+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows 7 Thread, Full Disk Encryption in Technical; Hello, so I've been asked to "check out" Full Disk Encryption for Windows 7 Laptops for teachers Within my secondary ...
  1. #1

    Join Date
    Jan 2012
    Location
    Bradford
    Posts
    153
    Thank Post
    31
    Thanked 7 Times in 5 Posts
    Rep Power
    7

    Full Disk Encryption

    Hello,

    so I've been asked to "check out" Full Disk Encryption for Windows 7 Laptops for teachers Within my secondary school, Any recommendations?

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,057
    Thank Post
    888
    Thanked 1,730 Times in 1,493 Posts
    Blog Entries
    12
    Rep Power
    454
    Bitlocker its built into Windows 7, If you have a TPM you dont need a boot password.

  3. Thanks to FN-GM from:

    TheScarfedOne (22nd May 2013)

  4. #3

    Join Date
    Oct 2005
    Posts
    849
    Thank Post
    51
    Thanked 115 Times in 105 Posts
    Rep Power
    74
    Do your laptops have TPM chips? If so, how about Bitlocker?

    We've tested out TrueCrypt here and are quite happy with the results, but we're also Sophos AV users and have noticed that we'll get their disk encryption product bundled in for no additional cost, so we're also going to be seeing how that fairs.

  5. #4

    Join Date
    Jan 2012
    Location
    Bradford
    Posts
    153
    Thank Post
    31
    Thanked 7 Times in 5 Posts
    Rep Power
    7
    I am aware of Bitlocker and ive heard of Truecrypt but never had the pleasure of using them, any good?

    as for TPM chips, I advised which supplier to go with yet, Dell, IBM etc but once I do ill try and ensure they have the TPM chips.

  6. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,057
    Thank Post
    888
    Thanked 1,730 Times in 1,493 Posts
    Blog Entries
    12
    Rep Power
    454
    If they are Dell Latitude they will have a TPM, assuming they are 5 years old or less?

  7. #6

    Join Date
    Oct 2012
    Posts
    61
    Thank Post
    7
    Thanked 21 Times in 8 Posts
    Rep Power
    21
    Truecypt here and so far it's all been kosher.

  8. #7

    Join Date
    Jan 2012
    Location
    Bradford
    Posts
    153
    Thank Post
    31
    Thanked 7 Times in 5 Posts
    Rep Power
    7
    Quote Originally Posted by FN-GM View Post
    If they are Dell Latitude they will have a TPM, assuming they are 5 years old or less?
    they will be brand new, its a Brand new building with Brand new equipment.

  9. #8

    Ephelyon's Avatar
    Join Date
    Aug 2008
    Location
    Cheshire, England
    Posts
    1,708
    Thank Post
    299
    Thanked 328 Times in 201 Posts
    Rep Power
    143
    I use DiskCryptor for full-disk encryption as it's free and I can script it as part of the auto-build process for laptops.

    BitLocker is used for staff USB stick encryption, customised to make it the "deny write to non-encrypted removable storage" GPO setting per-user rather than per-computer (though some AutoIt devilry).

  10. #9

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,824
    Thank Post
    146
    Thanked 572 Times in 516 Posts
    Rep Power
    154
    Truecrypt here, staff also get the option to encrypt their memory sticks etc. Been well received, it's very good but the interface is confusing for non-techie users.

  11. Thanks to 3s-gtech from:

    uffy2000 (22nd May 2013)

  12. #10
    Boredguy's Avatar
    Join Date
    Jun 2011
    Location
    Swindon
    Posts
    600
    Thank Post
    4
    Thanked 133 Times in 124 Posts
    Rep Power
    50
    We're starting to use Truecrypt on our staff laptops (started with the new Heads one since he's not officially with us until September so wanted any data he's been provided nice and secure )

    We already use it on staff USB drives, but we will likely roll it out to all staff laptops starting with SMT ones as and when we get them in for updates.

  13. #11
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,143
    Thank Post
    677
    Thanked 169 Times in 154 Posts
    Blog Entries
    78
    Rep Power
    85
    Bitlocker here

  14. #12

    Join Date
    Nov 2011
    Location
    Cambridgeshire
    Posts
    522
    Thank Post
    141
    Thanked 75 Times in 67 Posts
    Rep Power
    19
    Be aware that only Windows 7 enterprise supports Bitlocker. Win7 pro does not. Windows 8 pro does.

    Thanks M$

    We're trying Sophos as we have the av subscription already. Also looking at Intel anti theft, supported by some of their chipsets, although the main thing you find on google about that is problem reports.

  15. #13
    Devontechie's Avatar
    Join Date
    Nov 2007
    Location
    UK
    Posts
    897
    Thank Post
    181
    Thanked 200 Times in 163 Posts
    Rep Power
    71
    1 of my clients has TrueCrypt on all there laptops..

  16. #14


    Join Date
    Feb 2007
    Location
    51.403651, -0.515458
    Posts
    9,065
    Thank Post
    232
    Thanked 2,717 Times in 2,005 Posts
    Rep Power
    795
    Quote Originally Posted by FN-GM View Post
    Bitlocker it's built into Windows 7. If you have a TPM you don't need a boot password.
    +1 for the same reasons. Plus these...

    1. The recovery keys are stored safely in Active Directory.
    2. MDT and SCCM can automate the initial encryption of the drive.
    3. You can access the files on an encrypted drive in Windows PE (after you have supplied the recovery password). Good if you can't boot into Windows 7 or 8 and need to get the data off the drive.
    4. Windows 8 can encrypt just the space occupied with data which saves a lot of time with large HDDs. Both TrueCrypt and Windows 7 have to encrypt everything (even the empty space).
    5. eDrive support in Windows 8 means you can encrypt drives in a few seconds. Hard drives that have built-in hardware-based encryption are also supported (there should be less of a performance hit with these).
    6. Bitlocker To Go seems simpler for staff to understand compared to TrueCrypt and doesn't required any additional software to be installed.
    7. Can be controlled through Group Policy.


  17. Thanks to Arthur from:

    Alis_Klar (13th September 2013)

  18. #15

    Join Date
    Oct 2007
    Location
    Northamptonshire
    Posts
    311
    Thank Post
    20
    Thanked 82 Times in 69 Posts
    Rep Power
    45
    Quote Originally Posted by Arthur View Post
    *Windows 8 can encrypt just the space occupied with data which saves a lot of time with large HDDs. Both TrueCrypt and Windows 7 have to encrypt everything (even the empty space).
    Further to this Windows 8 allows for a user password on boot method for devices without TPM rather than the only option being the USB startup key method with Windows 7. Plus I believe standard users can change the TPM pin & the new user password method, where as with Windows 7 they had to be an administrator user.
    Last edited by Ashm; 22nd May 2013 at 09:37 PM.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 0
    Last Post: 4th May 2011, 12:16 PM
  2. Encryption of disk volumes
    By dhicks in forum *nix
    Replies: 8
    Last Post: 19th June 2008, 10:16 PM
  3. MS Publisher 2000 - Disk Full error
    By Gatt in forum Office Software
    Replies: 17
    Last Post: 5th February 2006, 08:22 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •