Using McAfee Safeboot-Looking for an alternative hard drive encryption solution

Hi, Can you suggest a hard drive encryption software that is easy to use and proven. We use Safeboot but have difficulties with it locking out users. It is sometimes time consuming to get the user back in. We want to be able to encrypt the drive and the preboot. I know bitlocker would work but we would have to upgrade to Win 7 Ultimate.
hal2013Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

strivoliCommented:
When reading the first part of your question I was already thinking of BitLocker. If you have 7 your best choice is (still) upgrading to Ultimate.
0
McKnifeCommented:
Basically unlocking a locked drive will be done by manually entering a masterkey. If that's not suitable, look for an encryptor that offers self-help for the users by asking security questions. Symantec pgp wde does offer those.
0
hal2013Author Commented:
Thank You. It would be great if the user could unlock the drive. The problem with safeboot is that sometimes it gets out of sync with AD or the token is corrupted, then the user cannot access and even IT has had to attempt recopvery several times before sucess.
0
PMI ACP® Project Management

Prepare for the PMI Agile Certified Practitioner (PMI-ACP)® exam, which formally recognizes your knowledge of agile principles and your skill with agile techniques.

btanExec ConsultantCommented:
truecrypt is another for consideration but it has no central admin though
http://www.truecrypt.org/docs/system-encryption#Y0

you may want to catch this as well
http://en.wikipedia.org/wiki/Comparison_of_disk_encryption_software#Features
0
McKnifeCommented:
How are things?
0
hal2013Author Commented:
Now we are locked out of the McAfee Encryption Manager - great fun. I guess I will be looking at Bitlocker and PGP sooner than expected. Thank you all for your responses.
0
btanExec ConsultantCommented:
I believe this unlock is unavoidable in most FDE solution and key is the backup schemes they provided and of course in event the recovery key is not avail and data corrupted, not even forensic is straightforward and 100% (unless there is workard like backdoor and that is not what we want). One of the potential is SecureDoc, it has PBConnex (supposedly to bring better user experience)
@ http://www.winmagic.com/products
@ http://www.winmagic.com/products/enterprise-server-encryption/pbconnex

>Practical Applications of PBConnex
@ http://www.winmagic.com/products/enterprise-server-encryption/pbconnex/item/download/24_79ea2603991cd2cd9363ff4054d8a114
Improve the User Experience - Let user authenticate to any approved encrypted device using only their network credentials. Reset user’s passwords in one place, Active Directory.

> PBConnex FAQ
@ http://www.winmagic.com/products/enterprise-server-encryption/pbconnex/item/download/23_4557f8ddf8f9015419225ee2937ba28b
Can self-help password recovery tools be used with PBConnex?
No. The Self-help Recovery function uses the local key file to recover the user’s password, but with PBConnex security, key files are not stored locally. Instead, resetting a user’s password in AD will immediately make the device accessible to them.
Users working offline can continue to use the Self-help Recovery function as long as the SES administrator pushes down a local key file to the user’s device.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
McKnifeCommented:
How are you going to go on? I don't see PBConnex as an alternative for you because resetting the AD password can not be considered self-help, as it needs the help of an admin.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Encryption

From novice to tech pro — start learning today.