Off Topic - Folder security

I'm a big fan of the TWiT network: Security Now, Tech News Today, This Week
in Enterprise Tech, and I really enjoy Triangulation.

Mark W.

On Wednesday, August 7, 2013, Jose Gomez wrote:

> **
>
>
> Mark you listen to Steve?.. Interesting I like Security Now too
>
> *Jose C Gomez*
> *Software Engineer*
> *
> *
> *
> *T: 904.469.1524 mobile
> E: jose@... <javascript:_e({}, 'cvml',
> 'jose%40josecgomez.com');>
> http://www.josecgomez.com
> <http://www.linkedin.com/in/josecgomez> <http://www.facebook.com/josegomez
> >
> <http://www.google.com/profiles/jose.gomez> <http://www.twitter.com/joc85>
> <http://www.josecgomez.com/professional-resume/>
> <http://www.josecgomez.com/feed/>
> <http://www.usdoingstuff.com>
>
> *Quis custodiet ipsos custodes?*
>
> On Wed, Aug 7, 2013 at 6:15 PM, Mark Wonsil <mark_wonsil@...<javascript:_e({}, 'cvml', 'mark_wonsil%40yahoo.com');>>
> wrote:
>
> > IMHO, when I was an IT admin, I would encourage encryption for sensitive
> > docs. I never wanted to be accused of leaking information and encryption
> > was my protection. I subscribe to the Steve Gibson school of security:
> > Trust No One - TNO. Being a Boy Scout myself, trustworthy is important
> but
> > that says nothing about the people around me or some intruder. There's
> > nothing wrong with adding multiple layers of security. Windows security
> > alone is insufficient, I would make sure these sensitive documents were
> > encrypted and the key kept with a trusted source outside the building. It
> > IS IT's responsibility to protect the document through backups, etc but
> > there's no reason to see the content of everything on the system.
> >
> > Mark W.
> >
> >
> > On Wednesday, August 7, 2013, Ned wrote:
> >
> > > **
> > >
> > >
> > > While I agree with everyone else, that your IT admin should have
> access,
> > > and
> > > that is part of the trust given to that admin to not look at the
> > > information
> > > if they know it doesn't belong to them. I am pretty sure that is part
> of
> > > the
> > > standard ethical and moral code that any trusted IT admin would have,
> if
> > > they don't have that then you should be looking for a new Admin.
> > >
> > > That being said, is something is that sensitive, it shouldn't be on
> your
> > > network, or any computer attached to your network.
> > >
> > > Go buy an encrypted USB key and keep the data on that, physical
> security
> > is
> > > always better than anything else because everything else can be
> > > circumvented. The only exception are those USB Keys, according to some
> > > friends in law enforcement, they are causing some trouble in certain
> > cased
> > > because some of those keys are so well encrypted that even the FBI(with
> > > help
> > > from the MFG) can't actually access anything that is on them for
> criminal
> > > investigations because they can't break it.
> > >
> > > -----Original Message-----
> > > From: vantage@yahoogroups.com <javascript:_e({}, 'cvml',
> 'vantage%40yahoogroups.com');> <javascript:_e({}, 'cvml',
> > > 'vantage%40yahoogroups.com');> [mailto:vantage@yahoogroups.com<javascript:_e({}, 'cvml', 'vantage%40yahoogroups.com');>
> <javascript:_e({},
> > 'cvml', 'vantage%40yahoogroups.com');>]
> > > On Behalf Of
> > > Chris Thompson
> > > Sent: Wednesday, August 07, 2013 9:22 AM
> > > To: vantage@yahoogroups.com <javascript:_e({}, 'cvml',
> 'vantage%40yahoogroups.com');> <javascript:_e({}, 'cvml',
> > > 'vantage%40yahoogroups.com');>
> > > Subject: [Vantage] Off Topic - Folder security
> > >
> > > Hi all
> > >
> > > Off topic.
> > >
> > > We have some sensitive files in a folder that we only want out
> financial
> > > controller and director to be able to access.
> > >
> > > What software can we use to lock and encrypt a folder so only people
> with
> > > the password can open the folder and view the files.
> > >
> > > We don't want anyone with admin rights to be able to.
> > >
> > > Thanks,
> > >
> > > Chris Thompson
> > >
> > > ------------------------------------
> > >
> > > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> > have
> > > already linked your email address to a yahoo id to enable access. )
> > > (1) To access the Files Section of our Yahoo!Group for Report Builder
> and
> > > Crystal Reports and other 'goodies', please goto:
> > > http://groups.yahoo.com/group/vantage/files/.
> > > (2) To search through old msg's goto:
> > > http://groups.yahoo.com/group/vantage/messages
> > > (3) To view links to Vendors that provide Vantage services goto:
> > > http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
> > >
> > >
> > >
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> > ------------------------------------
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> > have already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder and
> > Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
> >
> >
> >
> >
>
> [Non-text portions of this message have been removed]
>
>
>


[Non-text portions of this message have been removed]
Hi all

Off topic.

We have some sensitive files in a folder that we only want out financial controller and director to be able to access.

What software can we use to lock and encrypt a folder so only people with the password can open the folder and view the files.

We don't want anyone with admin rights to be able to.

Thanks,

Chris Thompson
Basic Windows permissions can accomplish this or am I missing the elephant?



From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
Chris Thompson
Sent: Wednesday, August 07, 2013 9:22 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Off Topic - Folder security





Hi all

Off topic.

We have some sensitive files in a folder that we only want out financial
controller and director to be able to access.

What software can we use to lock and encrypt a folder so only people with
the password can open the folder and view the files.

We don't want anyone with admin rights to be able to.

Thanks,

Chris Thompson





[Non-text portions of this message have been removed]
OK I really don't have an answer for you, but what if they forget the password? Just curious...

Manasa











From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of Chris Thompson
Sent: Wednesday, August 07, 2013 8:22 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Off Topic - Folder security



Hi all

Off topic.

We have some sensitive files in a folder that we only want out financial controller and director to be able to access.

What software can we use to lock and encrypt a folder so only people with the password can open the folder and view the files.

We don't want anyone with admin rights to be able to.

Thanks,

Chris Thompson



[Non-text portions of this message have been removed]
I agree with Vic.. just set Proper Windows Permissions on the Folder... you
can also use winrar or 7zip to password protect it... but seems like over
kill.


*Jose C Gomez*
*Software Engineer*
*
*
*
*T: 904.469.1524 mobile
E: jose@...
http://www.josecgomez.com
<http://www.linkedin.com/in/josecgomez> <http://www.facebook.com/josegomez>
<http://www.google.com/profiles/jose.gomez> <http://www.twitter.com/joc85>
<http://www.josecgomez.com/professional-resume/>
<http://www.josecgomez.com/feed/>
<http://www.usdoingstuff.com>

*Quis custodiet ipsos custodes?*


On Wed, Aug 7, 2013 at 9:28 AM, Vic Drecchio <vic.drecchio@...>wrote:

> **
>
>
> Basic Windows permissions can accomplish this or am I missing the elephant?
>
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
> Of
> Chris Thompson
> Sent: Wednesday, August 07, 2013 9:22 AM
> To: vantage@yahoogroups.com
> Subject: [Vantage] Off Topic - Folder security
>
>
> Hi all
>
> Off topic.
>
> We have some sensitive files in a folder that we only want out financial
> controller and director to be able to access.
>
> What software can we use to lock and encrypt a folder so only people with
> the password can open the folder and view the files.
>
> We don't want anyone with admin rights to be able to.
>
> Thanks,
>
> Chris Thompson
>
> [Non-text portions of this message have been removed]
>
>
>


[Non-text portions of this message have been removed]
But can't a true admin access a folder and change permission?

The 7zip and winrar route is an option but not great.

Two users will have the password and it will be locked in a sealed package a safe for emergencies.

Chris Thompson

On 7 Aug 2013, at 14:30, Jose Gomez <jose@...> wrote:

> I agree with Vic.. just set Proper Windows Permissions on the Folder... you
> can also use winrar or 7zip to password protect it... but seems like over
> kill.
>
>
> *Jose C Gomez*
> *Software Engineer*
> *
> *
> *
> *T: 904.469.1524 mobile
> E: jose@...
> http://www.josecgomez.com
> <http://www.linkedin.com/in/josecgomez> <http://www.facebook.com/josegomez>
> <http://www.google.com/profiles/jose.gomez> <http://www.twitter.com/joc85>
> <http://www.josecgomez.com/professional-resume/>
> <http://www.josecgomez.com/feed/>
> <http://www.usdoingstuff.com>
>
> *Quis custodiet ipsos custodes?*
>
>
> On Wed, Aug 7, 2013 at 9:28 AM, Vic Drecchio <vic.drecchio@...>wrote:
>
>> **
>>
>>
>> Basic Windows permissions can accomplish this or am I missing the elephant?
>>
>> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
>> Of
>> Chris Thompson
>> Sent: Wednesday, August 07, 2013 9:22 AM
>> To: vantage@yahoogroups.com
>> Subject: [Vantage] Off Topic - Folder security
>>
>>
>> Hi all
>>
>> Off topic.
>>
>> We have some sensitive files in a folder that we only want out financial
>> controller and director to be able to access.
>>
>> What software can we use to lock and encrypt a folder so only people with
>> the password can open the folder and view the files.
>>
>> We don't want anyone with admin rights to be able to.
>>
>> Thanks,
>>
>> Chris Thompson
>>
>> [Non-text portions of this message have been removed]
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and Crystal Reports and other 'goodies', please goto: http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto: http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto: http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
>
>
>
So you're insinuating that the person with access to your network's
Administrator account cannot be trusted?



As an Administrator myself, I can see everything if I wanted to. That's all
part of being a competent, trusted IT leader.



