General Question

brownieninja's avatar

How can I keep my files completely private in Windows 7 (on a shared computer?)

Asked by brownieninja (32points) January 22nd, 2011

It has recently come to my attention that other users (there are two other user accounts on the computer, all accounts are administrators,) can access all my files, and I can access theirs.

All any of us have to do is go to C:/Users/ in windows explorer and everything is right there. I’ve tried changing the permissions, but so far everything has been ineffective. Even though after changing permissions in properties->security it looks like other accounts shouldn’t be able to access my folders, when I log on to their accounts I can still get to it.

How can I make my documents private?

Observing members: 0 Composing members: 0

11 Answers

nailpolishfanatic's avatar

I am very sure that somehow you can create a password for the documents and so only the one who knows the password can open the documents…

mrentropy's avatar

The preferable way is to take away administrator rights from everybody. This way nobody can re-grant themselves rights to your user folder.

For a good suggestion I think it would be handy if you explain a bit more about this computer. Is it a home computer that siblings or parents are on? A dorm room computer that your roommates use? A computer at work that you have a part time job at?

brownieninja's avatar

It’s a home computer. Taking away administrator rights is a last resort, as I’m not sure anyone would actually notice if I did that, but I also don’t feel comfortable doing so since I don’t technically own the computer.

I’ve taken ownership of my files, but other users can easily give themselves access anyway. Is taking away administrator privileges the only way to prevent that?

I know that in XP there’s a simple yes/no sort of option when you create your account that either lets other users access your files or not. I appreciate the new abilities for file sharing in 7, but I wish to God it weren’t so complicated.

mrentropy's avatar

It’s actually the same in XP. Anyone with administrator rights can see everything on the drive, even if you take ownership. Taking away administrator rights would take that ability away from them. But it makes other things, like installing software, more difficult.

Using the built-in file encryption might be an option. I don’t use it, and never have, but that might be keyed to the user logged in and only them. So if you logged in to your account, using your password, and then enable encryption it might stop others from peeking at your stuff. That’s something that needs to be researched because I don’t know how it works.

mrentropy's avatar

After reading through this Wiki article about it there appears to be a few caveats with using encryption.

1) I’m still not entirely sure if the files will be unreadable by other admin accounts. I think this is the case, but I’m not entirely sure.

2) If you use it, make sure you make a backup of the encryption key. I think Vista and 7 will ask you if you want to make a “disk” or USB key backup, but I’m not entirely sure.

3) If you, or someone else, changes your password then you won’t be able to recover your own files unless you paid attention to what I said in #2.

4) If you have a Home version (starter, premium, etc) then you’re probably out of luck using encryption, anyway.

All in all, sometimes it’s just easier to get a 4GB USB key and save all your files on that.

XOIIO's avatar

I can modify a batch file that I use myself for this purpose when others use my laptop. Basically you enter a password or keyword, and what it will do it set the specific folders to hidden, read-only and a system archive. That way it is hard for people to find it and it can’t be deleted by accident. I also convert the .bat file to an executable so that people can’t just right click andhit edit to see the password. If you are interested let me know, I just need the directories that the files are in Like C:\Users\brownieninja\mystuff adn whatever keywords\ passwords to lock and unlock the files. there need to be 2 different ones. I can even make it have a “My Computer” icon or something else.

jaytkay's avatar

Truecrypt ‘creates a virtual encrypted disk within a file and mounts it as a real disk. ’

Free. Works with Linux, Windows & Mac OS

http://www.truecrypt.org/

mrentropy's avatar

@jaytkay Truecrypt would be my next best suggestion next to removing admin access or using a USB key. Of course, you can also use Truecrypt to make an encrypted disk on the USB drive.

Brian1946's avatar

How about password-protecting the files?

I have Windows XP and I can password-protect my files by opening the file, going to the Menu bar, clicking on Tools > Protect Document, entering the password, and then clicking on Okay.

jerv's avatar

I am not sure about Win7, but I know that encrypting files under XP will not prevent a savvy person with an administrator’s account out; any administrator can change ownership of a file even if they cannot directly access it, and then have their way with your stuff. Password protection varies in effectiveness, but unless that password is linked to something like Truecrypt, I wouldn’t trust it against a determined snoop.

The key thing to remember here is that anything you do using built-in functions of Windows (password protection, encryption…) can be undone by any administrator, and you can’t hide files from an admin either. That is generally not true of third-party programs though.

What it really boils down to is how much you trust the other people sharing your computer and how tech-savvy they are. I know that if my roommate wanted to get into my stuff, there isn’t much I could do to stop him short of something like Truecrypt; I may know a lot about computers, but he knows at least as much as I do and has more knowledge of security than me. The main reason I am not scared by that is because he has a strong code of personal ethics (including respect for personal privacy) and also no interest in my files anyways. The same is not always true of other people who share computers.

LuckyGuy's avatar

Don’t forget, there are Administrator and Super Administrator levels. Can you open your ”‘Documents and Settings” folder?
If you are Super Admin you might be able to hide it from the others. Your best bet might be to carry a thumb drive or you can store online and use a key scrambler, or PGP encryption. Even that will not protect you if there is a key logger.
What @jerv said is true. Your security depends upon the skills and ethics of the people in your office.

Answer this question

Login

or

Join

to answer.

This question is in the General Section. Responses must be helpful and on-topic.

Your answer will be saved while you login or join.

Have a question? Ask Fluther!

What do you know more about?
or
Knowledge Networking @ Fluther