Programs for cryptoprotection of information on a Windows server?

Question

Cryptography

Do not prompt programs for work on the Windows server with the following characteristics:
- in the regular mode "transparent" work for users;
- in case of danger - concealment of information with the possibility of substituting information in a coercive mode?

Answer 1

VeraCrypt can encrypt disk partitions (and not only), as well as create hidden partitions inside encrypted partitions (in case of coercion, you will show a fake one).
You can unmount partitions from the GUI or command line:
https://veracrypt.codeplex.com/wikipage?title=Comm...
You can create such a shortcut or figure out how to run this command as an administrator over the network.
There are three problems to be solved:

1. Find a coercive explanation for why you are using an encrypted partition on the server. For example, against data leakage in case of physical penetration.
   
2. Algorithm for mounting a hidden partition.
   By default, partitions are mounted manually. In other words, the OS boots up, the administrator connects to the server and manually enters first the password for the encrypted partition, then the password for the hidden partition, and only after that these files will become available to users. Auto-mounting with a password can be automated, but when the server is removed, you understand, auto-mounting will also occur for enforcers.
   
3. Correct saving of user data in the event of such an emergency unmount. Although, when coercive forces appear, this may not be such a priority.