I need to protect sensitive data on my computers both at home & office.
Home: Win 7 Ultimate, shared with others, I'm the only admin. Many people boot it.
Work: Windows XP Pro under domain, dedicated to me (notice the domain!) I'm a member of administrators. I'm the only person that boot it.
Probably I don't have any TPM modules.
Since I'm new to disk encryption, here are my scenarios:
Home: Use BitLocker on all volumes. Then encrypt sensitive folders (EFS) and restrict permissions. Do not forget to dump/save/password-protect any keys/certificates/etc for future use. Other people may still boot & use their own accounts.
Work: Use TrueCrypt to encrypt all volumes. Make rescue CD. Encrypt sensitive folders (EFS) and restrict permissions. Remove default admin shares to limit data access from network against other administrators.
You can use my PCs or remove my disks. Now anyone think that s/he can still access my data without password?
P.S: I assume that you are not NSA.