How to lock files, folders and documents etc on XP

[Corpse Cruncher]

I wish to lock and make files, folders documents etc, such as excel, word, works, access documents secure. I'd like to have it so a password must be entered to open them. I don't want anything seen, which I found with excel, it locks the worksheet but the contents can be seen still. I want the that function but also one that prevents the viewing as well. If that makes sense?

This is to ensure nobody tampers with them and undoes what I have done. Which at present is a real threat.

Can it be done?

I made two side to my machine, my side and the rest of the company's by creating two profile logins but, I want to lock my side up more securely so nothing, bar what is common to both, can be accessed through the other user login.

[skoob]

If your data is sensitive, I'd suggest looking into encryption. Windows XP has built in support for encryption: practicalpc.co.uk/computing/windows/xpencrypt1.htm

Another alternative is something like Truecrypt, which among other things makes it possible to hide the fact that there is encrypted data on your disk.

Of course, the downside is that encryption makes it (more or less) impossible to recover your data in case of disk or file system corruption, or if you forget your password.

You could also just store all sensitive files on a USB disk or thumbdrive, and make sure that you keep it safe (physically).

[Vitnir]

A separate program is PGPdisk http://www.pgpi.org/products/pgpdisk/
It's not developed for XP but I still use it. With this program you get a virtual disk so while you are working you open and save documents like on any other harddisk, this disk then encrypts into a file when you turn off the computer. The encrypted file can be backed up so there is no risk of loss of data. The old version that I use is freeware and there is also a newer commercial version that seems mostly targeted towards buisness.
PGPdisk also allows you to select at pass phrase rather than just a password so you can easily get a very strong security.
Edit: If you only want to make sure your kids doesnt delete your book you are working on it might be better to just copy the work to a write-only media like a CD-R and hide it.

[briquce]

In Excel and Word (ver 2002), you can go to Tools > Options > Security Tab. You will see "File encryption settings for this workbook" and "Password to open". Enter your password and click OK. You will not be able to open or view the workbook without entering the password.
In MS Access you can set a database level password. Go to Tools > Security > Set Database Password.

[kevin]

The old version that I use is freeware and there is also a newer commercial version that seems mostly targeted towards buisness.

Their website is certainly geared towards businesses (and it drives me crazy) but their product PGP Desktop Home is pretty decent. I use the Mac version (including the virtual disk feature).

http://www.pgp.com/products/desktop/home/index.html

licenses are pretty steep at $100.

On the Windows side I use the free PGP Zip which will zip and then encrypt a file. This part is free (download the 30-day demo and let it expire, the free components will keep working).

[Crossbow]

I wish to lock and make files, folders documents etc, such as excel, word, works, access documents secure. I'd like to have it so a password must be entered to open them. I don't want anything seen, which I found with excel, it locks the worksheet but the contents can be seen still. I want the that function but also one that prevents the viewing as well. If that makes sense?

This is to ensure nobody tampers with them and undoes what I have done. Which at present is a real threat.

Can it be done?

I made two side to my machine, my side and the rest of the company's by creating two profile logins but, I want to lock my side up more securely so nothing, bar what is common to both, can be accessed through the other user login.

Please try this on 'Test' folder to see if it works as you intend before doing it to your entire PC.

1) Right-click on the 'Test' folder to bring up the 'Properties'.
2) Go to the 'General' tab and then 'Advanced',
3) Go to "Compress or Encrypt attributes" and check the "Encrypt contents to secure data",
4) and "Apply".
5) When the "Apply changes to this folder, subfolders, and files" Window opens, click "OK" and provide a password.

That should do it!

[Angus McPresley]

Please try this on 'Test' folder to see if it works as you intend before doing it to your entire PC.

1) Right-click on the 'Test' folder to bring up the 'Properties'.
2) Go to the 'General' tab and then 'Advanced',
3) Go to "Compress or Encrypt attributes" and check the "Encrypt contents to secure data",
4) and "Apply".
5) When the "Apply changes to this folder, subfolders, and files" Window opens, click "OK" and provide a password.

That should do it!


I've been wanting to do this too -- unfortunately, this trick only works on NTFS partitions, not FAT (like my two drives). Alas, and a lack.

[gnome]

Please try this on 'Test' folder to see if it works as you intend before doing it to your entire PC.

1) Right-click on the 'Test' folder to bring up the 'Properties'.
2) Go to the 'General' tab and then 'Advanced',
3) Go to "Compress or Encrypt attributes" and check the "Encrypt contents to secure data",
4) and "Apply".
5) When the "Apply changes to this folder, subfolders, and files" Window opens, click "OK" and provide a password.

