+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 29
Windows 7 Thread, Encryption Software! in Technical; We are looking at encrypting our staff laptops. Installed W7 Enterprise thinking to use bitlocker... Need TPM these laptops do ...
  1. #1

    Join Date
    Nov 2011
    Location
    Gloucester
    Posts
    326
    Thank Post
    13
    Thanked 27 Times in 26 Posts
    Rep Power
    15

    Encryption Software!

    We are looking at encrypting our staff laptops.

    Installed W7 Enterprise thinking to use bitlocker... Need TPM these laptops do not have TPM.

    Looking for some free encryption software, easy for staff to use, and will encrypt the whole hard drive.

  2. #2

    Join Date
    Nov 2010
    Posts
    433
    Thank Post
    58
    Thanked 66 Times in 57 Posts
    Rep Power
    27
    Truecrypt whole drive encryption works well for us. No TPM required, not dependent on windows version.

  3. #3

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,844
    Thank Post
    876
    Thanked 1,679 Times in 1,459 Posts
    Blog Entries
    12
    Rep Power
    444
    Another for Truecrypt

  4. #4

    LeMarchand's Avatar
    Join Date
    Jan 2008
    Location
    The deepest pits of hell
    Posts
    2,171
    Thank Post
    303
    Thanked 332 Times in 236 Posts
    Rep Power
    141
    We use TrueCrypt if we can't use BitLocker, though it involves an additional password page which the staff don't like.

    Easy to use, though - the staff just input a password at boot, then everything is as normal.

  5. #5
    Guest

    Join Date
    Jun 2009
    Posts
    3,754
    Thank Post
    1,458
    Thanked 489 Times in 375 Posts
    Rep Power
    0
    Also TrueCrypt here. We use it on all of our USB drives. Works a treat.

  6. #6

    3s-gtech's Avatar
    Join Date
    Mar 2009
    Location
    Wales
    Posts
    2,712
    Thank Post
    144
    Thanked 548 Times in 492 Posts
    Rep Power
    149
    Also on Truecrypt. Any laptops that leave the site have a password on boot, very simple. Their external HDDs are also encrypted. We went with it for the same reason - no TPMs (Lenovo X130e).
    Last edited by 3s-gtech; 14th June 2013 at 10:23 AM.

  7. #7


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,580
    Thank Post
    228
    Thanked 854 Times in 733 Posts
    Rep Power
    295
    you dont NEED a tpm for bitlocker it makes things easier but im sure it can be used with a flashdrive and pin if you dont have a tpm

  8. #8
    maark's Avatar
    Join Date
    Feb 2006
    Location
    leicester
    Posts
    470
    Thank Post
    90
    Thanked 73 Times in 65 Posts
    Rep Power
    38
    You can still use bitlocker without tpm - use a flash drive as a key. Only problem is if staff lose/forget them then you have use recovery password to start the laptop.
    Advantage of bitlocker is that recovery keys are saved in active directory.

  9. #9

    Join Date
    Jul 2006
    Location
    London
    Posts
    1,256
    Thank Post
    111
    Thanked 242 Times in 193 Posts
    Blog Entries
    1
    Rep Power
    74
    And the advantage of a usb is that it forms a form of second factor authentication to get onto the laptop. If they use them, they should keep them on their personal keyring, make them less likely to be lost.

  10. #10


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,580
    Thank Post
    228
    Thanked 854 Times in 733 Posts
    Rep Power
    295
    Quote Originally Posted by psydii View Post
    And the advantage of a usb is that it forms a form of second factor authentication to get onto the laptop. If they use them, they should keep them on their personal keyring, make them less likely to be lost.
    and if you have a tpm you can be a real swine and require usb/pin/tpm to get in

  11. #11
    nicholab's Avatar
    Join Date
    Nov 2006
    Location
    Birmingham
    Posts
    1,465
    Thank Post
    4
    Thanked 97 Times in 93 Posts
    Blog Entries
    1
    Rep Power
    50
    What happens if the laptop breaks? and the motherboard is replaced?

  12. #12


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,580
    Thank Post
    228
    Thanked 854 Times in 733 Posts
    Rep Power
    295
    Quote Originally Posted by nicholab View Post
    What happens if the laptop breaks? and the motherboard is replaced?
    with bitlocker you look up the recovery key in active directory shove the drive in another win7 pc (as either boot or extra drive) and type in the 40 digit code when it asks for it

  13. #13

    LeMarchand's Avatar
    Join Date
    Jan 2008
    Location
    The deepest pits of hell
    Posts
    2,171
    Thank Post
    303
    Thanked 332 Times in 236 Posts
    Rep Power
    141
    Quote Originally Posted by maark View Post
    You can still use bitlocker without tpm - use a flash drive as a key. Only problem is if staff lose/forget them then you have use recovery password to start the laptop.
    Advantage of bitlocker is that recovery keys are saved in active directory.
    Shouldn't that be when they lose them?

    Quote Originally Posted by nicholab View Post
    What happens if the laptop breaks? and the motherboard is replaced?
    We have offline files set up, and all staff are briefed that anything not stored in the "documents" part of "My Documents" is not synced (that includes the rubbish they coat their desktops with as well as their dubiously obtained media) and that if the drive/laptop fails then such files will almost certainly be lost - so they should make their own backups. (I'm betting they don't, but that's not my problem and I will have no sympathy when the inevitable happens).

  14. #14

    Join Date
    Oct 2007
    Location
    Northamptonshire
    Posts
    310
    Thank Post
    20
    Thanked 80 Times in 68 Posts
    Rep Power
    43
    One other option is to use usb startup keys with the laptops without TPM or use Windows 8 which allows you to use password on startup as well as the usb startup option in Windows 7 for laptops without TPM.

  15. #15


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,580
    Thank Post
    228
    Thanked 854 Times in 733 Posts
    Rep Power
    295
    for bitlocker if you have server 2008r2 (and i assume 2012 is the same or near enough) go to server manager, add features, remote server admin tools, feature administration tools, and tick the bitlocker drive encryption admin utils (for windows 7 install rsat tools then do the same as above). then in active directory users and computers you get an extra tab on computer accounts

    bitlocker.jpg

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Replies: 15
    Last Post: 18th April 2011, 11:25 AM
  2. Encryption software for USB drives
    By marvin in forum Windows
    Replies: 35
    Last Post: 20th July 2010, 11:23 PM
  3. USB Encryption Software
    By marvin in forum Windows
    Replies: 14
    Last Post: 20th May 2010, 12:15 PM
  4. Easy encryption software
    By Mr.Ben in forum Windows
    Replies: 10
    Last Post: 16th June 2009, 07:41 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •