Educause Security Discussion mailing list archives

Re: Vista/7 Shadow Copy


From: Roger Safian <r-safian () NORTHWESTERN EDU>
Date: Fri, 21 May 2010 14:34:37 -0500

At 02:25 PM 5/21/2010, Flynn, Gary put fingers to keyboard and wrote:
What do you think of disabling Shadow Copy on computers not having full disk encryption to prevent inadvertent storage 
of sensitive data? Our support folks indicated they don’t use the feature for maintenance or troubleshooting. Some of 
our Windows folks are worried that it might be used as part of the backup process or to recover files from servers 
(???). And it it nice to have around when pushing patches or changes that have higher risk of failure (e.g. Service 
packs).

I think it makes sense to disable this regardless of the issue
of data.  Free up that space, and have your users rely on their
backups.  Besides, malware can hide there.



--
Roger A. Safian
r-safian () northwestern edu (email) public key available on many key servers.
(847) 467-6437   (voice)
(847) 467-6500   (Fax) "You're never too old to have a great childhood!"

Current thread: