Guest inenewbl Posted July 10, 2008 Posted July 10, 2008 Hi all. I am unable to encrypt the entire harddisk in windows xp. When i do a right click and select properties of my c drive i can't find encrypt option. I have to select all folders in my c drive to do the encryption. Hence when a new folder is created in c drive it would not be encrypted. Is it possible to encrypt the entire harddisk or entire c drive? Thks in advance.
Guest M.I.5¾ Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk "inenewbl" <inenewbl@discussions.microsoft.com> wrote in message news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com... > Hi all. I am unable to encrypt the entire harddisk in windows xp. When i > do a > right click and select properties of my c drive i can't find encrypt > option. > I have to select all folders in my c drive to do the encryption. Hence > when a > new folder is created in c drive it would not be encrypted. Is it possible > to > encrypt the entire harddisk or entire c drive? Thks in advance. Why do you feel the need to encrypt the entire hard disc? I cannot envisage of a scenario where a whole C: drive needs to be encrypted. I would have thought it was pretty bad idea anyway. Some files need to be loaded as the PC boots but are required before XP is loaded and hence the ability to decrypt those files.
Guest inenewbl Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk We need to encrypt a few pc as a requirement by our major customer who is coming to audit us soon!!. Pls let me know whether it is possible to encrypt the whole harddisk in win xp. Thk you. "M.I.5¾" wrote: > > "inenewbl" <inenewbl@discussions.microsoft.com> wrote in message > news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com... > > Hi all. I am unable to encrypt the entire harddisk in windows xp. When i > > do a > > right click and select properties of my c drive i can't find encrypt > > option. > > I have to select all folders in my c drive to do the encryption. Hence > > when a > > new folder is created in c drive it would not be encrypted. Is it possible > > to > > encrypt the entire harddisk or entire c drive? Thks in advance. > > Why do you feel the need to encrypt the entire hard disc? I cannot envisage > of a scenario where a whole C: drive needs to be encrypted. I would have > thought it was pretty bad idea anyway. Some files need to be loaded as the > PC boots but are required before XP is loaded and hence the ability to > decrypt those files. > > >
Guest Bob I Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk Open Windows Help, look up "File encryption overview" and read the information. In summary, you cannot encrypt the entire drive. inenewbl wrote: > We need to encrypt a few pc as a requirement by our major customer who is > coming to audit us soon!!. Pls let me know whether it is possible to encrypt > the whole harddisk in win xp. Thk you. > > "M.I.5¾" wrote: > > >>"inenewbl" <inenewbl@discussions.microsoft.com> wrote in message >>news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com... >> >>>Hi all. I am unable to encrypt the entire harddisk in windows xp. When i >>>do a >>>right click and select properties of my c drive i can't find encrypt >>>option. >>>I have to select all folders in my c drive to do the encryption. Hence >>>when a >>>new folder is created in c drive it would not be encrypted. Is it possible >>>to >>>encrypt the entire harddisk or entire c drive? Thks in advance. >> >>Why do you feel the need to encrypt the entire hard disc? I cannot envisage >>of a scenario where a whole C: drive needs to be encrypted. I would have >>thought it was pretty bad idea anyway. Some files need to be loaded as the >>PC boots but are required before XP is loaded and hence the ability to >>decrypt those files. >> >> >>
Guest Lem Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk inenewbl wrote: > Hi all. I am unable to encrypt the entire harddisk in windows xp. When i do a > right click and select properties of my c drive i can't find encrypt option. > I have to select all folders in my c drive to do the encryption. Hence when a > new folder is created in c drive it would not be encrypted. Is it possible to > encrypt the entire harddisk or entire c drive? Thks in advance. Danger, Will Robinson! The Windows Encrypting File System is a very unforgiving application. If you use it at all (and, as BobI mentions, you can't use it for every file in the c:\ drive), make *sure* that you follow the "Best Practices" outlined here: http://support.microsoft.com/kb/223316/en-us *Especially* the section headed "Why you must back up your certificates." Do not omit this step, or you *will* be sorry. -- Lem -- MS-MVP To the moon and back with 2K words of RAM and 36K words of ROM. http://en.wikipedia.org/wiki/Apollo_Guidance_Computer http://history.nasa.gov/afj/compessay.htm
Guest Octave Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk On Wed, 9 Jul 2008 23:01:01 -0700, inenewbl <inenewbl@discussions.microsoft.com> wrote: >Hi all. I am unable to encrypt the entire harddisk in windows xp. When i do a >right click and select properties of my c drive i can't find encrypt option. >I have to select all folders in my c drive to do the encryption. Hence when a >new folder is created in c drive it would not be encrypted. Is it possible to >encrypt the entire harddisk or entire c drive? Thks in advance. Get TrueCrypt. It's free.
