create a password protected file save but not read

[wildplum]

I would like to create a file which needs a password to save it (i.e., to modify or replace it) such that even those with admin privileges could not save the file without the password. I do not mind over user accounts being able to read the file, but I want only those with the password to be able to permanently change it.

Is there a way for me to do this in Windows 7 (and if I need additional software, what software do you recommend)?

thank you.

 

[Paul Black]

Hi wildplum, welcome to sevenforums,

This thread might help with your request:

How do I password protect a folder/file?

Or maybe this one:

How to add a password in Windows 7?

I hope this helps!

 

[Alejandro85]

Administrators always have full control over the computer, they can do literaly anything they want (that's the main purpose of the administrators group), no matter what restrictions you put, admins can lift them.

It's simply not possible to do what you want. The closer you can get is to setup permissions to a file so that only admins can write to it (thus the admin account's password becomes that "password" you want), completely stopping other users, but never other admins.

Using some encryption software, or even the rudimentary built-in EFS you can create files nobody but the owner can read, but admin can always replace or delete them.

What's your main purpose for such a protection? What attack do you want to prevent?

 

[MeOnMine]

Password Protect in WinZip.
No one, not even Admin can do anything to it without the password.
Don't forget the password because you will have a very difficult time trying to crack it.
You may have a chance if you pay big bucks for some Pro software.

 

[Alejandro85]

Password Protect in WinZip.
No one, not even Admin can do anything to it without the password.

Individual file encryption just prevents anyone (without the password) from reading it, but it can still be deleted or completely replaced by another file by someone with sufficient permissions, not to mention that they can take a copy to attack the password offline.

In addition, zip files are known to have very poor encryption (that's why cracking software exist), it's better to use rar or 7z for something like that. Or if you want real security instead, go for VeraCrypt.

 

[MeOnMine]

Sorry, I meant to say Winrar not Zip.
I use a full version of Winrar.