From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
Chris Thompson
Sent: Wednesday, August 07, 2013 9:39 AM
To: vantage@yahoogroups.com
Subject: Re: [Vantage] Off Topic - Folder security





But can't a true admin access a folder and change permission?

The 7zip and winrar route is an option but not great.

Two users will have the password and it will be locked in a sealed package a
safe for emergencies.

Chris Thompson

On 7 Aug 2013, at 14:30, Jose Gomez <jose@...
<mailto:jose%40josecgomez.com> > wrote:

> I agree with Vic.. just set Proper Windows Permissions on the Folder...
you
> can also use winrar or 7zip to password protect it... but seems like over
> kill.
>
>
> *Jose C Gomez*
> *Software Engineer*
> *
> *
> *
> *T: 904.469.1524 mobile
> E: jose@... <mailto:jose%40josecgomez.com>
> http://www.josecgomez.com
> <http://www.linkedin.com/in/josecgomez>
<http://www.facebook.com/josegomez>
> <http://www.google.com/profiles/jose.gomez> <http://www.twitter.com/joc85>
> <http://www.josecgomez.com/professional-resume/>
> <http://www.josecgomez.com/feed/>
> <http://www.usdoingstuff.com>
>
> *Quis custodiet ipsos custodes?*
>
>
> On Wed, Aug 7, 2013 at 9:28 AM, Vic Drecchio <vic.drecchio@...
<mailto:vic.drecchio%40swepcotube.com> >wrote:
>
>> **
>>
>>
>> Basic Windows permissions can accomplish this or am I missing the
elephant?
>>
>> From: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
[mailto:vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ] On
Behalf
>> Of
>> Chris Thompson
>> Sent: Wednesday, August 07, 2013 9:22 AM
>> To: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
>> Subject: [Vantage] Off Topic - Folder security
>>
>>
>> Hi all
>>
>> Off topic.
>>
>> We have some sensitive files in a folder that we only want out financial
>> controller and director to be able to access.
>>
>> What software can we use to lock and encrypt a folder so only people with
>> the password can open the folder and view the files.
>>
>> We don't want anyone with admin rights to be able to.
>>
>> Thanks,
>>
>> Chris Thompson
>>
>> [Non-text portions of this message have been removed]
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
<http://groups.yahoo.com/group/vantage/files/>
> (2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
>
>
>





[Non-text portions of this message have been removed]
The administrator can see everything but there is very sensitive info that only two people should be able to see. Also needs to be encrypted for backups etc.

Chris Thompson

On 7 Aug 2013, at 15:20, "Vic Drecchio" <vic.drecchio@...> wrote:

> So you're insinuating that the person with access to your network's
> Administrator account cannot be trusted?
>
> As an Administrator myself, I can see everything if I wanted to. That's all
> part of being a competent, trusted IT leader.
>
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
> Chris Thompson
> Sent: Wednesday, August 07, 2013 9:39 AM
> To: vantage@yahoogroups.com
> Subject: Re: [Vantage] Off Topic - Folder security
>
> But can't a true admin access a folder and change permission?
>
> The 7zip and winrar route is an option but not great.
>
> Two users will have the password and it will be locked in a sealed package a
> safe for emergencies.
>
> Chris Thompson
>
> On 7 Aug 2013, at 14:30, Jose Gomez <jose@...
> <mailto:jose%40josecgomez.com> > wrote:
>
> > I agree with Vic.. just set Proper Windows Permissions on the Folder...
> you
> > can also use winrar or 7zip to password protect it... but seems like over
> > kill.
> >
> >
> > *Jose C Gomez*
> > *Software Engineer*
> > *
> > *
> > *
> > *T: 904.469.1524 mobile
> > E: jose@... <mailto:jose%40josecgomez.com>
> > http://www.josecgomez.com
> > <http://www.linkedin.com/in/josecgomez>
> <http://www.facebook.com/josegomez>
> > <http://www.google.com/profiles/jose.gomez> <http://www.twitter.com/joc85>
> > <http://www.josecgomez.com/professional-resume/>
> > <http://www.josecgomez.com/feed/>
> > <http://www.usdoingstuff.com>
> >
> > *Quis custodiet ipsos custodes?*
> >
> >
> > On Wed, Aug 7, 2013 at 9:28 AM, Vic Drecchio <vic.drecchio@...
> <mailto:vic.drecchio%40swepcotube.com> >wrote:
> >
> >> **
> >>
> >>
> >> Basic Windows permissions can accomplish this or am I missing the
> elephant?
> >>
> >> From: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> [mailto:vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ] On
> Behalf
> >> Of
> >> Chris Thompson
> >> Sent: Wednesday, August 07, 2013 9:22 AM
> >> To: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> >> Subject: [Vantage] Off Topic - Folder security
> >>
> >>
> >> Hi all
> >>
> >> Off topic.
> >>
> >> We have some sensitive files in a folder that we only want out financial
> >> controller and director to be able to access.
> >>
> >> What software can we use to lock and encrypt a folder so only people with
> >> the password can open the folder and view the files.
> >>
> >> We don't want anyone with admin rights to be able to.
> >>
> >> Thanks,
> >>
> >> Chris Thompson
> >>
> >> [Non-text portions of this message have been removed]
> >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
> > ------------------------------------
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
> already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> <http://groups.yahoo.com/group/vantage/files/>
> > (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
> >
> >
> >
>
> [Non-text portions of this message have been removed]
>
>


[Non-text portions of this message have been removed]
DropBox? Share with 2 specific email addresses... TADA!