Guest John John (MVP) Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk If the root directory were to be encrypted it would be impossible to boot the Windows installation, the system files boot.ini, NTDETECT.COM and ntldr would be unreadable to the MBR IPL and the boot process would fail. Not only is it impossible to encrypt the root directory of the system partition, by design you cannot encrypt the root directory of any partitions. I don't mean to be disrespectful or rude but based on what I read in your post I see a disaster in the making! All I can tell you is to make sure that you take the proper precautions to appoint a recovery agent and that you backup the encryption key/certificate to a safe location! John inenewbl wrote: > We need to encrypt a few pc as a requirement by our major customer who is > coming to audit us soon!!. Pls let me know whether it is possible to encrypt > the whole harddisk in win xp. Thk you. > > "M.I.5¾" wrote: > > >>"inenewbl" <inenewbl@discussions.microsoft.com> wrote in message >>news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com... >> >>>Hi all. I am unable to encrypt the entire harddisk in windows xp. When i >>>do a >>>right click and select properties of my c drive i can't find encrypt >>>option. >>>I have to select all folders in my c drive to do the encryption. Hence >>>when a >>>new folder is created in c drive it would not be encrypted. Is it possible >>>to >>>encrypt the entire harddisk or entire c drive? Thks in advance. >> >>Why do you feel the need to encrypt the entire hard disc? I cannot envisage >>of a scenario where a whole C: drive needs to be encrypted. I would have >>thought it was pretty bad idea anyway. Some files need to be loaded as the >>PC boots but are required before XP is loaded and hence the ability to >>decrypt those files. >> >> >>
Guest HeyBub Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk inenewbl wrote: > We need to encrypt a few pc as a requirement by our major customer > who is coming to audit us soon!!. Pls let me know whether it is > possible to encrypt the whole harddisk in win xp. Thk you. > Your major customer is an idiot or you're not understanding the customer's requirements. How in the hell could anyone encrypt the boot loader? Anyway, to answer your question, it is not possible to encrypt the boot drive in XP, or any other operating system. I suppose it IS possible to imbed a decryption routine in the computer's BIOS for super-secret military applications, but that would defeat the purpose of encryption!
Guest MAP Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk inenewbl wrote: > We need to encrypt a few pc as a requirement by our major customer > who is coming to audit us soon!!. Pls let me know whether it is > possible to encrypt the whole harddisk in win xp. Thk you. So you've been taking this customers $$$ and have not been upholding you're part of the contract? -- Mike Pawlak
Guest Jeff@unknown.com Posted July 10, 2008 Posted July 10, 2008 Re: encryption of entire harddisk I've used TruCrypt for this for years. Works great and it is free. Jeff inenewbl wrote: > We need to encrypt a few pc as a requirement by our major customer > who is coming to audit us soon!!. Pls let me know whether it is > possible to encrypt the whole harddisk in win xp. Thk you. > > "M.I.5¾" wrote: > >> >> "inenewbl" <inenewbl@discussions.microsoft.com> wrote in message >> news:5D932898-89ED-4048-8A88-FF08FC89C88E@microsoft.com... >>> Hi all. I am unable to encrypt the entire harddisk in windows xp. >>> When i do a >>> right click and select properties of my c drive i can't find encrypt >>> option. >>> I have to select all folders in my c drive to do the encryption. >>> Hence when a >>> new folder is created in c drive it would not be encrypted. Is it >>> possible to >>> encrypt the entire harddisk or entire c drive? Thks in advance. >> >> Why do you feel the need to encrypt the entire hard disc? I cannot >> envisage of a scenario where a whole C: drive needs to be encrypted. >> I would have thought it was pretty bad idea anyway. Some files need >> to be loaded as the PC boots but are required before XP is loaded >> and hence the ability to decrypt those files.
