| Author |
Message |
bu
Guest
|
 Posted:
Fri Nov 11, 2005 5:50 pm Post subject:
Remove Administrator Rights from Folder in Win2k Server |
|
|
Is there any way to completely remove Administrator rights (including the
ability to change owners, set permissions, etc) from a folder? I know all
of the risks associated with such a change, but I have a client that insists
on it.
tia,
B |
|
| Back to top |
|
 |
Steven L Umbach
Guest
|
| Posted:
Fri Nov 11, 2005 5:50 pm Post subject:
Re: Remove Administrator Rights from Folder in Win2k Server |
|
|
You can do that but it can be an exercise in futility as a skilled
administrator can always gain access again and quickly and I would explain
that to them in a not so subtle manner. If they have data that needs to be
confidential then other options such as EFS encryption [that has it's own
risks] or isolating the computer from any domain and physically securing it.
Anyhow you would need to go into Local Security Policy and remove
administrators from the user rights to backup files and directories and take
ownership of files or other objects. Those user rights apply to the whole
computer and there is no way to do it for just a folder. --- Steve
"bu" <bu@nospam.com> wrote in message news:372df.16788$7s1.923@fe04.lga...
| Quote: | Is there any way to completely remove Administrator rights (including the
ability to change owners, set permissions, etc) from a folder? I know all
of the risks associated with such a change, but I have a client that
insists
on it.
tia,
B
|
|
|
| Back to top |
|
|
bu
Guest
|
| Posted:
Fri Nov 11, 2005 9:50 pm Post subject:
Re: Remove Administrator Rights from Folder in Win2k Server |
|
|
thanks for the reply, Steven...
B
"Steven L Umbach" <n9rou@nospam-comcast.net> wrote in message
news:O2aa2Mu5FHA.3636@TK2MSFTNGP09.phx.gbl...
| Quote: | You can do that but it can be an exercise in futility as a skilled
administrator can always gain access again and quickly and I would explain
that to them in a not so subtle manner. If they have data that needs to be
confidential then other options such as EFS encryption [that has it's own
risks] or isolating the computer from any domain and physically securing
it.
Anyhow you would need to go into Local Security Policy and remove
administrators from the user rights to backup files and directories and
take
ownership of files or other objects. Those user rights apply to the whole
computer and there is no way to do it for just a folder. --- Steve
"bu" <bu@nospam.com> wrote in message news:372df.16788$7s1.923@fe04.lga...
Is there any way to completely remove Administrator rights (including
the
ability to change owners, set permissions, etc) from a folder? I know
all
of the risks associated with such a change, but I have a client that
insists
on it.
tia,
B
|
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in