hullc65203
asked on
basic question: what happens if my machine is stolen?
I know this is basic, but I'm a little confused. I'm hearing different things from different people. I'm hoping someone can clear this up for me.
Here's the scenario: I've got a machine running XP pro, users must login to use it, hard drive is formatted NTFS.
Here's the question: if the machine is stolen, can the files be accessed? I understand you'd have to hack the password in order to get on the machine, but would it be possible to take the hard drive out, set it as a slave on another machine and access the files that way?
Here's the scenario: I've got a machine running XP pro, users must login to use it, hard drive is formatted NTFS.
Here's the question: if the machine is stolen, can the files be accessed? I understand you'd have to hack the password in order to get on the machine, but would it be possible to take the hard drive out, set it as a slave on another machine and access the files that way?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Very possible as stated above. If this is a concern of yours you might check in to removable storage devices. I recommend that to those with roommates, etc.
The quickest and easist would be for them to change the Administrator password.
There are utilities (Linux Boot / Password Recovery) that without removing the Hard drive, a person could change the administrator account within a matter of minutes and have full access to the hard drive and the data as well.
There are utilities (Linux Boot / Password Recovery) that without removing the Hard drive, a person could change the administrator account within a matter of minutes and have full access to the hard drive and the data as well.
ASKER
Can I setup encryption on this drive? Doesn't XP have the ability to make files private?
Hope these Help
http://www.truecrypt.org/
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx
http://www.nacs.uci.edu/security/New_Pages/EFSforWindows.html
http://labmice.techtarget.com/windowsxp/FileMgmt/default.htm <<<------ Scroll down to EFS
http://www.petri.co.il/new_efs_features_in_windows_xp.htm
http://www.truecrypt.org/
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx
http://www.nacs.uci.edu/security/New_Pages/EFSforWindows.html
http://labmice.techtarget.com/windowsxp/FileMgmt/default.htm <<<------ Scroll down to EFS
http://www.petri.co.il/new_efs_features_in_windows_xp.htm
Hello hull,
if your computer is stolen, you lost all your data no matter if it's encrypted or decrypted because, administrator's password of windows xp can be easily resetted, and admin can take ownership of files aswell as decrypt file.
The only way I can think is that you keep your confidential data into a zip or RAR archive and protect it with long password
if your computer is stolen, you lost all your data no matter if it's encrypted or decrypted because, administrator's password of windows xp can be easily resetted, and admin can take ownership of files aswell as decrypt file.
The only way I can think is that you keep your confidential data into a zip or RAR archive and protect it with long password
My suggestion would be for mobile devices like laptops, to use some type of encryption other than Windows Encryption, I use Cryptainer LE, its free for 25MB of space. Users could store all sensitive data on this secure "drive", and if the machien is stolen, its highly unlikely anyone will be able to get into your files. They would be able to logon to the machine, but not much else. Unfortunately, until more advances in mobile device security become more widespread and affordable, like fingerprint scanners, etc, there isn't much that you can do.