Windows 10 Home - Security Question

[anonymous-user]

I have a Win10 Home PC which has two user accounts configured. One with a strong password the other with a weak one for guests.

The PC doesn't have HDD encryption as the PC (or Win version I can't remember) doesn't support it.

Questions:

1 - Could a user once within the guest account easily hack into my more secure user account? What security exists between accounts?

2 - If the PC was stolen as it has no HDD encryption could a thief who steals the PC simply plug the HDD into another device and read it freely?

Many thanks.

[Mattt]

Anything can be hacked - depends how much level of effort.

On a simple level, no they can’t access your other user data - try it yourself.

[e-honda]

The security between accounts in win 10 is good, if the guest account had no admin rights then they could not while logged in get access to other users data if it is stored appropriately, but they could just power down and boot another os from a usb stick and be able to access everything on the hard drive.
Encryption would prevent this, its not completely unhackable but if kept up to date it will be pretty close

Win10 home now includes device encryption, but only if you sign in with a Microsoft account and have the right hardware support for device encryption, to use local account you still need to use bitlocker which is Pro / Enterprise only.

[anonymous-user]

e-honda said:

The security between accounts in win 10 is good, if the guest account had no admin rights then they could not while logged in get access to other users data if it is stored appropriately, but they could just power down and boot another os from a usb stick and be able to access everything on the hard drive.
Encryption would prevent this, its not completely unhackable but if kept up to date it will be pretty close

Win10 home now includes device encryption, but only if you sign in with a Microsoft account and have the right hardware support for device encryption, to use local account you still need to use bitlocker which is Pro / Enterprise only.

Thanks. That's what I thought. My issue is if the PC got stolen then the data on the HDD can easily be read by connecting the HDD to another machine, or as you say boot from USB etc.

I tried bitlocker and a few other things a while ago but my hardware or OS (can't remember which) didn't support something or the other. I'll get a new laptop at Christmas and that will be WIN11 and will support HDD encryption.

Thansk for your answer.

[Sheepshanks]

What's the use-case for the machine where you'd have guests logging in but you're also concerned about the security of your own data, and the possiblity that the machine could be stolen?

[anonymous-user]

Sheepshanks said:

What's the use-case for the machine where you'd have guests logging in but you're also concerned about the security of your own data, and the possiblity that the machine could be stolen?

It's just a home PC but has some documents on it which are private. I do use Winzip to zip/password protect them but a few months back I thought it would be much easier to have a strong Windows password and HDD encryption. I can't do the latter with the setup I currently have. It's a pain unzipping and zipping stuff to secure it each time.

The guest account is simply when kids visit and want to watch YouTube etc, so they have a simple password for that.

[Mattt]

Why not put the secure documents onto Cloud storage with a secure password?

[sjg]

Assuming no disk encryption:

1. someone who knows what they're doing could reset an admin account password with a Windows 10 boot CD or USB (or some alternatives that make it easier)

2. yes.

Windows 10 Home doesn't get Bitlocker but it does get device encryption (assuming your hardware supports what it needs) which will still prevent both.

[anonymous-user]

sjg said:

Assuming no disk encryption:

1. someone who knows what they're doing could reset an admin account password with a Windows 10 boot CD or USB (or some alternatives that make it easier)

2. yes.

Windows 10 Home doesn't get Bitlocker but it does get device encryption (assuming your hardware supports what it needs) which will still prevent both.

Thanks. My PC says words to the effect "PCR7 binding not possible" and "Device Encryption Support Reasons for failed automatic device encryption: TPM is not usable, PCR7 binding is not supported, Hardware Security Test Interface failed and device is not Modern Standby, Un-allowed DMA capable bus/device(s) detected, TPM is not usable".

So neither Bitlocker nor device encryption will work. You've confirmed what I thought so thanks.

I'm aiming to get a new laptop that will support device encryption as a means to give me the security I'm after. Thanks.

[anonymous-user]

Mattt said:

Why not put the secure documents onto Cloud storage with a secure password?

That's a good cheap option. I do use the cloud for some stuff but for a few reasons I need a new machine so will get one that has some security built in thanks.