*Jose C Gomez*
*Software Engineer*
*
*
*
*T: 904.469.1524 mobile
E: jose@...
http://www.josecgomez.com
<http://www.linkedin.com/in/josecgomez> <http://www.facebook.com/josegomez>
<http://www.google.com/profiles/jose.gomez> <http://www.twitter.com/joc85>
<http://www.josecgomez.com/professional-resume/>
<http://www.josecgomez.com/feed/>
<http://www.usdoingstuff.com>

*Quis custodiet ipsos custodes?*


On Wed, Aug 7, 2013 at 10:34 AM, Chris Thompson <chriselectrix@...>wrote:

> **
>
>
> The administrator can see everything but there is very sensitive info that
> only two people should be able to see. Also needs to be encrypted for
> backups etc.
>
> Chris Thompson
>
>
> On 7 Aug 2013, at 15:20, "Vic Drecchio" <vic.drecchio@...>
> wrote:
>
> > So you're insinuating that the person with access to your network's
> > Administrator account cannot be trusted?
> >
> > As an Administrator myself, I can see everything if I wanted to. That's
> all
> > part of being a competent, trusted IT leader.
> >
> > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> Behalf Of
> > Chris Thompson
> > Sent: Wednesday, August 07, 2013 9:39 AM
> > To: vantage@yahoogroups.com
> > Subject: Re: [Vantage] Off Topic - Folder security
> >
> > But can't a true admin access a folder and change permission?
> >
> > The 7zip and winrar route is an option but not great.
> >
> > Two users will have the password and it will be locked in a sealed
> package a
> > safe for emergencies.
> >
> > Chris Thompson
> >
> > On 7 Aug 2013, at 14:30, Jose Gomez <jose@...
> > <mailto:jose%40josecgomez.com> > wrote:
> >
> > > I agree with Vic.. just set Proper Windows Permissions on the Folder...
> > you
> > > can also use winrar or 7zip to password protect it... but seems like
> over
> > > kill.
> > >
> > >
> > > *Jose C Gomez*
> > > *Software Engineer*
> > > *
> > > *
> > > *
> > > *T: 904.469.1524 mobile
> > > E: jose@... <mailto:jose%40josecgomez.com>
> > > http://www.josecgomez.com
> > > <http://www.linkedin.com/in/josecgomez>
> > <http://www.facebook.com/josegomez>
> > > <http://www.google.com/profiles/jose.gomez> <
> http://www.twitter.com/joc85>
> > > <http://www.josecgomez.com/professional-resume/>
> > > <http://www.josecgomez.com/feed/>
> > > <http://www.usdoingstuff.com>
> > >
> > > *Quis custodiet ipsos custodes?*
> > >
> > >
> > > On Wed, Aug 7, 2013 at 9:28 AM, Vic Drecchio <
> vic.drecchio@...
> > <mailto:vic.drecchio%40swepcotube.com> >wrote:
> > >
> > >> **
> > >>
> > >>
> > >> Basic Windows permissions can accomplish this or am I missing the
> > elephant?
> > >>
> > >> From: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> > [mailto:vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ] On
> > Behalf
> > >> Of
> > >> Chris Thompson
> > >> Sent: Wednesday, August 07, 2013 9:22 AM
> > >> To: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> > >> Subject: [Vantage] Off Topic - Folder security
> > >>
> > >>
> > >> Hi all
> > >>
> > >> Off topic.
> > >>
> > >> We have some sensitive files in a folder that we only want out
> financial
> > >> controller and director to be able to access.
> > >>
> > >> What software can we use to lock and encrypt a folder so only people
> with
> > >> the password can open the folder and view the files.
> > >>
> > >> We don't want anyone with admin rights to be able to.
> > >>
> > >> Thanks,
> > >>
> > >> Chris Thompson
> > >>
> > >> [Non-text portions of this message have been removed]
> > >
> > >
> > > [Non-text portions of this message have been removed]
> > >
> > >
> > >
> > > ------------------------------------
> > >
> > > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have
> > already linked your email address to a yahoo id to enable access. )
> > > (1) To access the Files Section of our Yahoo!Group for Report Builder
> and
> > Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > <http://groups.yahoo.com/group/vantage/files/>
> > > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
> > >
> > >
> > >
> >
> > [Non-text portions of this message have been removed]
> >
> >
>
> [Non-text portions of this message have been removed]
>
>
>


[Non-text portions of this message have been removed]
I'm going to be honest it sounds like your trying to circumvent something
IT should be taking care of? I can say that as being the IT admin I'd be
pretty mad if someone tried to setup a crazy folder encryption because you
know what happens.... "Oh hey so we had this software we downloaded to
encrypt our files (that likely came with spyware). We don't remember the
password. Can you get them back?"