That should do it!

The process completed, but I was never prompted for a password... any thoughts?

[Hellbound]

The process completed, but I was never prompted for a password... any thoughts?

Encryption on NTFS drives under Windows XP is based off the user account. Log in as another user and try to access them, they should be unavailable.

[gnome]

Encryption on NTFS drives under Windows XP is based off the user account. Log in as another user and try to access them, they should be unavailable.

Yech. The whole reason I'd love a way to simply password protect a folder is to avoid the multi-user system. I tried it for a while and hated it... some software would only run under one profile because it INSISTED on keeping system files under My Documents... profiles would periodically become corrupt... I scrapped the whole scheme.

[voidx]

Is your disk partition NTFS or FAT?

If NTFS I'd say it be far easier to simply create two folders. One where everyone has say Read access, and another where only your user has Read/Write/Modify access. Then simply place documents in the appropriate folder based on who needs to see it.

My basic understanding was that you wanted two things:

The other user login to have READ access on certain documents and files but not MODIFY.

The other user login to have NO access to other documents that only you need access too...correct?

Or are there any documents that the other user login will also need MODIFY access on?

[Corpse Cruncher]

Glad I wasn't being just my usual dumb self here. I like the read and no you can't touch my stuff idea but I don't want it read either. I got access working but excel proves to be awkward, the workbook can still be opened although not worked on.

I'll give the other ideas ago as well.

Like Gnome, the computer can be accessed by other users. My side cannot, I have not given the password out but I realise my stuff is viewable to the other user account. I have no objection them looking at a folder I don't want then opening it, or any document contained within, period.

Again thanks to all. Did I ever say I love technical knowledgeable heads :D

[voidx]

Regular NTFS security permissions will work best for you here in my opinion.

If they don't need to be opening the files I'd say don't even let them have access to the folder period. However, there is an option in NTFS permissions called "List Folder Contents" which will allow the user to view which files are in a particular directory, but not to open/read/edit them.

The trick with NTFS permissions is to control them properly so unwanted permissions are not being inherited from a parent directory. In general I'd say if these are just directories holding data files (word/excel etc.) then I'd disable them from inheriting permissions and set them explicitly on these particular folders.

If you right-click a folder, click the Security tab, then click the Advanced button...at the bottom of the resulting window will be 2 check boxes. The first one starting with "Inherit from Parent the permission entries". If this is checked you can then uncheck it, it will then prompt you to either Copy, or Remove the current permission settings. You could choose remove, then add say the local administrators group (which I assume your user is a part of) and the other user account. Then set the permissions accordingly and check off the second checkbox that basically says it will push the permissions down to all child objects.

Also, the other user account, is it used to logon directly to that PC? Or do they access the folders through a network share? If through a network share you must also set the share permissions. Share permissions are not actual however...they are potential. Meaning whatever permission level you set on the share, is the maximum permission level irregardless of the security permission. So for example if you have Read rights on the share, and Full Control on the directory itself....accessing it through the share, all you get is Read permissions. The other side is that if you have Full Control on the share and only Read rights on the directory or file, you still only get read rights, but you could potentially be granted Full Control rights through the share and not have any issues.

Hopefully that helps you out some. NTFS security permissions can be pretty granular if you want them to be, and should work for you scenario fine.

[Interesting Ian]

I wish to lock and make files, folders documents etc, such as excel, word, works, access documents secure. I'd like to have it so a password must be entered to open them. I don't want anything seen, which I found with excel, it locks the worksheet but the contents can be seen still. I want the that function but also one that prevents the viewing as well. If that makes sense?



This software might suit your purposes admirably.

http://camouflage.unfiction.com/Download.html

"These days companies are given more power to monitor emails and to examine your personal files. And with more and more malicious 'spy' software being widely used, you need to be sure that files containing sensitive information are kept safe from prying eyes. Electronic privacy is no longer guaranteed - who knows who might be intercepting your emails or scanning your hard drive without your knowledge or consent?

Camouflage allows you to hide files by scrambling them and then attaching them to the file of your choice. This camouflaged file then looks and behaves like a normal file, and can be stored or emailed without attracting attention.

For example, you could create a picture file that looks and behaves exactly like any other picture file but contains hidden encrypted files, or you could hide a file inside a Word document that would not attract attention if discovered. Such files can later be safely extracted.

For additional security you can password your camouflaged file. This password will be required when extracting the files within.

You can even camouflage files within camouflaged files".

[Corpse Cruncher]

Now that is food for thought, thanks.