Subscribe to Windows IT Pro
March 29, 2005 12:00 AM

Clearing the Pagefile

Windows IT Pro
InstantDoc ID #45634
Rating: (0)

What's the purpose of the Clear virtual memory pagefile security option? Why would hackers bother with scavenging a stolen computer's pagefile when they could simply access the actual files?

The Clear virtual memory pagefile setting is most useful if you're using the Encrypting File System (EFS) to protect files on the disk of a desktop or laptop. If you properly protect your confidential files with EFS, a thief can't access the files. However, while you're working on a confidential file (e.g., a Microsoft Word document), some of the application's memory might be paged out and some of the confidential file might end up in clear text in the pagefile. To save time, Windows typically doesn't clear the pagefile at shutdown because it's so large. Therefore, a thief might be able to scavenge bits and pieces or even an entire confidential file from the pagefile. If you enable this setting, Windows overwrites the bits of the pagefile prior to shutdown, making it much more difficult for an attacker to gain any information from the disk drive. If you enable the Clear virtual memory pagefile setting, you should also disable hibernation because the hibernation file also contains clear text information.

Related Content:

ARTICLE TOOLS

Comments
    There are no comments to display. Be the first one!
You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.