Joshua Giese

CTO

920.437.6400 Ext. 337

Site ID: 27450-E905700B2-SQL64

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
Of Jose Gomez
Sent: Wednesday, August 7, 2013 9:46 AM
To: Vantage
Subject: Re: [Vantage] Off Topic - Folder security

DropBox? Share with 2 specific email addresses... TADA!


*Jose C Gomez*
*Software Engineer*
*
*
*
*T: 904.469.1524 mobile
E: jose@...
http://www.josecgomez.com
<http://www.linkedin.com/in/josecgomez>
<http://www.facebook.com/josegomez>
<http://www.google.com/profiles/jose.gomez>
<http://www.twitter.com/joc85>
<http://www.josecgomez.com/professional-resume/>
<http://www.josecgomez.com/feed/>
<http://www.usdoingstuff.com>

*Quis custodiet ipsos custodes?*


On Wed, Aug 7, 2013 at 10:34 AM, Chris Thompson
<chriselectrix@...>wrote:

> **
>
>
> The administrator can see everything but there is very sensitive info
> that only two people should be able to see. Also needs to be encrypted
> for backups etc.
>
> Chris Thompson
>
>
> On 7 Aug 2013, at 15:20, "Vic Drecchio" <vic.drecchio@...>
> wrote:
>
> > So you're insinuating that the person with access to your network's
> > Administrator account cannot be trusted?
> >
> > As an Administrator myself, I can see everything if I wanted to.
> > That's
> all
> > part of being a competent, trusted IT leader.
> >
> > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> Behalf Of
> > Chris Thompson
> > Sent: Wednesday, August 07, 2013 9:39 AM
> > To: vantage@yahoogroups.com
> > Subject: Re: [Vantage] Off Topic - Folder security
> >
> > But can't a true admin access a folder and change permission?
> >
> > The 7zip and winrar route is an option but not great.
> >
> > Two users will have the password and it will be locked in a sealed
> package a
> > safe for emergencies.
> >
> > Chris Thompson
> >
> > On 7 Aug 2013, at 14:30, Jose Gomez <jose@...
> > <mailto:jose%40josecgomez.com> > wrote:
> >
> > > I agree with Vic.. just set Proper Windows Permissions on the
Folder...
> > you
> > > can also use winrar or 7zip to password protect it... but seems
> > > like
> over
> > > kill.
> > >
> > >
> > > *Jose C Gomez*
> > > *Software Engineer*
> > > *
> > > *
> > > *
> > > *T: 904.469.1524 mobile
> > > E: jose@... <mailto:jose%40josecgomez.com>
> > > http://www.josecgomez.com <http://www.linkedin.com/in/josecgomez>
> > <http://www.facebook.com/josegomez>
> > > <http://www.google.com/profiles/jose.gomez> <
> http://www.twitter.com/joc85>
> > > <http://www.josecgomez.com/professional-resume/>
> > > <http://www.josecgomez.com/feed/>
> > > <http://www.usdoingstuff.com>
> > >
> > > *Quis custodiet ipsos custodes?*
> > >
> > >
> > > On Wed, Aug 7, 2013 at 9:28 AM, Vic Drecchio <
> vic.drecchio@...
> > <mailto:vic.drecchio%40swepcotube.com> >wrote:
> > >
> > >> **
> > >>
> > >>
> > >> Basic Windows permissions can accomplish this or am I missing the
> > elephant?
> > >>
> > >> From: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> > [mailto:vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ]
> > On Behalf
> > >> Of
> > >> Chris Thompson
> > >> Sent: Wednesday, August 07, 2013 9:22 AM
> > >> To: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> > >> Subject: [Vantage] Off Topic - Folder security
> > >>
> > >>
> > >> Hi all
> > >>
> > >> Off topic.
> > >>
> > >> We have some sensitive files in a folder that we only want out
> financial
> > >> controller and director to be able to access.
> > >>
> > >> What software can we use to lock and encrypt a folder so only
> > >> people
> with
> > >> the password can open the folder and view the files.
> > >>
> > >> We don't want anyone with admin rights to be able to.
> > >>
> > >> Thanks,
> > >>
> > >> Chris Thompson
> > >>
> > >> [Non-text portions of this message have been removed]
> > >
> > >
> > > [Non-text portions of this message have been removed]
> > >
> > >
> > >
> > > ------------------------------------
> > >
> > > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
> > > must
> have
> > already linked your email address to a yahoo id to enable access. )
> > > (1) To access the Files Section of our Yahoo!Group for Report
> > > Builder
> and
> > Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > <http://groups.yahoo.com/group/vantage/files/>
> > > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
> > >
> > >
> > >
> >
> > [Non-text portions of this message have been removed]
> >
> >
>
> [Non-text portions of this message have been removed]
>
>
>


[Non-text portions of this message have been removed]



------------------------------------

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
have already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
It can be done, but I would advise against it. If you don't trust your admin, then why is he still employed. If it is company data, then the admin should be able to retrieve it in the event the two people leave (for whatever reason)

Just my opinion.

