Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to protect sensitive data on my computers both at home & office.

Home: Win 7 Ultimate, shared with others, I'm the only admin. Many people boot it.

Work: Windows XP Pro under domain, dedicated to me (notice the domain!) I'm a member of administrators. I'm the only person that boot it.

Probably I don't have any TPM modules.

Since I'm new to disk encryption, here are my scenarios:

Home: Use BitLocker on all volumes. Then encrypt sensitive folders (EFS) and restrict permissions. Do not forget to dump/save/password-protect any keys/certificates/etc for future use. Other people may still boot & use their own accounts.

Work: Use TrueCrypt to encrypt all volumes. Make rescue CD. Encrypt sensitive folders (EFS) and restrict permissions. Remove default admin shares to limit data access from network against other administrators.

You can use my PCs or remove my disks. Now anyone think that s/he can still access my data without password?

P.S: I assume that you are not NSA.

share|improve this question
When dealing with security, you are allowed to assume nothing. :P It's also generally considered that for anyone trying to get at your data, if they can touch the system then the game is over and they've won. – Darth Android Jun 20 '11 at 20:48
Did you set both computers to lock after 5/10 Min of inactivity? – Arctor Jun 20 '11 at 21:44
Yes. And I usually lock my desktop when I leave. TrueCrypt with strong password (20 chars) seems OK at work. At boot time it asks for password. At home it's not an option, others would boot the PC without my password. – Nime Cloud Jun 22 '11 at 6:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.