Encrypting specific folders

[Carrot63]

Hi

We are looking for a good method that we can use to encrypt specific folders on the network, for example certain HR folders. Obviously these are only available to the HR department however we would like to ensure really sensitive information has an extra level of security. We want an easy system and we do not want there to be other consequences such as Backup issues with these folders and we would obviously need some form of overriding key that could be used in case of emergency to ensure people do not lock themselves out of the data accidentally. We need it to be simple for the users concerned so that the process is always followed and fits into a normal workflow.

Any recommendations?

Thanks

[MatthewL]

Why encrypt it? Surely access control to the folders is enough?

[ZeroHour]

Would multiple users need to read/write at the same time?

[Carrot63]

The Data Protection Officer is wanting a greater level of security for certain levels of personal data.

 

- - - Updated - - -

 

Multiple users might need to be able to access it at the same time not necessarily for writing though.

[LeightonJames]

Would a veracrypt container not work for this sort of thing? I know it's far from ideal but it would allow you to put encrypt the folders in question. As long as the Veracrypt app is installed on the machine the container would be accessible.

[Cache]

Assuming a windows share, would setting up a certificate server and using EFS to encrypt the folder not serve your purpose? Have a specific user set as the recovery agent.

 

That may be very old hat now, I'll be honest say I've never looked at it.

[FN-GM]

We encrypt all our servers and SAN. So all data is encrypted. Could you do the same?

[Arthur]

We encrypt all our servers and SAN. So all data is encrypted.

You can still access the files while the servers and SAN are running though.

 

I'm guessing @carolynwhile is looking for file-level encryption software to prevent certain people (network managers, IT technicians etc.) looking at files they shouldn't or files getting copied to locations where the permissions wouldn't be retained (FAT32 formatted USB flash drives)?

[FN-GM]

You can still access the files while the servers and SAN are running though.

 

I'm guessing @carolynwhile is looking for file-level encryption software to prevent certain people (network managers, IT technicians etc.) looking at files they shouldn't or files getting copied to locations where the permissions wouldn't be retained (FAT32 formatted USB flash drives)?

Combined with correct NTFS permissions it should be fine?

[Carrot63]

Hi

Yes Arthur that is what we are thinking of. I imagined setting certain key folders to be encrypted and then each time a user needs to access files in those specific folders they would have to enter a separate password.

FN-GM What do you use to encrypt everything?

Thanks for all the responses so far I appreciate your help and advice.

Thanks