Vista RTM not secure?

"Jimmy Brush" wrote:

> Correct ... your files will be encrypted (garbled) and will only be able to
> be accessed from within your account.
>
> The "key" is what is used to unlock your files. It is stored inside your
> user account and can only be used while you are logged in.
>
> Anyone trying to access your files outside of your account will not be able
> to do so, since they won't have access to your key.
>
> You should backup your key so that if you forget your password or something
> terrible happens, you will have a way to access your files.
>
> Without a backup of your key, you will lose your files if you lose access to
> your account.
>
> The encryption is the best solution, as there is no way around it. You could
> also change permissions on your personal folder to remove the access that it
> gives to administrators, but there are ways around that restriction if the
> other user is an administrator.
>
> However, if the other person isn't very "technically advanced" they may not
> know how to go about bypassing the restriction, so that may be a better
> option for you, as it won't put your data in as much risk as encryption.
>
> To use this second option, perform the following steps:
>
> - Click start
> - Type: cmd
> - Right-click cmd when it appears
> - Click Run As Administrators
> - Type the following commands into the command prompt EXACTLY as shown,
> pressing enter after each line:
>
> cd %userprofile%
> icacls . /remove Administrators
>
> (The last command will take a few minutes to complete)

Thank you very much, Jimmy.

But how can the backup key let me access my account? I mean, let's say I did
forget my password. How can I use the key to access my account?

I have DVD+RW discs and an MP3 player. Both can store data. Are they
suitable for key backups?

You'd have to have one of your family members change your password so you
could log in, and then you would have to perform the following procedure:

http://windowshelp.microsoft.com/Win...a375a1033.mspx


--
- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

Both those devices are OK to use for backups, as long as you can plug them
in to your computer and stick files on them.

The backup is just a file.

I would recommend your MP3 player if possible ... I doubt they would think
to look there (assuming they even know what you did) .


--
- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/

You must have at least two copies of the certificate (keys) used to encrypt
the files. It is very important to test encrypting a few files, transfer
then to another computer, transfer the certificate, and decrypt the files.
Until you can do this successfully DO NOT USE EVES. If for any reason the
keys are not available the data cannot be decrypted by anyone, anywhere.
There is no back door. If your hard drive fails you won't be able to read
the backup files. If another user changes your password for a joke you will
loose the data in the files. If your user profile gets corrupted by malware
you will loose the data in the files. Make sure you have at least two copies
of the certificate and you know how to use them.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Phil" <Phil@discussions.microsoft.com> wrote in message
news:AC62A4D9-8CA7-4B46-8BD0-232A4213C740@microsoft.com...

>
>
> "Jimmy Brush" wrote:
>

>
> Thank you very much, Jimmy.
>
> But how can the backup key let me access my account? I mean, let's say I
> did
> forget my password. How can I use the key to access my account?
>
> I have DVD+RW discs and an MP3 player. Both can store data. Are they
> suitable for key backups?

It is not the encryption key. It is the certificate that can be exported to
a USB key or somewhere else for safety. Anyone who has that cert can gain
access to the files, but even the owner cannot if he looses the cert. If an
admin changes your password to obtain access to your account, they can't
gain access to your encrypted files if you don't let them have the cert. If
you don't have the cert saved, after they change your password, you will
loose your files.

"Jimmy Brush" <JimmyBrush@discussions.microsoft.com> wrote in message
news:062947AB-17CF-4370-9C93-2A8B26DE67C9@microsoft.com...

> Correct ... your files will be encrypted (garbled) and will only be able
> to be accessed from within your account.
>
> The "key" is what is used to unlock your files. It is stored inside your
> user account and can only be used while you are logged in.
>
> Anyone trying to access your files outside of your account will not be
> able to do so, since they won't have access to your key.
>
> You should backup your key so that if you forget your password or
> something terrible happens, you will have a way to access your files.
>
> Without a backup of your key, you will lose your files if you lose access
> to your account.
>
> The encryption is the best solution, as there is no way around it. You
> could also change permissions on your personal folder to remove the access
> that it gives to administrators, but there are ways around that
> restriction if the other user is an administrator.
>
> However, if the other person isn't very "technically advanced" they may
> not know how to go about bypassing the restriction, so that may be a
> better option for you, as it won't put your data in as much risk as
> encryption.
>
> To use this second option, perform the following steps:
>
> - Click start
> - Type: cmd
> - Right-click cmd when it appears
> - Click Run As Administrators
> - Type the following commands into the command prompt EXACTLY as shown,
> pressing enter after each line:
>
> cd %userprofile%
> icacls . /remove Administrators
>
> (The last command will take a few minutes to complete)
>
> --
> - JB
> Microsoft MVP - Windows Shell/User
>
> Windows Vista Support Faq
> http://www.jimmah.com/vista/

Thank you all for that. Will try encrypting and see what happens.

If I run into problems, please help me...again!

Cheers all!

Darn spell checker. Should be "Until you can do this DO NOT USE EFS."

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
news:e4PuvAXTHHA.5060@TK2MSFTNGP06.phx.gbl...

> You must have at least two copies of the certificate (keys) used to
> encrypt the files. It is very important to test encrypting a few files,
> transfer then to another computer, transfer the certificate, and decrypt
> the files. Until you can do this successfully DO NOT USE EVES. If for any
> reason the keys are not available the data cannot be decrypted by anyone,
> anywhere. There is no back door. If your hard drive fails you won't be
> able to read the backup files. If another user changes your password for a
> joke you will loose the data in the files. If your user profile gets
> corrupted by malware you will loose the data in the files. Make sure you
> have at least two copies of the certificate and you know how to use them.
>
> --
> Kerry Brown
> Microsoft MVP - Shell/User
> http://www.vistahelp.ca
>
>
> "Phil" <Phil@discussions.microsoft.com> wrote in message
> news:AC62A4D9-8CA7-4B46-8BD0-232A4213C740@microsoft.com...

>

Wait....so if I needed to reformat my hard drive, and I backed up all my
files on a DVD, I can't access the backed up files on the DVD if I don't have
the certificate/key?

I can't say this strongly enough. Make sure you understand how EFS works and
test it before using it. You will loose data otherwise.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Phil" <Phil@discussions.microsoft.com> wrote in message
news:764EB022-B183-4457-AB96-8524A38D7722@microsoft.com...

> Thank you all for that. Will try encrypting and see what happens.
>
> If I run into problems, please help me...again!
>
> Cheers all!

It depends upon how the backup was made. If it backed up the encrypted data
and not the plaintext, then kiss it goodbye. Just using the same user ID
and password will not generate the same certificate two times in a row or
the encryption would be broken.

"Phil" <Phil@discussions.microsoft.com> wrote in message
news:F67040D9-29C8-444B-A6BB-7E056D77548E@microsoft.com...

> Wait....so if I needed to reformat my hard drive, and I backed up all my
> files on a DVD, I can't access the backed up files on the DVD if I don't
> have
> the certificate/key?