Monte Tisland
Application Systems Analyst
(and former network admin)

--- In vantage@yahoogroups.com, Joshua Giese <jgiese@...> wrote:
>
> I'm going to be honest it sounds like your trying to circumvent something
> IT should be taking care of? I can say that as being the IT admin I'd be
> pretty mad if someone tried to setup a crazy folder encryption because you
> know what happens.... "Oh hey so we had this software we downloaded to
> encrypt our files (that likely came with spyware). We don't remember the
> password. Can you get them back?"
>
> Joshua Giese
>
> CTO
>
> 920.437.6400 Ext. 337
>
> Site ID: 27450-E905700B2-SQL64
>
> -----Original Message-----
> From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf
> Of Jose Gomez
> Sent: Wednesday, August 7, 2013 9:46 AM
> To: Vantage
> Subject: Re: [Vantage] Off Topic - Folder security
>
> DropBox? Share with 2 specific email addresses... TADA!
>
>
> *Jose C Gomez*
> *Software Engineer*
> *
> *
> *
> *T: 904.469.1524 mobile
> E: jose@...
> http://www.josecgomez.com
> <http://www.linkedin.com/in/josecgomez>
> <http://www.facebook.com/josegomez>
> <http://www.google.com/profiles/jose.gomez>
> <http://www.twitter.com/joc85>
> <http://www.josecgomez.com/professional-resume/>
> <http://www.josecgomez.com/feed/>
> <http://www.usdoingstuff.com>
>
> *Quis custodiet ipsos custodes?*
>
>
> On Wed, Aug 7, 2013 at 10:34 AM, Chris Thompson
> <chriselectrix@...>wrote:
>
> > **
> >
> >
> > The administrator can see everything but there is very sensitive info
> > that only two people should be able to see. Also needs to be encrypted
> > for backups etc.
> >
> > Chris Thompson
> >
> >
> > On 7 Aug 2013, at 15:20, "Vic Drecchio" <vic.drecchio@...>
> > wrote:
> >
> > > So you're insinuating that the person with access to your network's
> > > Administrator account cannot be trusted?
> > >
> > > As an Administrator myself, I can see everything if I wanted to.
> > > That's
> > all
> > > part of being a competent, trusted IT leader.
> > >
> > > From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On
> > Behalf Of
> > > Chris Thompson
> > > Sent: Wednesday, August 07, 2013 9:39 AM
> > > To: vantage@yahoogroups.com
> > > Subject: Re: [Vantage] Off Topic - Folder security
> > >
> > > But can't a true admin access a folder and change permission?
> > >
> > > The 7zip and winrar route is an option but not great.
> > >
> > > Two users will have the password and it will be locked in a sealed
> > package a
> > > safe for emergencies.
> > >
> > > Chris Thompson
> > >
> > > On 7 Aug 2013, at 14:30, Jose Gomez <jose@...
> > > <mailto:jose%40josecgomez.com> > wrote:
> > >
> > > > I agree with Vic.. just set Proper Windows Permissions on the
> Folder...
> > > you
> > > > can also use winrar or 7zip to password protect it... but seems
> > > > like
> > over
> > > > kill.
> > > >
> > > >
> > > > *Jose C Gomez*
> > > > *Software Engineer*
> > > > *
> > > > *
> > > > *
> > > > *T: 904.469.1524 mobile
> > > > E: jose@... <mailto:jose%40josecgomez.com>
> > > > http://www.josecgomez.com <http://www.linkedin.com/in/josecgomez>
> > > <http://www.facebook.com/josegomez>
> > > > <http://www.google.com/profiles/jose.gomez> <
> > http://www.twitter.com/joc85>
> > > > <http://www.josecgomez.com/professional-resume/>
> > > > <http://www.josecgomez.com/feed/>
> > > > <http://www.usdoingstuff.com>
> > > >
> > > > *Quis custodiet ipsos custodes?*
> > > >
> > > >
> > > > On Wed, Aug 7, 2013 at 9:28 AM, Vic Drecchio <
> > vic.drecchio@...
> > > <mailto:vic.drecchio%40swepcotube.com> >wrote:
> > > >
> > > >> **
> > > >>
> > > >>
> > > >> Basic Windows permissions can accomplish this or am I missing the
> > > elephant?
> > > >>
> > > >> From: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> > > [mailto:vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com> ]
> > > On Behalf
> > > >> Of
> > > >> Chris Thompson
> > > >> Sent: Wednesday, August 07, 2013 9:22 AM
> > > >> To: vantage@yahoogroups.com <mailto:vantage%40yahoogroups.com>
> > > >> Subject: [Vantage] Off Topic - Folder security
> > > >>
> > > >>
> > > >> Hi all
> > > >>
> > > >> Off topic.
> > > >>
> > > >> We have some sensitive files in a folder that we only want out
> > financial
> > > >> controller and director to be able to access.
> > > >>
> > > >> What software can we use to lock and encrypt a folder so only
> > > >> people
> > with
> > > >> the password can open the folder and view the files.
> > > >>
> > > >> We don't want anyone with admin rights to be able to.
> > > >>
> > > >> Thanks,
> > > >>
> > > >> Chris Thompson
> > > >>
> > > >> [Non-text portions of this message have been removed]
> > > >
> > > >
> > > > [Non-text portions of this message have been removed]
> > > >
> > > >
> > > >
> > > > ------------------------------------
> > > >
> > > > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You
> > > > must
> > have
> > > already linked your email address to a yahoo id to enable access. )
> > > > (1) To access the Files Section of our Yahoo!Group for Report
> > > > Builder
> > and
> > > Crystal Reports and other 'goodies', please goto:
> > > http://groups.yahoo.com/group/vantage/files/.
> > > <http://groups.yahoo.com/group/vantage/files/>
> > > > (2) To search through old msg's goto:
> > > http://groups.yahoo.com/group/vantage/messages
> > > > (3) To view links to Vendors that provide Vantage services goto:
> > > http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
> > > >
> > > >
> > > >
> > >
> > > [Non-text portions of this message have been removed]
> > >
> > >
> >
> > [Non-text portions of this message have been removed]
> >
> >
> >
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
>
While I agree with everyone else, that your IT admin should have access, and
that is part of the trust given to that admin to not look at the information
if they know it doesn't belong to them. I am pretty sure that is part of the
standard ethical and moral code that any trusted IT admin would have, if
they don't have that then you should be looking for a new Admin.

