Discussion on:

7
Comments

Join the conversation!

Follow via:
RSS
Email Alert
How many of you are looking to data encryption on client machines? If so, would you consider using EFS and BitLocker?
0 Votes
+ -
Yes but ... $$$$
Ron_007 5th Mar 2007
Your advise to encrypt laptop/mobile HD's is certainly good. But using Vista...?

- Bitlocker is only part of Enterprise or Ultimate -> most expensive Vista upgrades
- Bitlocker is feature limited -> BitLocker won't encrypt additional hard drive volumes
- will existing laptops be able to run the high end Vista? Not likely if it was purchased before 2006
- are 3rd party HD encryption tools more cost and feature effective? I suspect they are, espcially since they will run XP and current laptop

Personally, I wish all of the Vista boosters would make note of which of the 6 versions (don't forget Enterprise and 64bit) of Vista actually support the wonderful features! All to often (from M$) you see "upgrade to Vista for $99" and later in the article they mention Aero, Windows (Ultimate) Extras, Media Center, or BitLocker etc
- Home premium doesn't even have Backup included!

http://tech.cybernetnews.com/windows-vista-feature-comparison-home-basic-home-premium-business-enterprise-ultimate/ - Vista features detailed comparison chart
http://www.microsoft.com/downloads/details.aspx?FamilyID=bbc16ebf-4823-4a12-afe1-5b40b2ad3725&DisplayLang=en - Detailed Vista features comparison chart, msx format
http://news.com.com/Security+Bites+Podcast+Is+Vistas+security+worth+the+upgrade/2324-12640_3-6153876.html - Is Vista's Security worth the upgrade
EFS is included in all versions of Vista. You can use that so long as your password is strong enough to resist rainbow table attacks.
0 Votes
+ -
I am glad someone else says what I have been saying. And after almost a year later I can tell you that there are better programs / utilities free and commercial out there. After my initial analysis of Vista and as I use it to reply to this post my thoughts are the same. Why?
0 Votes
+ -
I use both BitLocker & EFS on Vista Ultimate (32-bit). I don't have a TPM, so I modified my local group policy (gpedit.msc) so enable BitLocker without a TPM. Performance is pretty good, so no complaints yet. I also use EFS to provide a secondary mechanism to protect certain confidential files from offline attack scenarios.

Other FDE (full disk encryption) products exist and support other OSes, including win2k & XP, as well as the non-Ultimate and non-Enterprise versions of Vista. This site (http://www.full-disk-encryption.net/Full_Disc_Encryption.html) has more info.

Also, to correct a previous post, only the Business, Enterprise, and Ultimate versions of Vista support EFS; i.e., the Starter, Home Basic, and Home Premium versions do not.
I will use your Article to show the Beancounters that ALL the Laptops should be running Vista.

Thank you for the Article.
(and also the job security).
0 Votes
+ -
Good to hear that these new disclosure laws are getting people to realize that real security is important.
Keyboard Shortcuts:
Prev
Next
Toggle
Join the conversation
Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

Join the TechRepublic Community and join the conversation! Signing-up is free and quick, Do it now, we want to hear your opinion.