!
http://support.microsoft.com/kb/241201

If you Encrypt your personal files, it makes your data much more secure. This will not work for 'XP Home' or 'Vista Home' as the 'Home' Editions do not support 'Microsoft Windows EFS' (Encrypting File System). 'Home' users may use 'True Crypt' as described below, though this very basic, but effective method (Microsoft's EFS) will work with 'XP Pro' and 'Vista Ultimate'.

Please be aware that when you Copy (Do NOT 'Move') a File to an Encrypted Folder, you must ALWAYS make sure you 'Shred' the original File. Deleting it (even if you empty your Recycle Bin) will NOT get rid of your unEncrypted File. 'Spybot - Search & Destroy' will install a 'File Shredder' (Supports 'Drag & Drop') into your 'Start Menu', though there are many alternatives for Shredding Confidential Documents...

Eraser: (Will also Erase a whole Drive)
http://sourceforge.net/projects/eraser/
FileMenu Tools: (Right click a File and simpy select 'Shred')
http://www.lopesoft.com/en/fmtools/info.html

More info' on EFS:
http://www.windowsecurity.com/articles/Understanding-EFS-Windows-2003.html

For advanced methods of Encryption ('Serpent', 'AES-256', and 'Twofish'), I would strongly recommend Downloading 'True Crypt'.

'True Crypt' will also work on 'XP Home & Pro', 'Vista Home & Ultimate', 'Linux/Ubuntu' and 'Mac OS X'. Great for storing Highly Confidential Data (Such as millions of peoples personal details, and bank account details, due to be transported by a Courier/Postal Service) on a Removable Media such as a 'Flash Drive'/'Memory Stick', 'CD' or 'DVD', which can then be safely transported and accessed from another 'PC'/'Operating System' running 'True Crypt', simply by entering the Password to Mount the File.; Much similar to how you would Mount a *.ISO File with a 'Virtual CD/DVD-ROM Emulator' (like DAEMON Tools), but with a 'Password Prompt' before actually 'Mounting'. When you try to Mount the File, you will be Prompted for the Password. The File will then Mount as a new Drive on the system; assign it any free/available Drive letter you wish.

Source:
http://www.truecrypt.org/
Knowledge:
http://www.youtube.com/watch?v=nemmSS5mqDA
Note:
Passwords more than 100 characters long, consisting of upper-case and lower-case Letters, Numbers, Spaces and $p3Cail Ch4R4cT0R5, should be sufficient protection against current civilian technology, until Quantum Computers are available to the public...
http://www.youtube.com/watch?v=_KUMXe9gh7c

________________________________________
Narrator...

"If you have files on your PC that you don't want other people to view from another Windows account, you can Encrypt them.

Just right click the file you want to Encrypt, then click 'Advanced'. Now select 'Encrypt contents to secure data' and click 'OK'.

Now click 'Apply'.

Select 'Encrypt the file only' and click 'OK'.

Hackers, and even Administrators, will now get an 'Access Denied' message when they try to open the file.

To make things simpler, you can Encrypt a whole folder. Anything you put in that folder will automatically be encrypted until you take it back out. This method is particularly useful for adding extra security to lots of files such as MSN 'History' files or even your whole MSN 'My Received Files' folder.

You will know when a file is Encrypted because the text will change color.

Now it might be wise to change your Windows password, but don't forget it. That is the only account which will allow you to open your files. The longer the password, the harder to crack.

Bye for now!"
________________________________________

Category:

Howto & Style

Tags:

• Encrypting
• File
• System
• XP
• Secure
• Password
• Data
• EFS

[curriegrad2004]

However, somebody can still hack the EFS system so long they find the DRA which usually the local system admin account.

[J2897]

That's correct for Windows 2000. Though XP and 2003 don't require a DRA. I suspect this is true with Vista also.

[curriegrad2004]

However, many people don't know how to get into Local Security Policies and disable DRA from there. I've seen family members spying on each others files and Parents calling me complaining that their kid's found their stash of porn even though they've encrypted it. I have no sympathy for people hiding information and not properly securing them.

[J2897]

AFAIK, the DRA is Disabled by Default.

[curriegrad2004]

No, it is not. The DRA is the default admin account on all default installations - yes I know it is a sad fact, but the DRA's certs will be lost if somebody uses a password reset disk... dang I hate my skills after going through the MCSE crap...

[J2897]

I usually just Rename, Password Protect & Disable the default Administrator account. I don't want to log into it neither. It will set up unnecessary 'My Documents' Folders etc... I did check on another PC; there were no certs there, but I had reset the default Admin' password before logging in, which would have most probably killed them. Thanks for alerting me though. Now I will just have to be sure to always set future default Admin' passwords from out-side of the account, for this very reason.

[J2897Tutorials]

You're probably using Home Edition. Read the Description (TrueCrypt) or Google 'enable EFS'. You may need to read the Description before everything sinks in properly.

[Loddol21]

Ok this looks good but i need help because when i want to click the encrypt option it is blanked out so i cnt click on it... !?!?!!? plz w/b lloyd

[HatedAlways]

You have to have the versions of Vista higher than Home Premium to encrypt.

[KAZZNORE]

i can bypass this using

SAFE MODE jejeje 0_<

[rayking921]

when i do all this i see the option but i cant click on it plz help i have windows vista

[georgescott12345]

lol used sitepall

[J2897Tutorials]

Don't forget to Enable 'Simple File Sharing' again. And make sure you try this on a Test File or Folder first, or you may accidentally lock yourself out of your important File or Folder.

[J2897Tutorials]

No. But I think this is what you want to do. First, Disable 'Simple File Sharing' (Search Google if you don't know how to). Then watch this...

watch?v=x1YbSX1pOkM&fmt=18

... Right-click on the File or Folder you want to share between the Two Users. Remove 'Administrators', 'Everyone' and 'Users'. Then add the Two account names. For example, instead of adding 'Accounting', 'Execs' and 'Temps' like in the video, just add the Two account names you wish to have access to that File or Folder.

[raivis91]

can i do that on one folder for two user??

Plese Replay.

[J2897Tutorials]

NeoSpeech SAPI5 Paul.

[J2897Tutorials]

Read the Description; the part about 'TrueCrypt'.

[macedonian82]

Thanks man, ur awesome.

What is the name of the Narrator you are using?