That being said, is something is that sensitive, it shouldn't be on your
network, or any computer attached to your network.

Go buy an encrypted USB key and keep the data on that, physical security is
always better than anything else because everything else can be
circumvented. The only exception are those USB Keys, according to some
friends in law enforcement, they are causing some trouble in certain cased
because some of those keys are so well encrypted that even the FBI(with help
from the MFG) can't actually access anything that is on them for criminal
investigations because they can't break it.

-----Original Message-----
From: vantage@yahoogroups.com [mailto:vantage@yahoogroups.com] On Behalf Of
Chris Thompson
Sent: Wednesday, August 07, 2013 9:22 AM
To: vantage@yahoogroups.com
Subject: [Vantage] Off Topic - Folder security

Hi all

Off topic.

We have some sensitive files in a folder that we only want out financial
controller and director to be able to access.

What software can we use to lock and encrypt a folder so only people with
the password can open the folder and view the files.

We don't want anyone with admin rights to be able to.

Thanks,

Chris Thompson

------------------------------------

Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
already linked your email address to a yahoo id to enable access. )
(1) To access the Files Section of our Yahoo!Group for Report Builder and
Crystal Reports and other 'goodies', please goto:
http://groups.yahoo.com/group/vantage/files/.
(2) To search through old msg's goto:
http://groups.yahoo.com/group/vantage/messages
(3) To view links to Vendors that provide Vantage services goto:
http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
IMHO, when I was an IT admin, I would encourage encryption for sensitive
docs. I never wanted to be accused of leaking information and encryption
was my protection. I subscribe to the Steve Gibson school of security:
Trust No One - TNO. Being a Boy Scout myself, trustworthy is important but
that says nothing about the people around me or some intruder. There's
nothing wrong with adding multiple layers of security. Windows security
alone is insufficient, I would make sure these sensitive documents were
encrypted and the key kept with a trusted source outside the building. It
IS IT's responsibility to protect the document through backups, etc but
there's no reason to see the content of everything on the system.

Mark W.


On Wednesday, August 7, 2013, Ned wrote:

> **
>
>
> While I agree with everyone else, that your IT admin should have access,
> and
> that is part of the trust given to that admin to not look at the
> information
> if they know it doesn't belong to them. I am pretty sure that is part of
> the
> standard ethical and moral code that any trusted IT admin would have, if
> they don't have that then you should be looking for a new Admin.
>
> That being said, is something is that sensitive, it shouldn't be on your
> network, or any computer attached to your network.
>
> Go buy an encrypted USB key and keep the data on that, physical security is
> always better than anything else because everything else can be
> circumvented. The only exception are those USB Keys, according to some
> friends in law enforcement, they are causing some trouble in certain cased
> because some of those keys are so well encrypted that even the FBI(with
> help
> from the MFG) can't actually access anything that is on them for criminal
> investigations because they can't break it.
>
> -----Original Message-----
> From: vantage@yahoogroups.com <javascript:_e({}, 'cvml',
> 'vantage%40yahoogroups.com');> [mailto:vantage@yahoogroups.com<javascript:_e({}, 'cvml', 'vantage%40yahoogroups.com');>]
> On Behalf Of
> Chris Thompson
> Sent: Wednesday, August 07, 2013 9:22 AM
> To: vantage@yahoogroups.com <javascript:_e({}, 'cvml',
> 'vantage%40yahoogroups.com');>
> Subject: [Vantage] Off Topic - Folder security
>
> Hi all
>
> Off topic.
>
> We have some sensitive files in a folder that we only want out financial
> controller and director to be able to access.
>
> What software can we use to lock and encrypt a folder so only people with
> the password can open the folder and view the files.
>
> We don't want anyone with admin rights to be able to.
>
> Thanks,
>
> Chris Thompson
>
> ------------------------------------
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must have
> already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
>
>
>


