Hey There Fellow MS Gear Heads,

I trying to find some file based EFS solutions for some Windows XP Professional laptops.  The requirements would be that specific files not be readable if/when the laptop gets losts/stolen.

Obviously the Microsoft's Encrypred File System springs to mind... I would hope so after soooo many MS tests.  It's my understanding that Windows Certificate Management is super painful this route.  It's painful for the admin, and it's super painful for the user who is expected to manually important/export the certificates whenever they need access to the EFS.  My first question is, is this correct, has everything I've read/my experimenting completely wrong, or completely right?

Question two, can somebody recommend a solution.  PGP Desktop Home reads well but I've never used it.  In fact, I've never really done any encryption stuff before.
TrueCrypt seems best of the Free/Open stuff.

Any and all comments welcome.

TIA

Mike