Protecting FAT partition

I have a FAT-partition with a boot-programm. This boot-programm then boots Windows NT 4.0 from a NTFS-partition. What I want is that users of Windows NT can NOT change anything in the FAT-partition. How can I do this?

Note: We need that FAT-partition to boot many other OS on that system.
xilefAsked:
Who is Participating?
 
dankhConnect With a Mentor Commented:
Xil,

   Take a look at this utility:

http://www.protect-me.com/dl/
0
 
jminckCommented:
You can't set permissions on a FAT partition. What you might be able to do is go into disk administrator and remove the drive letter for the FAT partition so that users simply don't see the drive. Of course, a knowledgable user will be able to defeat that, but it will probably work fine for 99% of users.
0
 
dankhCommented:
Xil,

   You will need a third party utility to do this.

http://www.winfiles.com/apps/nt/access-control.html

Also, you could install TweakUI on NT and instruct it not to show that FAT drive in Explorer.
0
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

 
xilefAuthor Commented:
jminck: I do not need permissions for specific files on that partition. As soon as no one can write to the partition I'm happy. I guess this must be possible.

0
 
xilefAuthor Commented:
dankh: The URL you gave lists a lot of security programs. Must of them seem to be able to protect floppies or CD-ROMs, but I didn't find anyone which lets ne protect any harddisk partitions.

What's the other one, TweakUI, and where can I get it?

0
 
dankhCommented:
Xilef,

    I think TweakUI will solve your problem.  It is a free utility provided by Microsoft.  Go to their website (www.microsoft.com) and do a search for Powertoys.  Find tweakUI, download and install it.  There will be an option in the program to hide certain harddisks and partitions.
0
 
ahoffmannCommented:
dank, and how do you prevent other OSs to write to the FAT partition?
0
 
xilefAuthor Commented:
ahoffmann: In other OS I just don't mount the partition (no entry in /etc/fstab). The problem only appears with Windows, as it automatically mounts all partitions with a known filesystem.

I'll try TweakUI later today.

0
 
ahoffmannCommented:
> no entry in /etc/fstab
and no samba, and no entry in exports, and nobody has root's passwd ;-))
0
 
xilefAuthor Commented:
I just tried TweakUI and there seem to be two problems:

1. If I hide the C-Partition, it does not show up in "My Computer" or find or NT-explorer. But if I open a DOS-shell, I can still access that partition.

2. I tried to hide the C-partition as Administrator. When I then logged in as guest, the C-drive was visible again. As we're expecting to have around 1000 users on our system, this does not seem to be a good option.

I'm a bit surprised. Every system can protect partitions, so how can I do it in NT?

0
 
ahoffmannCommented:
In the permissions dialog you must remove the Everyone user from C: and all its share below, then add an apropriate group instead.
Keep in mind that you need apropriate permission in %SystemRoot% to run programs.

You have no  "chgrp -R" on NT, but a "userfriendly" GUI with mouse-support, you understand ;-))
0
 
xilefAuthor Commented:
ahoffmann: I tried "rightlick on C: -> share -> permissions" and removed Everyone. Then I logged in as guest and I could still access C: (read and write). I guess "share" is only for the network?

0
 
ahoffmannCommented:
Ok, was a bit fuzzy: with C: I meant the folder.
But it could be a share too.
If you have changed the NTFS permissions you need not to change the share permissions for the same folder, means leaving the share permission as FullControl for Everyone is ok.
But you have to take care for shares in subfolders. Best is to change the NTFS permissions and let the share permissions as is.

I recommend to add administrator FullControl permissions as long as you're testing; you know why? I'm shure ;-)
0
 
xilefAuthor Commented:
I probably didn't state it clear enough in my question: C: is a FAT FS. SO I guess I can't use NTFS permissions. But protecting the whole partition (instead of files or folders) is enough.


0
 
ahoffmannCommented:
Oops, missed the essential, should have read the title.
You need 3'rd party tools.
Sorry for wasting your time.
0
 
tcalesaCommented:
Here are some utilities I've found that may help with your situation. The first seems like a pretty close match for what you want.

http://www.cnet.com/Resources/Topdownloads/PC/Result/TitleDetail/0,160,2045-34571,00.html

http://www.cnet.com/Resources/Topdownloads/PC/Result/TitleDetail/0,160,2045-19985,00.html

http://www.cnet.com/Resources/Topdownloads/PC/Result/TitleDetail/0,160,2045-36975,00.html

To search for more (there were several pages).
http://www.cnet.com/Resources/Topdownloads/PC/CategoryDoor/0,157,2045,00.html

Then do a quick search using the keyword security.

I haven't tried any of these utilities so I can't recommend one over the other.

Good luck
0
 
arunmCommented:
You may have already thought of this very simple solution,  but have you considered converting you fat partition from FAT16 to FAT32? As NT can not see FAT32 so you FAT partition would be protected.
0
 
xilefAuthor Commented:
dankh: Yes, DeviceLock looks exactly right. Thanks.

arunm: This would probably help, but as I've been informed future versions of NT will recignize FAT32, so it would only be a temporary fix (and I don't even know if the boot programm could use a FAT32 partition).

tcalesa: I didn't want to encrypt anything. Just protect it from ordinary users.

Thanks everyone for the help.

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.