encryption still shows file names

njem

I've read the reasons why "make folder private" is not offered so I
used encryption on the entire folder for one user "users\joeblow".
Amazingly when I logged in as a different user I could see all the
file names in there, delete files, etc. So I used permissions and took
off permission of any groups of users and just left myself and
"system". I assumed removing "system" would lead to some problems.
Okay so now files are hidden, though I read somewhere it's not very
secure because if someone can log on as admin (or put the disk in
another system where they log on as admin) that they can re-enable
permission of admins to see the file names. Still encrypted but they
can see the names. Is this the best way to do this? Isn't there some
way to achieve the goal of "make folder private"?

Using Vista Buis.

Thanks,
Tom

Neil Harley

njem wrote:
> I've read the reasons why "make folder private" is not offered so I
> used encryption on the entire folder for one user "users\joeblow".
> Amazingly when I logged in as a different user I could see all the
> file names in there, delete files, etc. So I used permissions and took
> off permission of any groups of users and just left myself and
> "system". I assumed removing "system" would lead to some problems.
> Okay so now files are hidden, though I read somewhere it's not very
> secure because if someone can log on as admin (or put the disk in
> another system where they log on as admin) that they can re-enable
> permission of admins to see the file names. Still encrypted but they
> can see the names. Is this the best way to do this? Isn't there some
> way to achieve the goal of "make folder private"?
>
> Using Vista Buis.
>
> Thanks,
> Tom
>

I assume 'joeblow' was logged on and you used EFS to encrypt the
directory for that account. If so the filenames will still appear to all
other users as they can still access the folder.

You could deny access to the folder to users you don't want to access
it. If they attempt to open it they will not get in and an error message
will be presented.