encryption of entire harddisk

[Guest inenewbl]

Hi all. I am unable to encrypt the entire harddisk in windows xp. When i do a

right click and select properties of my c drive i can't find encrypt option.

I have to select all folders in my c drive to do the encryption. Hence when a

new folder is created in c drive it would not be encrypted. Is it possible to

encrypt the entire harddisk or entire c drive? Thks in advance.

[Guest M.I.5¾]

Re: encryption of entire harddisk

 

 

"inenewbl" <inenewbl@discussions.microsoft.com> wrote in message

news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com...

> Hi all. I am unable to encrypt the entire harddisk in windows xp. When i

> do a

> right click and select properties of my c drive i can't find encrypt

> option.

> I have to select all folders in my c drive to do the encryption. Hence

> when a

> new folder is created in c drive it would not be encrypted. Is it possible

> to

> encrypt the entire harddisk or entire c drive? Thks in advance.

 

Why do you feel the need to encrypt the entire hard disc? I cannot envisage

of a scenario where a whole C: drive needs to be encrypted. I would have

thought it was pretty bad idea anyway. Some files need to be loaded as the

PC boots but are required before XP is loaded and hence the ability to

decrypt those files.

[Guest inenewbl]

Re: encryption of entire harddisk

 

We need to encrypt a few pc as a requirement by our major customer who is

coming to audit us soon!!. Pls let me know whether it is possible to encrypt

the whole harddisk in win xp. Thk you.

 

"M.I.5¾" wrote:

>

> "inenewbl" <inenewbl@discussions.microsoft.com> wrote in message

> news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com...

> > Hi all. I am unable to encrypt the entire harddisk in windows xp. When i

> > do a

> > right click and select properties of my c drive i can't find encrypt

> > option.

> > I have to select all folders in my c drive to do the encryption. Hence

> > when a

> > new folder is created in c drive it would not be encrypted. Is it possible

> > to

> > encrypt the entire harddisk or entire c drive? Thks in advance.

>

> Why do you feel the need to encrypt the entire hard disc? I cannot envisage

> of a scenario where a whole C: drive needs to be encrypted. I would have

> thought it was pretty bad idea anyway. Some files need to be loaded as the

> PC boots but are required before XP is loaded and hence the ability to

> decrypt those files.

>

>

>

[Guest Bob I]

Re: encryption of entire harddisk

 

Open Windows Help, look up "File encryption overview" and read the

information. In summary, you cannot encrypt the entire drive.

 

inenewbl wrote:

> We need to encrypt a few pc as a requirement by our major customer who is

> coming to audit us soon!!. Pls let me know whether it is possible to encrypt

> the whole harddisk in win xp. Thk you.

>

> "M.I.5¾" wrote:

>

>

>>"inenewbl" <inenewbl@discussions.microsoft.com> wrote in message

>>news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com...

>>

>>>Hi all. I am unable to encrypt the entire harddisk in windows xp. When i

>>>do a

>>>right click and select properties of my c drive i can't find encrypt

>>>option.

>>>I have to select all folders in my c drive to do the encryption. Hence

>>>when a

>>>new folder is created in c drive it would not be encrypted. Is it possible

>>>to

>>>encrypt the entire harddisk or entire c drive? Thks in advance.

>>

>>Why do you feel the need to encrypt the entire hard disc? I cannot envisage

>>of a scenario where a whole C: drive needs to be encrypted. I would have

>>thought it was pretty bad idea anyway. Some files need to be loaded as the

>>PC boots but are required before XP is loaded and hence the ability to

>>decrypt those files.

>>

>>

>>

[Guest Lem]

Re: encryption of entire harddisk

 

inenewbl wrote:

> Hi all. I am unable to encrypt the entire harddisk in windows xp. When i do a

> right click and select properties of my c drive i can't find encrypt option.

> I have to select all folders in my c drive to do the encryption. Hence when a

> new folder is created in c drive it would not be encrypted. Is it possible to

> encrypt the entire harddisk or entire c drive? Thks in advance.

 

Danger, Will Robinson!

 

The Windows Encrypting File System is a very unforgiving application.

If you use it at all (and, as BobI mentions, you can't use it for every

file in the c:\ drive), make *sure* that you follow the "Best Practices"

outlined here: http://support.microsoft.com/kb/223316/en-us

 

*Especially* the section headed "Why you must back up your

certificates." Do not omit this step, or you *will* be sorry.

 

--

Lem -- MS-MVP

 

To the moon and back with 2K words of RAM and 36K words of ROM.

http://en.wikipedia.org/wiki/Apollo_Guidance_Computer

http://history.nasa.gov/afj/compessay.htm

[Guest Octave]

Re: encryption of entire harddisk

 

On Wed, 9 Jul 2008 23:01:01 -0700, inenewbl

<inenewbl@discussions.microsoft.com> wrote:

>Hi all. I am unable to encrypt the entire harddisk in windows xp. When i do a

>right click and select properties of my c drive i can't find encrypt option.