[Non-text portions of this message have been removed]
Mark you listen to Steve?.. Interesting I like Security Now too


*Jose C Gomez*
*Software Engineer*
*
*
*
*T: 904.469.1524 mobile
E: jose@...
http://www.josecgomez.com
<http://www.linkedin.com/in/josecgomez> <http://www.facebook.com/josegomez>
<http://www.google.com/profiles/jose.gomez> <http://www.twitter.com/joc85>
<http://www.josecgomez.com/professional-resume/>
<http://www.josecgomez.com/feed/>
<http://www.usdoingstuff.com>

*Quis custodiet ipsos custodes?*


On Wed, Aug 7, 2013 at 6:15 PM, Mark Wonsil <mark_wonsil@...> wrote:

> IMHO, when I was an IT admin, I would encourage encryption for sensitive
> docs. I never wanted to be accused of leaking information and encryption
> was my protection. I subscribe to the Steve Gibson school of security:
> Trust No One - TNO. Being a Boy Scout myself, trustworthy is important but
> that says nothing about the people around me or some intruder. There's
> nothing wrong with adding multiple layers of security. Windows security
> alone is insufficient, I would make sure these sensitive documents were
> encrypted and the key kept with a trusted source outside the building. It
> IS IT's responsibility to protect the document through backups, etc but
> there's no reason to see the content of everything on the system.
>
> Mark W.
>
>
> On Wednesday, August 7, 2013, Ned wrote:
>
> > **
> >
> >
> > While I agree with everyone else, that your IT admin should have access,
> > and
> > that is part of the trust given to that admin to not look at the
> > information
> > if they know it doesn't belong to them. I am pretty sure that is part of
> > the
> > standard ethical and moral code that any trusted IT admin would have, if
> > they don't have that then you should be looking for a new Admin.
> >
> > That being said, is something is that sensitive, it shouldn't be on your
> > network, or any computer attached to your network.
> >
> > Go buy an encrypted USB key and keep the data on that, physical security
> is
> > always better than anything else because everything else can be
> > circumvented. The only exception are those USB Keys, according to some
> > friends in law enforcement, they are causing some trouble in certain
> cased
> > because some of those keys are so well encrypted that even the FBI(with
> > help
> > from the MFG) can't actually access anything that is on them for criminal
> > investigations because they can't break it.
> >
> > -----Original Message-----
> > From: vantage@yahoogroups.com <javascript:_e({}, 'cvml',
> > 'vantage%40yahoogroups.com');> [mailto:vantage@yahoogroups.com<javascript:_e({},
> 'cvml', 'vantage%40yahoogroups.com');>]
> > On Behalf Of
> > Chris Thompson
> > Sent: Wednesday, August 07, 2013 9:22 AM
> > To: vantage@yahoogroups.com <javascript:_e({}, 'cvml',
> > 'vantage%40yahoogroups.com');>
> > Subject: [Vantage] Off Topic - Folder security
> >
> > Hi all
> >
> > Off topic.
> >
> > We have some sensitive files in a folder that we only want out financial
> > controller and director to be able to access.
> >
> > What software can we use to lock and encrypt a folder so only people with
> > the password can open the folder and view the files.
> >
> > We don't want anyone with admin rights to be able to.
> >
> > Thanks,
> >
> > Chris Thompson
> >
> > ------------------------------------
> >
> > Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have
> > already linked your email address to a yahoo id to enable access. )
> > (1) To access the Files Section of our Yahoo!Group for Report Builder and
> > Crystal Reports and other 'goodies', please goto:
> > http://groups.yahoo.com/group/vantage/files/.
> > (2) To search through old msg's goto:
> > http://groups.yahoo.com/group/vantage/messages
> > (3) To view links to Vendors that provide Vantage services goto:
> > http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
> >
> >
> >
>
>
> [Non-text portions of this message have been removed]
>
>
>
> ------------------------------------
>
> Useful links for the Yahoo!Groups Vantage Board are: ( Note: You must
> have already linked your email address to a yahoo id to enable access. )
> (1) To access the Files Section of our Yahoo!Group for Report Builder and
> Crystal Reports and other 'goodies', please goto:
> http://groups.yahoo.com/group/vantage/files/.
> (2) To search through old msg's goto:
> http://groups.yahoo.com/group/vantage/messages
> (3) To view links to Vendors that provide Vantage services goto:
> http://groups.yahoo.com/group/vantage/linksYahoo! Groups Links
>
>
>
>


[Non-text portions of this message have been removed]