Steve
Wed Nov 08 22:47:51 CST 2006
This is a multi-part message in MIME format.
------=_NextPart_000_0027_01C70377.285243E0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
What risks are you trying to mitigate? Someone attempting to attack the =
computer while it's online and connected to the hotel network? Or =
someone stealing the computer?
If the former, then there are two important steps required for =
mitigating the risk: enable the Windows firewall and make sure the =
computer is always kept current with all security updates.
If the latter, then you can use EFS to encrypt the files. But since =
these are politicians, who generally aren't tech-savvy, EFS presents an =
operational challenge -- you have to remember to store the files in the =
folders that you've enabled EFS on. If you can, maybe consider using =
Windows Vista (Ultimate or Enterprise editions) for the politicians. =
Those editions include a technology called BitLocker than can encrypt =
the entire volume transparently.
--=20
Steve Riley
steve.riley@microsoft.com
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com
"Bad Beagle" <maxwelli@nospam.postalias> wrote in message =
news:ex7sBt0AHHA.3396@TK2MSFTNGP02.phx.gbl...
I am trying to weigh the pros and cons of allowing a set of users in =
my=20
enviroment to use public wireless (hotel etc). These users are s =
specific=20
group (politicians). They are travelling to hotels with their =
laptops. The=20
laptops could contain sensitive data and do not currently have any =
form of=20
encryption etc. Does anyone have any recommendations on where to =
start or=20
what to implement before allowing wireless?=20
------=_NextPart_000_0027_01C70377.285243E0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dwindows-1252">
<STYLE></STYLE>
<META content=3D"MSHTML 6.00.6000.16386" name=3DGENERATOR></HEAD>
<BODY id=3DMailContainerBody=20
style=3D"PADDING-RIGHT: 10px; PADDING-LEFT: 10px; FONT-SIZE: 10pt; =
COLOR: #000000; PADDING-TOP: 15px; FONT-FAMILY: Cambria"=20
bgColor=3D#ffffff leftMargin=3D0 topMargin=3D0 CanvasTabStop=3D"true" =
acc_role=3D"text"=20
name=3D"Compose message area">
<DIV>What risks are you trying to mitigate? Someone attempting to attack =
the=20
computer while it's online and connected to the hotel network? Or =
someone=20
stealing the computer?</DIV>
<DIV> </DIV>
<DIV>If the former, then there are two important steps required for =
mitigating=20
the risk: enable the Windows firewall and make sure the computer is =
always kept=20
current with all security updates.</DIV>
<DIV> </DIV>
<DIV>If the latter, then you can use EFS to encrypt the files. But since =
these=20
are politicians, who generally aren't tech-savvy, EFS presents an =
operational=20
challenge -- you have to remember to store the files in the folders that =
you've=20
enabled EFS on. If you can, maybe consider using Windows =
Vista (Ultimate or=20
Enterprise editions) for the politicians. Those editions include a=20
technology called BitLocker than can encrypt the entire volume=20
transparently.</DIV>
<DIV><BR>-- <BR>Steve Riley<BR><A =
title=3Dmailto:steve.riley@microsoft.com=20
href=3D"mailto:steve.riley@microsoft.com">steve.riley@microsoft.com</A><B=
R><A=20
title=3D
http://blogs.technet.com/steriley=20
href=3D"
http://blogs.technet.com/steriley">http://blogs.technet.com/steri=
ley</A><BR><A=20
title=3D
http://www.protectyourwindowsnetwork.com/=20
href=3D"
http://www.protectyourwindowsnetwork.com">http://www.protectyourw=
indowsnetwork.com</A></DIV>
<DIV> </DIV>
<DIV> </DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>"Bad Beagle" <<A title=3Dmailto:maxwelli@nospam.postalias=20
=
href=3D"mailto:maxwelli@nospam.postalias">maxwelli@nospam.postalias</A>&g=
t;=20
wrote in message <A title=3Dnews:ex7sBt0AHHA.3396@TK2MSFTNGP02.phx.gbl =
=
href=3D"news:ex7sBt0AHHA.3396@TK2MSFTNGP02.phx.gbl">news:ex7sBt0AHHA.3396=
@TK2MSFTNGP02.phx.gbl</A>...</DIV>I=20
am trying to weigh the pros and cons of allowing a set of users in my=20
<BR>enviroment to use public wireless (hotel etc). These users =
are s=20
specific <BR>group (politicians). They are travelling to hotels =
with=20
their laptops. The <BR>laptops could contain sensitive data and =
do not=20
currently have any form of <BR>encryption etc. Does anyone have =
any=20
recommendations on where to start or <BR>what to implement before =
allowing=20
wireless? <BR><BR></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_0027_01C70377.285243E0--