>I have to select all folders in my c drive to do the encryption. Hence when a

>new folder is created in c drive it would not be encrypted. Is it possible to

>encrypt the entire harddisk or entire c drive? Thks in advance.

 

Get TrueCrypt. It's free.

[Guest John John (MVP)]

Re: encryption of entire harddisk

 

If the root directory were to be encrypted it would be impossible to

boot the Windows installation, the system files boot.ini, NTDETECT.COM

and ntldr would be unreadable to the MBR IPL and the boot process would

fail. Not only is it impossible to encrypt the root directory of the

system partition, by design you cannot encrypt the root directory of any

partitions. I don't mean to be disrespectful or rude but based on what

I read in your post I see a disaster in the making! All I can tell you

is to make sure that you take the proper precautions to appoint a

recovery agent and that you backup the encryption key/certificate to a

safe location!

 

John

 

inenewbl wrote:

> We need to encrypt a few pc as a requirement by our major customer who is

> coming to audit us soon!!. Pls let me know whether it is possible to encrypt

> the whole harddisk in win xp. Thk you.

>

> "M.I.5¾" wrote:

>

>

>>"inenewbl" <inenewbl@discussions.microsoft.com> wrote in message

>>news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com...

>>

>>>Hi all. I am unable to encrypt the entire harddisk in windows xp. When i

>>>do a

>>>right click and select properties of my c drive i can't find encrypt

>>>option.

>>>I have to select all folders in my c drive to do the encryption. Hence

>>>when a

>>>new folder is created in c drive it would not be encrypted. Is it possible

>>>to

>>>encrypt the entire harddisk or entire c drive? Thks in advance.

>>

>>Why do you feel the need to encrypt the entire hard disc? I cannot envisage

>>of a scenario where a whole C: drive needs to be encrypted. I would have

>>thought it was pretty bad idea anyway. Some files need to be loaded as the

>>PC boots but are required before XP is loaded and hence the ability to

>>decrypt those files.

>>

>>

>>

[Guest HeyBub]

Re: encryption of entire harddisk

 

inenewbl wrote:

> We need to encrypt a few pc as a requirement by our major customer

> who is coming to audit us soon!!. Pls let me know whether it is

> possible to encrypt the whole harddisk in win xp. Thk you.

>

 

Your major customer is an idiot or you're not understanding the customer's

requirements.

 

How in the hell could anyone encrypt the boot loader?

 

Anyway, to answer your question, it is not possible to encrypt the boot

drive in XP, or any other operating system.

 

I suppose it IS possible to imbed a decryption routine in the computer's

BIOS for super-secret military applications, but that would defeat the

purpose of encryption!

[Guest MAP]

Re: encryption of entire harddisk

 

inenewbl wrote:

> We need to encrypt a few pc as a requirement by our major customer

> who is coming to audit us soon!!. Pls let me know whether it is

> possible to encrypt the whole harddisk in win xp. Thk you.

 

So you've been taking this customers $$$ and have not been upholding you're

part of the contract?

 

 

--

Mike Pawlak

[Guest Jeff@unknown.com]

Re: encryption of entire harddisk

 

I've used TruCrypt for this for years. Works great and it is free.

 

Jeff

 

inenewbl wrote:

> We need to encrypt a few pc as a requirement by our major customer

> who is coming to audit us soon!!. Pls let me know whether it is

> possible to encrypt the whole harddisk in win xp. Thk you.

>

> "M.I.5¾" wrote:

>

>>

>> "inenewbl" <inenewbl@discussions.microsoft.com> wrote in message

>> news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com...

>>> Hi all. I am unable to encrypt the entire harddisk in windows xp.

>>> When i do a

>>> right click and select properties of my c drive i can't find encrypt

>>> option.

>>> I have to select all folders in my c drive to do the encryption.

>>> Hence when a

>>> new folder is created in c drive it would not be encrypted. Is it

>>> possible to

>>> encrypt the entire harddisk or entire c drive? Thks in advance.

>>

>> Why do you feel the need to encrypt the entire hard disc? I cannot

>> envisage of a scenario where a whole C: drive needs to be encrypted.

>> I would have thought it was pretty bad idea anyway. Some files need

>> to be loaded as the PC boots but are required before XP is loaded

>> and hence the ability to decrypt those files.

[Guest M.I.5¾]

Re: encryption of entire harddisk

 

 

"John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message

news:ea8FwOp4IHA.3480@TK2MSFTNGP03.phx.gbl...

> If the root directory were to be encrypted it would be impossible to boot

> the Windows installation, the system files boot.ini, NTDETECT.COM and

> ntldr would be unreadable to the MBR IPL and the boot process would fail.

