Check out FileLocker-- I use it regularly in an academic setting (FERPA/HIPAA compliant) though since it had already been configured in my case, I can't testify to whether it's easy to get it all up and running. It is available on SourceForge, and it sounds like it hits on most of your bulletpoints: