+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 20
Windows 7 Thread, Full Disk Encryption in Technical; Hello, so I've been asked to "check out" Full Disk Encryption for Windows 7 Laptops for teachers Within my secondary ...
  1. #1

    Join Date
    Jan 2012
    Location
    Bradford
    Posts
    151
    Thank Post
    28
    Thanked 7 Times in 5 Posts
    Rep Power
    7

    Full Disk Encryption

    Hello,

    so I've been asked to "check out" Full Disk Encryption for Windows 7 Laptops for teachers Within my secondary school, Any recommendations?

  2. #2

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,818
    Thank Post
    873
    Thanked 1,675 Times in 1,458 Posts
    Blog Entries
    12
    Rep Power
    444
    Bitlocker its built into Windows 7, If you have a TPM you dont need a boot password.

  3. Thanks to FN-GM from:

    TheScarfedOne (22nd May 2013)

  4. #3

    Join Date
    Oct 2005
    Posts
    824
    Thank Post
    51
    Thanked 111 Times in 101 Posts
    Rep Power
    63
    Do your laptops have TPM chips? If so, how about Bitlocker?

    We've tested out TrueCrypt here and are quite happy with the results, but we're also Sophos AV users and have noticed that we'll get their disk encryption product bundled in for no additional cost, so we're also going to be seeing how that fairs.

  5. #4

    Join Date
    Jan 2012
    Location
    Bradford
    Posts
    151
    Thank Post
    28
    Thanked 7 Times in 5 Posts
    Rep Power
    7
    I am aware of Bitlocker and ive heard of Truecrypt but never had the pleasure of using them, any good?

    as for TPM chips, I advised which supplier to go with yet, Dell, IBM etc but once I do ill try and ensure they have the TPM chips.

  6. #5

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,818
    Thank Post
    873
    Thanked 1,675 Times in 1,458 Posts
    Blog Entries
    12
    Rep Power
    444
    If they are Dell Latitude they will have a TPM, assuming they are 5 years old or less?

  7. #6

    Join Date
    Oct 2012
    Posts
    60
    Thank Post
    7
    Thanked 21 Times in 8 Posts
    Rep Power
    21
    Truecypt here and so far it's all been kosher.

  8. #7

    Join Date
    Jan 2012
    Location
    Bradford
    Posts
    151
    Thank Post
    28
    Thanked 7 Times in 5 Posts
    Rep Power
    7
    Quote Originally Posted by FN-GM View Post
    If they are Dell Latitude they will have a TPM, assuming they are 5 years old or less?
    they will be brand new, its a Brand new building with Brand new equipment.

  9. #8

    Ephelyon's Avatar
    Join Date
    Aug 2008
    Location
    Cheshire, England
    Posts
    1,656
    Thank Post
    283
    Thanked 318 Times in 192 Posts
    Rep Power
    141
    I use DiskCryptor for full-disk encryption as it's free and I can script it as part of the auto-build process for laptops.

    BitLocker is used for staff USB stick encryption, customised to make it the "deny write to non-encrypted removable storage" GPO setting per-user rather than per-computer (though some AutoIt devilry).

  10. #9

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,711
    Thank Post
    144
    Thanked 548 Times in 492 Posts
    Rep Power
    149
    Truecrypt here, staff also get the option to encrypt their memory sticks etc. Been well received, it's very good but the interface is confusing for non-techie users.

  11. Thanks to 3s-gtech from:

    uffy2000 (22nd May 2013)

  12. #10
    Boredguy's Avatar
    Join Date
    Jun 2011
    Location
    Swindon
    Posts
    568
    Thank Post
    3
    Thanked 128 Times in 119 Posts
    Rep Power
    50
    We're starting to use Truecrypt on our staff laptops (started with the new Heads one since he's not officially with us until September so wanted any data he's been provided nice and secure )

    We already use it on staff USB drives, but we will likely roll it out to all staff laptops starting with SMT ones as and when we get them in for updates.

  13. #11
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,156
    Thank Post
    557
    Thanked 153 Times in 139 Posts
    Blog Entries
    78
    Rep Power
    80
    Bitlocker here

  14. #12

    Join Date
    Nov 2011
    Location
    Cambridgeshire
    Posts
    520
    Thank Post
    141
    Thanked 74 Times in 66 Posts
    Rep Power
    19
    Be aware that only Windows 7 enterprise supports Bitlocker. Win7 pro does not. Windows 8 pro does.

    Thanks M$

    We're trying Sophos as we have the av subscription already. Also looking at Intel anti theft, supported by some of their chipsets, although the main thing you find on google about that is problem reports.

  15. #13
    Devontechie's Avatar
    Join Date
    Nov 2007
    Location
    UK
    Posts
    889
    Thank Post
    177
    Thanked 196 Times in 160 Posts
    Rep Power
    70
    1 of my clients has TrueCrypt on all there laptops..

  16. #14


    Join Date
    Feb 2007
    Location
    51.405546, -0.510212
    Posts
    8,749
    Thank Post
    221
    Thanked 2,626 Times in 1,936 Posts
    Rep Power
    778
    Quote Originally Posted by FN-GM View Post
    Bitlocker it's built into Windows 7. If you have a TPM you don't need a boot password.
    +1 for the same reasons. Plus these...

    1. The recovery keys are stored safely in Active Directory.
    2. MDT and SCCM can automate the initial encryption of the drive.
    3. You can access the files on an encrypted drive in Windows PE (after you have supplied the recovery password). Good if you can't boot into Windows 7 or 8 and need to get the data off the drive.
    4. Windows 8 can encrypt just the space occupied with data which saves a lot of time with large HDDs. Both TrueCrypt and Windows 7 have to encrypt everything (even the empty space).
    5. eDrive support in Windows 8 means you can encrypt drives in a few seconds. Hard drives that have built-in hardware-based encryption are also supported (there should be less of a performance hit with these).
    6. Bitlocker To Go seems simpler for staff to understand compared to TrueCrypt and doesn't required any additional software to be installed.
    7. Can be controlled through Group Policy.


  17. Thanks to Arthur from:

    Alis_Klar (13th September 2013)

  18. #15

    Join Date
    Oct 2007
    Location
    Northamptonshire
    Posts
    310
    Thank Post
    20
    Thanked 80 Times in 68 Posts
    Rep Power
    43
    Quote Originally Posted by Arthur View Post
    *Windows 8 can encrypt just the space occupied with data which saves a lot of time with large HDDs. Both TrueCrypt and Windows 7 have to encrypt everything (even the empty space).
    Further to this Windows 8 allows for a user password on boot method for devices without TPM rather than the only option being the USB startup key method with Windows 7. Plus I believe standard users can change the TPM pin & the new user password method, where as with Windows 7 they had to be an administrator user.
    Last edited by Ashm; 22nd May 2013 at 09:37 PM.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 0
    Last Post: 4th May 2011, 12:16 PM
  2. Encryption of disk volumes
    By dhicks in forum *nix
    Replies: 8
    Last Post: 19th June 2008, 10:16 PM
  3. MS Publisher 2000 - Disk Full error
    By Gatt in forum Office Software
    Replies: 17
    Last Post: 5th February 2006, 08:22 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •