Entourage password protection?

[avljubimov]

Good old Outlook was password-protected. Looks like Entourage is not.
Any way to directly (without invoking computer security) password
protect this e-mailer?
Thanks in advance for all help and thoughts.
Alex
Dual 2.3 GHz G5, OS 10.4.4, 1 GB RAM, Office 11.2, Entourage 11.2.1

 

[Barry Wainwright [MVP]]

No - the built in method used in Outlook and/or Outlook Express was felt to
be less secure than the access tools built in to the system. By using
machine log in passwords a user's data is kept far more secure than a
proprietary password system on the entourage database.

 

[Corentin Cras-Méneur]

No - the built in method used in Outlook and/or Outlook Express was felt to
be less secure than the access tools built in to the system. By using
machine log in passwords a user's data is kept far more secure than a
proprietary password system on the entourage database.

With OE, you could take some of the files of the database and place them
in another database to access all the e-mails. Very very basic password
protection.


Corentin

 

[avljubimov]

No - the built in method used in Outlook and/or Outlook Express was felt to
be less secure than the access tools built in to the system. By using
machine log in passwords a user's data is kept far more secure than a
proprietary password system on the entourage database.

--
Barry Wainwright
Microsoft MVP (see http://mvp.support.microsoft.com for details)
Check out the Entourage User's WebLog for hints, tips and troubleshooting
<http://homepage.mac.com/barryw/weblog/weblog.html>

Thanks a lot for a quick reply. In a work environment, an e-mailer
should not open by a mouse click, it should require a password to open.
I really liked that feature in Outlook although you say it was very
basic. I now tried a keychain access but it does not force Entourage to
require a password when opening. Looks like the only way to protect
your e-mailer is to use computer security (log-out or sleep/screen
saver passwords).
Alex

 

[Barry Wainwright [MVP]]

Thanks a lot for a quick reply. In a work environment, an e-mailer
should not open by a mouse click, it should require a password to open.

But then, so should the computer - there is a lot more sensitive data on the
computer than the emails.

I really liked that feature in Outlook although you say it was very
basic. I now tried a keychain access but it does not force Entourage to
require a password when opening. Looks like the only way to protect
your e-mailer is to use computer security (log-out or sleep/screen
saver passwords).

And, if you are worried about people snooping, that is what you should be
doing (at the very least) anyway.

 

[Jeff Barrett]

One could take advantage of disk images. Store Entourage Identities/data on
disk images which are encrypted and password protected. Disk images then
could be authenticated and mounted to access.

 

[Corentin Cras-Méneur]

And, if you are worried about people snooping, that is what you should be
doing (at the very least) anyway.

If security is really a serious concern, then you also need FileVault
enabled...
Without it, it remains possible to boot the computer on an external
volume and access all the files despite permission settings.
It all depends on how much security you need. I believe 99% of the
people who want some security will be happy without FileVault (and that
includes me), but it's better to understand the limitations of the
security measures you have in place and make an informed choice.

Corentin

 

[avljubimov]

Thanks, everybody, for your input. Now I understand that Entourage is
not good enough in a work environment like mine. We deal with patients
and to protect their identities we need a password to open an e-mailer
connected to public folders. I don't worry personally about snooping
but the hospital guidelines are rather strict. I guess, I have to live
with an unprotected e-mailer and protect the computer. By the way, if
anybody tries to give keychain passwords for Entourage logins
(suggested in a MacFixit forum), Entourage will stop working over an
IMAP protocol (this is my setting). Another drag is that Mail.app
provided by Apple also launches without asking for a password. I still
miss the old Outlook...
Alex

 

[Corentin Cras-Méneur]

Thanks, everybody, for your input. Now I understand that Entourage is
not good enough in a work environment like mine. We deal with patients
and to protect their identities we need a password to open an e-mailer
connected to public folders. I don't worry personally about snooping
but the hospital guidelines are rather strict. I guess, I have to live
with an unprotected e-mailer and protect the computer. By the way, if
anybody tries to give keychain passwords for Entourage logins
(suggested in a MacFixit forum), Entourage will stop working over an
IMAP protocol (this is my setting). Another drag is that Mail.app
provided by Apple also launches without asking for a password. I still
miss the old Outlook...

The old outlook would not be secure enough for this type of setup.
For protecting patient's information you need:
- FileVault enabled on your account (which will encrypt the files even
if the Mac is stolen)
- the screen saver to activate after a couple ofminutes of inactivity
(and with password protection)
- to log out or lock the screen every time you go away.

Outlook asking for a password when you launch the app is definitively
not the way to go for the level of security you need.
I also hope your e-mail is going through SSL.... (we have password sent
in clear here both from the LAN and from the "outside" and that kills
me...).

Corentin

 

[Adam Bailey]

Thanks, everybody, for your input. Now I understand that Entourage is
not good enough in a work environment like mine.

Why is your work environment such that you let people use your computer
under your login that you don't trust?

If other people need to be able to access your computer, create separate
logins for them. Or create a generic "Guest" login for them.

The Mac OS is brilliantly designed for multiple users. Let it do its thing.