Guest M.I.5¾ Posted July 11, 2008 Posted July 11, 2008 Re: encryption of entire harddisk "John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message news:ea8FwOp4IHA.3480@TK2MSFTNGP03.phx.gbl... > If the root directory were to be encrypted it would be impossible to boot > the Windows installation, the system files boot.ini, NTDETECT.COM and > ntldr would be unreadable to the MBR IPL and the boot process would fail. > Not only is it impossible to encrypt the root directory of the system > partition, by design you cannot encrypt the root directory of any > partitions. I don't mean to be disrespectful or rude but based on what I > read in your post I see a disaster in the making! All I can tell you is > to make sure that you take the proper precautions to appoint a recovery > agent and that you backup the encryption key/certificate to a safe > location! > > John > To further expand: I became aware that all the hard discs on our company laptops are completely encrypted (and that is also a customer requirement). This seems to have been achieved via a third party utility (this particular one is no longer available). I do know that the encryption passwords (there are 2 - and they are long and complicated) do have to be entered as part of the boot up process (so presumably the encryption utility itself resides on an unencrypted part of the disc). These utilities seem to offer differing degrees of inconvenience to the users, so you may want to research them carefully (and possibly persuade potential vendors to demonstrate their product). I am advised that they all give a performance hit on the laptop to one extent or another. Depending on who your customer is (I could hazard a guess here), you may find that they only approve a limited range of utilities.
Guest John John (MVP) Posted July 11, 2008 Posted July 11, 2008 Re: encryption of entire harddisk M.I.5¾ wrote: > "John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message > news:ea8FwOp4IHA.3480@TK2MSFTNGP03.phx.gbl... > >>If the root directory were to be encrypted it would be impossible to boot >>the Windows installation, the system files boot.ini, NTDETECT.COM and >>ntldr would be unreadable to the MBR IPL and the boot process would fail. >>Not only is it impossible to encrypt the root directory of the system >>partition, by design you cannot encrypt the root directory of any >>partitions. I don't mean to be disrespectful or rude but based on what I >>read in your post I see a disaster in the making! All I can tell you is >>to make sure that you take the proper precautions to appoint a recovery >>agent and that you backup the encryption key/certificate to a safe >>location! >> >>John >> > > > To further expand: I became aware that all the hard discs on our company > laptops are completely encrypted (and that is also a customer requirement). > This seems to have been achieved via a third party utility (this particular > one is no longer available). I do know that the encryption passwords (there > are 2 - and they are long and complicated) do have to be entered as part of > the boot up process (so presumably the encryption utility itself resides on > an unencrypted part of the disc). If the laptops are fairly new this is most likely done using the Trusted Platform Module (TPM) chip. In essence this is a hardware based encryption method, the keys/certificates as well as the cryptographic engine are stored on the TPM chip. For example, Vista's BitLocker drive encryption is an encryption method that uses TPM. If TPM is unavailable then my guess is that to do full drive encryption using software methods the encryption software relies on a non standard MBR IPL. The point that you make that full disk encryption is a customer requirement for their laptops is one that is becoming more often made for corporate laptops, laptops are easily stolen or misplaced and protecting confidential company information can be vitally important to the company's health, protecting the confidentiality of private customer information can be even more important so it is an area where encryption requirements are often very stringent. John
Guest Edric Posted July 12, 2008 Posted July 12, 2008 Re: encryption of entire harddisk On Fri, 11 Jul 2008 08:23:27 +0100, "M.I.5¾" <no.one@no.where.NO_SPAM.co.uk> wrote: > >"John John (MVP)" <audetweld@nbnet.nb.ca> wrote in message >news:ea8FwOp4IHA.3480@TK2MSFTNGP03.phx.gbl... >> If the root directory were to be encrypted it would be impossible to boot >> the Windows installation, the system files boot.ini, NTDETECT.COM and >> ntldr would be unreadable to the MBR IPL and the boot process would fail. >> Not only is it impossible to encrypt the root directory of the system >> partition, by design you cannot encrypt the root directory of any >> partitions. I don't mean to be disrespectful or rude but based on what I >> read in your post I see a disaster in the making! All I can tell you is >> to make sure that you take the proper precautions to appoint a recovery >> agent and that you backup the encryption key/certificate to a safe >> location! >> >> John >> > >To further expand: I became aware that all the hard discs on our company >laptops are completely encrypted (and that is also a customer requirement). >This seems to have been achieved via a third party utility (this particular >one is no longer available). I do know that the encryption passwords (there >are 2 - and they are long and complicated) do have to be entered as part of >the boot up process (so presumably the encryption utility itself resides on >an unencrypted part of the disc). > >These utilities seem to offer differing degrees of inconvenience to the >users, so you may want to research them carefully (and possibly persuade >potential vendors to demonstrate their product). I am advised that they all >give a performance hit on the laptop to one extent or another. Depending on >who your customer is (I could hazard a guess here), you may find that they >only approve a limited range of utilities. > So has spoken the hypocrite
Recommended Posts