Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations wOOdy-Soft on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

password protecting a folder

Status
Not open for further replies.

ScubaStevo

Programmer
May 4, 2002
132
AU
Hi

How can I password protect a folder in Win XP?

Steve
 
Compress it, or encrypt it.

Under Win9x the security model permitted a password protection for a share.

That security model "disappeared" with Windows NT, Windows 2000 and XP.

Under NTFS you have a much richer security environment. Much more granular controls over who and how they can access a share.

Do not mourn the loss of password protected shares.
 
I should clarify that "Compress it, or encrypt it" addressed only password issues.

In most cases using NTFS permissions as the security model is sufficient, even without a password prompt.

 
Right click the folder in Explorer, Properties, Advanced tab, and checkmark the box at the bottom.

The filestore must be NTFS.
I warn you for stand-alone workstations, this is the least desirable, but very effective, way to accomplish your goals. Please see:
Inexpensive third products using compression, such as ZIP compression, are likely safer in most instances. Do a google search on "xp password protect folders" and see the range of options available to you. This is worth a serious study.
 
Excellent I can now encrypt the files but how can I set a password that must be entered in order to view the files and sub folders?
 
It is done at logon. Only the creator of the encrypted files with the right usrname and password can see or use or otherwise fiddle with the files.

 
oh, so there is no way a folder can be password protected even once the owner has logged in?
 
No, the point was that the Owner can encrypt a folder, but only share an encrypted file.
 
Even the use of WinZip is a possibility, having a password protection option.

There is also Encryption in XP but its use needs careful study. As per this "Gotcha" shows.

"If a user with a computer administrator account changes the password for another user, that user will lose all EFS-encrypted files, personal certificates, and stored passwords for Web sites or network resources."

Do what you want via the Security Permissions of the Folder.
Remove the Group called Users from the ACL and add the Username of the user you want to have access. Watch out for the Administrators Group, Power User, and any Everyone Group, members of these groups will have access too unless you remove those, and remember to still allow access for yourself or the Administrator.

Both a downside and a safety factor is this article.

HOW TO: Take Ownership of a File or Folder in Windows XP (Q308421)
 
Does the XP Forum have a FAQ on this issue?
I could not find one.

I nominate linney as author. I tried above.


 
What would I know I'm only a "Standard User" and I know you hate those (lol).
 
Linney,

I thought I could shame your normally gracious Assie soul into the task. It appears that your soul is as dark as that of a jolly swagman.

Let me think for a day. I will write the FAQ, as it is a persistent issue.

I keep thinking about the security models involved: Win9x, NT, Win2k & XP, and I need to simplify things for XP only. Which, the best replication of the Win9x password prompting for a share, has to come from a third-party tool.

Using the EFS features of XP for small LANs or stand-alone systems quite frankly scares me. You noted some of the concerns in your post above. The use of compressed folders of any kind, natvive or third-party, seems to me a safer bet in unmanaged settings. And I hope I expressed that affirmatively above.

But it does not offer, other thant the use of third-party software, the kind of affirmative prompting with a password to access a folder.

(linney knows this, but as a "feature" you will not see this in future enhancement to XP (or in Longhorn) a restoration of this Win9x feature. That security model is gone forever.)

I have a little list of future FAQ topics for the Forum, and this is one. Perhaps its time. What is difficult is that essentially the answer is no, there is no share level password control as you would like it to be under XP as you could under Win9x. What was done as a replacement is more powerful and more flexible, but my FAQ will unlikely convince you without third-party utilities.

Sigh.




 
Bigger sigh! Hey Scuba Stevo, just download the free PGP and you can encrypt anything you want and be asked for a password each access.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top