> Not only is it impossible to encrypt the root directory of the system

> partition, by design you cannot encrypt the root directory of any

> partitions. I don't mean to be disrespectful or rude but based on what I

> read in your post I see a disaster in the making! All I can tell you is

> to make sure that you take the proper precautions to appoint a recovery

> agent and that you backup the encryption key/certificate to a safe

> location!

>

> John

>

 

To further expand: I became aware that all the hard discs on our company

laptops are completely encrypted (and that is also a customer requirement).

This seems to have been achieved via a third party utility (this particular

one is no longer available). I do know that the encryption passwords (there

are 2 - and they are long and complicated) do have to be entered as part of

the boot up process (so presumably the encryption utility itself resides on

an unencrypted part of the disc).

 

These utilities seem to offer differing degrees of inconvenience to the

users, so you may want to research them carefully (and possibly persuade

potential vendors to demonstrate their product). I am advised that they all

give a performance hit on the laptop to one extent or another. Depending on

who your customer is (I could hazard a guess here), you may find that they

only approve a limited range of utilities.

[Guest John John (MVP)]

Re: encryption of entire harddisk

 

M.I.5¾ wrote:

> "John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message

> news:ea8FwOp4IHA.3480@TK2MSFTNGP03.phx.gbl...

>

>>If the root directory were to be encrypted it would be impossible to boot

>>the Windows installation, the system files boot.ini, NTDETECT.COM and

>>ntldr would be unreadable to the MBR IPL and the boot process would fail.

>>Not only is it impossible to encrypt the root directory of the system

>>partition, by design you cannot encrypt the root directory of any

>>partitions. I don't mean to be disrespectful or rude but based on what I

>>read in your post I see a disaster in the making! All I can tell you is

>>to make sure that you take the proper precautions to appoint a recovery

>>agent and that you backup the encryption key/certificate to a safe

>>location!

>>

>>John

>>

>

>

> To further expand: I became aware that all the hard discs on our company

> laptops are completely encrypted (and that is also a customer requirement).

> This seems to have been achieved via a third party utility (this particular

> one is no longer available). I do know that the encryption passwords (there

> are 2 - and they are long and complicated) do have to be entered as part of

> the boot up process (so presumably the encryption utility itself resides on

> an unencrypted part of the disc).

 

If the laptops are fairly new this is most likely done using the Trusted

Platform Module (TPM) chip. In essence this is a hardware based

encryption method, the keys/certificates as well as the cryptographic

engine are stored on the TPM chip. For example, Vista's BitLocker drive

encryption is an encryption method that uses TPM.

 

If TPM is unavailable then my guess is that to do full drive encryption

using software methods the encryption software relies on a non standard

MBR IPL. The point that you make that full disk encryption is a

customer requirement for their laptops is one that is becoming more

often made for corporate laptops, laptops are easily stolen or misplaced

and protecting confidential company information can be vitally important

to the company's health, protecting the confidentiality of private

customer information can be even more important so it is an area where

encryption requirements are often very stringent.

 

John

[Guest Edric]

Re: encryption of entire harddisk

 

On Fri, 11 Jul 2008 08:23:27 +0100, "M.I.5¾"

<no.one@no.where.NO_SPAM.co.uk> wrote:

>

>"John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message

>news:ea8FwOp4IHA.3480@TK2MSFTNGP03.phx.gbl...

>> If the root directory were to be encrypted it would be impossible to boot

>> the Windows installation, the system files boot.ini, NTDETECT.COM and

>> ntldr would be unreadable to the MBR IPL and the boot process would fail.

>> Not only is it impossible to encrypt the root directory of the system

>> partition, by design you cannot encrypt the root directory of any

>> partitions. I don't mean to be disrespectful or rude but based on what I

>> read in your post I see a disaster in the making! All I can tell you is

>> to make sure that you take the proper precautions to appoint a recovery

>> agent and that you backup the encryption key/certificate to a safe

>> location!

>>

>> John

>>

>

>To further expand: I became aware that all the hard discs on our company

>laptops are completely encrypted (and that is also a customer requirement).

>This seems to have been achieved via a third party utility (this particular

>one is no longer available). I do know that the encryption passwords (there

>are 2 - and they are long and complicated) do have to be entered as part of

>the boot up process (so presumably the encryption utility itself resides on

>an unencrypted part of the disc).

>

>These utilities seem to offer differing degrees of inconvenience to the

>users, so you may want to research them carefully (and possibly persuade

>potential vendors to demonstrate their product). I am advised that they all

>give a performance hit on the laptop to one extent or another. Depending on

>who your customer is (I could hazard a guess here), you may find that they

>only approve a limited range of utilities.

>

So has spoken the hypocrite