Hi folks, I was wondering if WinXP with SP2 has any built in file password security features. I would like to be able to lock out certain data files or applications (the actual .exe file) with a password so that the operator will have to enter a password to get access. Does anyone know if any ability to do this?
NTFS has access control lists (ACLs). I think some reading about these is the right place to start. The first Google search result I came across: http://www.pcguide.com/ref/hdd/file/ntfs/secAccess-c.html
It is critical to ensure that even if your laptop is physically lost or your PC is physically accessed by some intruder, its contents cannot be viewed/used by anyone else. Could people who have been using digital vaults comment on your experience. What are the best products available and how safe are they. Thanks
FT71, if you'd like to stay within WinXP itself, then your only option is that XP Pro (not Home), together with NTFS file system, offers the Encrypting File System, or EFS. Feel free to Google that for details, but, briefly, in Windows Explorer, right-click on a file or folder - Properties - Advanced - check box for "Encrypt contents to secure data". Pay attention to the warning if it's a file, not a folder. The file or folder is now shown in a different color and accessible only to that user. The encryption / decryption process is automatic. There is no user-defined password, so this may or may not be what you are looking for. Outside of WinXP, the sky's the limit for encryption options... Check out, e.g., CNET's download.com for some of what's out there.
My opinion: The best whole disk solution is PGP Whole Disk Encryption. The best virtual disk solution is TrueCrypt. PGP also has virtual disks but I find truecrypt lighter weight (you can bring a small program to mount the virtual disk on a PC w/o TrueCrypt installed, for example -- something you cannot do with PGP). PGP does support Aladdin tokens and multiple keys if you need that. TrueCrypt does not. Vista's BitLocker is OK but quite complex (and as of yet, less proven than PGP's Whole Disk Encryption). The one advantage of BitLocker for laptops is that it supports TPM chip in your laptop (as I recall PGP will do Aladdin tokens but not use TPM). I personally use TrueCrypt virtual disks for all sensitive data.
I ran across a pretty interesting piece of security software, sort of an internal zone alarm for a pc it seems. I've installed it but not dug in and put it to use quite yet: http://www.trustware.com/
If you have XP Pro, you have encryption capability. Just not sure how it works with Vi$ta. Here is the link: http://www.compulink.co.uk/~davedorn/computing/windows/xpencrypt1.htm