Setting up a secure second installation

roguemouser · 11 May 2020

I would like to ask if something can be done, and if so how to do it. I need to set up a second windows installation on my system for my work, I can do that easily enough. I'm not able to use a VM per company policy.

My reason for seeing up a separate installation is to add a layer of security by creating a work-only platform on my personal computer while still being able to use my system as I normally would when not working.

With that in mind, I'd like to know if there's any way to prevent whichever installation I'm running from accessing the other installation's files and data?

I'm comfortable using an open source bootloader such as grub2 with a little guidance of something like that would be useful.

zbook · 12 May 2020

One option to consider is dual boot:
Dual Boot Windows 10 with Windows 7 or Windows 8

Steve C · 12 May 2020

I used to work in a secure environment where we had to use removable drives in disk caddies and lock them away. You could buy two disk caddies which slot into a 5 1/4" SATA drive bay containing either a SSD or HDD with separate Windows 10 installations - you will a licence for each installation. This has the merit you can lock away the drive holding sensitive data when not in use. For example this or an alternative listed on the page StarTech.com HSB100SATBK 5.25" Trayless Hot Swap Mobile Rack for 3.5in Hard Drive: Amazon.co.uk: Computers & Accessories

NavyLCDR · 12 May 2020

1. Who is purchasing the second license for Windows, you or your company?

2. To prevent most access to the other Windows installation and files, just remove those drive letters from those partitions in disk management.

Megahertz · 12 May 2020

- Buy a HDD or SSD drive and install on your desktop.
- Detach (SATA or power cable) from the company drive.
- Install same version of Win 10 (home or Pro) on the new drive. It will activate.
- Attach (SATA or power cable) of the company drive.
- Use boot menu to choose witch drive to boot from.
- As Navy suggested, open Disk Manager (C:\Windows\System32\diskmgmt.msc) and remove the drive letters from the other drive. It will prevent to access the drive company drive when using the personal drive (and vice versa)

NavyLCDR · 12 May 2020

Megahertz said:

- Install same version of Win 10 (home or Pro) on the new drive. It will activate.

The second install will indeed activate, but in order to comply with the End User License Agreement (EULA), a second license for Windows is required.

The user can also use two separate partitions on the same drive for two separate Windows Installations.

jimbo45 · 12 May 2020

Hi there

@roguemouser

Perhaps another option is a "Windows to Go" system --still plenty of ways to create that and keep it safe.

I really though can't understand some of this "Micro Management" stuff -- nothing wrong in using VM's --why on earth your management forbids this -- probably because some underpaid management "wannabee Geek" just scraped through elementary mathematics and has never understood or used virtual machines .

Bitlocker or all sorts of other security can protect external devices etc also from "contaminating" a Windows build.

I really have issue with about 85% of these "Managers" who really contribute ZERO to a project

However if this type of organisation allows VM's why not others !!!.

Setting up a secure second installation-screenshot_20200512_175654.png

Whatever we might think of these organisations and people working for them-- I'm sure we can all sleep better in our beds at night because usually these people want to keep their country safe (similarly for other similar organisations in other countries) -- even if their methods might be questionable at times.

Motto for after the end of Corona Lockdown

Abolish all Micromanagers !!!

(For most of my clients where I use my own computers I run from a Linux Desktop at home or a Linux laptop if on site with Windows VM's --never had a single problem -- so I'd really "Have a go" at what sounds like totally B/S company policy -- and not built on any sensible evidence that it's insecure or whatever)

Classic "Micro Managers" again.

Although now "Semi Retired" it was always amazing that the better the technology got the more resistance there was to remote working -- usually due to --not the older managers but a lot of the younger ones !!

I think though the current COVID-19 situation throws up those who really pull their weight.

To borrow a modification from a current commercial running in the UK trying to recruit teachers

"Those who Can ---- do --Those who can't Manage"

Cheers

jimbo

pparks1 · 12 May 2020

I'm confused, I thought that you were trying to create a work environment on your personal machine? If this is the case, how can your work policy not allow you to use a VM on your own personal machine?

Ztruker · 13 May 2020

how can your work policy not allow you to use a VM on your own personal machine?

Easy. They tell the employee "You are not allowed to run a work related system in a Virtual Machine".
You can ignore this and set it up any way but is it worth risking your job? I wouldn't.