RE: Protect folder data.

["Langa Kentane" <langa () kentane net>]

Excel spreadsheet passwords can be easily unencrypted. There are
utilities out there that can do this for you in the click of a button.
Don't fall for that one.

Secondly, you must be careful when you deploy EFS. A must is to deploy
it only if it's domain wide. Otherwise it's not very secure. I read a
paper on this last year sometime. Can't find the link anymore but I will
send it to the list when I do. It's also very easy to misconfigure EFS,
then you think you're secure when you're not.

Thirdly, why not just buy PGP 8.0. I bought a copy in December for
US$39. Comes with PGP Disk. Exactly what you need. Otherwise you can
just get the freeware version, this will only encrypt individual files
though.

Lastly, there are a couple of these products out there, some of them are
free. I used one on 2000/2001. I just can't remember what the name was,
I think it was ScramDisk. It was free but only works in Win9x. There are
quite a few others as well, for instance DriveCrypt, BestCrypt,
StrongDisk.

With all that said, I'd go with a reputable, tried and trusted product:
PGPDisk.

Ciao

-----Original Message-----
From: Rick Darsey [mailto:rdarsey () aims1 com] 
Sent: 26 November 2002 16:04
To: security-basics () securityfocus net
Subject: RE: Protect folder data. 


What format is the data in?  Excel will let you password protect a
workbook.

You can also turn on encryption in Windows 2000. You have to be running
NTFS. If you setup encryption on your system, and password protect the
Admin user, the the only way someone can open the file is to set them up
with rights to the file, or as a Encrypted File Recovery Agent on your
local system. Depending on your network security, this may work. If the
Network Admin has set the domain to override local policies, he may
still have access to it.  If this is not the case, then he would have to
have Administrative rights to your system.

Rick


-----Original Message-----
From: Shane Lahey [mailto:s.lahey () roadrunner nf net]
Sent: Friday, November 22, 2002 12:29 PM
To: tony572000 () hotmail com; security-basics () securityfocus net
Subject: RE: Protect folder data.


Why not try Blowfish Advanced CS , available at http://come.to/hahn This
should do exactally what you want.


-----Original Message-----
From: Tony - CIA;CISA;CDP;CPA;MBA [mailto:tony572000 () hotmail com]
Sent: November 18, 2002 8:00 PM
To: SECURITY-BASICS () SECURITYFOCUS COM
Subject: Protect folder data.


Hi,

I have some highly confidential data that I frequently access on in a
folder that is on my desktop computer (ie win2k).  I want to make sure
no one but me will able to see this data.  Does anyone know of any
freeware\shareware that will 1) en-crypt the data in the folder and/or
2) require a password to open up the folder?  I need to make sure a
person like our lan admin or desk top support person can not figure out
a way to get to the data.

Tony CIA,CISA,CDP,MBA




_________________________________________________________________
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.
http://join.msn.com/?page=features/virus


---
Incoming mail has been scanned for viruses and is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.422 / Virus Database: 237 - Release Date: 11/20/02


---
This email has been scanned for viruses and is considered Virus-Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.422 / Virus Database: 237 - Release Date: 11/20/02




-------------------------------------------------------------------
SurfControl E-mail Filter puts the brakes on spam,
viruses and malicious code. Safeguard your business
critical communications. Download a free 30-day trial:
http://www.surfcontrol.com/go/zsfsbl1