+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 29
Windows 7 Thread, Encryption Software! in Technical; We are looking at encrypting our staff laptops. Installed W7 Enterprise thinking to use bitlocker... Need TPM these laptops do ...
  1. #1

    Join Date
    Nov 2011
    Location
    Gloucester
    Posts
    354
    Thank Post
    13
    Thanked 29 Times in 28 Posts
    Rep Power
    23

    Encryption Software!

    We are looking at encrypting our staff laptops.

    Installed W7 Enterprise thinking to use bitlocker... Need TPM these laptops do not have TPM.

    Looking for some free encryption software, easy for staff to use, and will encrypt the whole hard drive.

  2. #2

    Join Date
    Nov 2010
    Posts
    483
    Thank Post
    64
    Thanked 72 Times in 59 Posts
    Rep Power
    35
    Truecrypt whole drive encryption works well for us. No TPM required, not dependent on windows version.

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    16,373
    Thank Post
    906
    Thanked 1,811 Times in 1,559 Posts
    Blog Entries
    12
    Rep Power
    468
    Another for Truecrypt

  4. #4

    LeMarchand's Avatar
    Join Date
    Jan 2008
    Location
    The deepest pits of hell
    Posts
    2,600
    Thank Post
    327
    Thanked 420 Times in 293 Posts
    Rep Power
    223
    We use TrueCrypt if we can't use BitLocker, though it involves an additional password page which the staff don't like.

    Easy to use, though - the staff just input a password at boot, then everything is as normal.

  5. #5
    Guest

    Join Date
    Jun 2009
    Posts
    3,754
    Thank Post
    1,458
    Thanked 493 Times in 376 Posts
    Rep Power
    0
    Also TrueCrypt here. We use it on all of our USB drives. Works a treat.

  6. #6

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    3,103
    Thank Post
    161
    Thanked 655 Times in 588 Posts
    Rep Power
    169
    Also on Truecrypt. Any laptops that leave the site have a password on boot, very simple. Their external HDDs are also encrypted. We went with it for the same reason - no TPMs (Lenovo X130e).
    Last edited by 3s-gtech; 14th June 2013 at 11:23 AM.

  7. #7


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,058
    Thank Post
    232
    Thanked 924 Times in 793 Posts
    Rep Power
    308
    you dont NEED a tpm for bitlocker it makes things easier but im sure it can be used with a flashdrive and pin if you dont have a tpm

  8. #8
    maark's Avatar
    Join Date
    Feb 2006
    Location
    leicester
    Posts
    488
    Thank Post
    92
    Thanked 78 Times in 69 Posts
    Rep Power
    39
    You can still use bitlocker without tpm - use a flash drive as a key. Only problem is if staff lose/forget them then you have use recovery password to start the laptop.
    Advantage of bitlocker is that recovery keys are saved in active directory.

  9. #9

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,279
    Thank Post
    115
    Thanked 247 Times in 197 Posts
    Blog Entries
    1
    Rep Power
    76
    And the advantage of a usb is that it forms a form of second factor authentication to get onto the laptop. If they use them, they should keep them on their personal keyring, make them less likely to be lost.

  10. #10


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,058
    Thank Post
    232
    Thanked 924 Times in 793 Posts
    Rep Power
    308
    Quote Originally Posted by psydii View Post
    And the advantage of a usb is that it forms a form of second factor authentication to get onto the laptop. If they use them, they should keep them on their personal keyring, make them less likely to be lost.
    and if you have a tpm you can be a real swine and require usb/pin/tpm to get in

  11. #11
    nicholab's Avatar
    Join Date
    Nov 2006
    Location
    Birmingham
    Posts
    1,568
    Thank Post
    4
    Thanked 101 Times in 97 Posts
    Blog Entries
    1
    Rep Power
    53
    What happens if the laptop breaks? and the motherboard is replaced?

  12. #12


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,058
    Thank Post
    232
    Thanked 924 Times in 793 Posts
    Rep Power
    308
    Quote Originally Posted by nicholab View Post
    What happens if the laptop breaks? and the motherboard is replaced?
    with bitlocker you look up the recovery key in active directory shove the drive in another win7 pc (as either boot or extra drive) and type in the 40 digit code when it asks for it

  13. #13

    LeMarchand's Avatar
    Join Date
    Jan 2008
    Location
    The deepest pits of hell
    Posts
    2,600
    Thank Post
    327
    Thanked 420 Times in 293 Posts
    Rep Power
    223
    Quote Originally Posted by maark View Post
    You can still use bitlocker without tpm - use a flash drive as a key. Only problem is if staff lose/forget them then you have use recovery password to start the laptop.
    Advantage of bitlocker is that recovery keys are saved in active directory.
    Shouldn't that be when they lose them?

    Quote Originally Posted by nicholab View Post
    What happens if the laptop breaks? and the motherboard is replaced?
    We have offline files set up, and all staff are briefed that anything not stored in the "documents" part of "My Documents" is not synced (that includes the rubbish they coat their desktops with as well as their dubiously obtained media) and that if the drive/laptop fails then such files will almost certainly be lost - so they should make their own backups. (I'm betting they don't, but that's not my problem and I will have no sympathy when the inevitable happens).

  14. #14

    Join Date
    Oct 2007
    Location
    Northamptonshire
    Posts
    315
    Thank Post
    22
    Thanked 83 Times in 70 Posts
    Rep Power
    45
    One other option is to use usb startup keys with the laptops without TPM or use Windows 8 which allows you to use password on startup as well as the usb startup option in Windows 7 for laptops without TPM.

  15. #15


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    7,058
    Thank Post
    232
    Thanked 924 Times in 793 Posts
    Rep Power
    308
    for bitlocker if you have server 2008r2 (and i assume 2012 is the same or near enough) go to server manager, add features, remote server admin tools, feature administration tools, and tick the bitlocker drive encryption admin utils (for windows 7 install rsat tools then do the same as above). then in active directory users and computers you get an extra tab on computer accounts

    bitlocker.jpg



SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 15
    Last Post: 18th April 2011, 12:25 PM
  2. Encryption software for USB drives
    By marvin in forum Windows
    Replies: 35
    Last Post: 21st July 2010, 12:23 AM
  3. USB Encryption Software
    By marvin in forum Windows
    Replies: 14
    Last Post: 20th May 2010, 01:15 PM
  4. Easy encryption software
    By Mr.Ben in forum Windows
    Replies: 10
    Last Post: 16th June 2009, 08:41 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •