|
Posted by Paulo on April 23, 2007, 8:32 pm
Please log in for more thread options
Hi, how are you doing?
I would like to know if is possible to creating a folder on Windows NTFS
partition, but this folder will be hidden from all users, including
administrators, system, and all top users, excepts to a user account wich I
will create wich will have total access to folder, so when I log on the
machine using the special user, the folder will be available, because I need
to put some database files so to prevent users viewing, editing, and
avoiding trouble to me, I think this can be a solution.
Is it possible to be done?
Can you shed some light?
Thanks
|
|
Posted by Paul Bergson [MVP-DS] on April 24, 2007, 9:03 am
Please log in for more thread options
A domain administrator is just that, an administrator. Anything in the
domain that you have is accessible to an administrator. You can take
permissions away from them but the administrator can take ownership of it
and provide them permissions to it. If you have a database that manages its
own security (Such as SQL Server 2005) you can prevent others from gaining
access to the data contained within it.
So the main point of your question is, no you can't hide files and folders
from administrators. They can see the folder and if they act properly then
they should stay out of it, but I don't know your work environment.
--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
> Hi, how are you doing?
>
> I would like to know if is possible to creating a folder on Windows NTFS
> partition, but this folder will be hidden from all users, including
> administrators, system, and all top users, excepts to a user account wich
> I will create wich will have total access to folder, so when I log on the
> machine using the special user, the folder will be available, because I
> need to put some database files so to prevent users viewing, editing, and
> avoiding trouble to me, I think this can be a solution.
>
> Is it possible to be done?
>
> Can you shed some light?
>
> Thanks
>
>
>
>
|
|
Posted by Roger Abell [MVP] on April 24, 2007, 11:42 am
Please log in for more thread options What are you trying to do ?
a) prevent any and all accounts, except for one(s) you want,
from accessing those files
or
b) prevent any and all accounts, save those allowed, from
even seeing that something exists that they are disallowed
??
If you define a directory and grant on that directory NTFS
permissions for only the account(s) you want to have access,
then only those allowed accounts will be able to access the
files in that directory, or even list the names of those files.
Most likely however the not allowed accounts will be able
to see the name of the directory, hence know something is
there that they are disallowed.
> Hi, how are you doing?
>
> I would like to know if is possible to creating a folder on Windows NTFS
> partition, but this folder will be hidden from all users, including
> administrators, system, and all top users, excepts to a user account wich
> I will create wich will have total access to folder, so when I log on the
> machine using the special user, the folder will be available, because I
> need to put some database files so to prevent users viewing, editing, and
> avoiding trouble to me, I think this can be a solution.
>
> Is it possible to be done?
>
> Can you shed some light?
>
> Thanks
>
>
>
>
|
|
Posted by Hayman Ezzeldin on April 25, 2007, 10:17 am
Please log in for more thread options Dear Paulo,
I don't if this Microsoft tool would be interesting to you, but it makes
folders/files visible only to the user who has the right to access.
This tool is called "Windows Server 2003 Access-Based Enumeration"
The link for the tool is
http://www.microsoft.com/downloads/details.aspx?FamilyId=04A563D9-78D9-4342-A485-B030AC442084&displaylang=en
The link for the Documentation is
http://download.microsoft.com/download/4/9/8/498EEEEF-97B0-450E-8E56-26105D4B092E/Accessbasedenum.doc
Best regards.
> Hi, how are you doing?
>
> I would like to know if is possible to creating a folder on Windows NTFS
> partition, but this folder will be hidden from all users, including
> administrators, system, and all top users, excepts to a user account wich
> I will create wich will have total access to folder, so when I log on the
> machine using the special user, the folder will be available, because I
> need to put some database files so to prevent users viewing, editing, and
> avoiding trouble to me, I think this can be a solution.
>
> Is it possible to be done?
>
> Can you shed some light?
>
> Thanks
>
>
>
>
|
| Similar Threads | Posted | | View folder nested in other unviewable folder | January 15, 2007, 2:24 pm |
| failed/successfull audit delete folder and delete file and folder | November 15, 2006, 8:12 am |
| Folder and Sub-folder permissions | September 5, 2007, 5:01 pm |
| Folder Inheritance | June 29, 2005, 8:48 pm |
| Missing Folder | July 1, 2005, 9:49 am |
| How to set folder permissions | May 3, 2006, 9:08 am |
| How to set this Folder security | October 5, 2006, 8:25 pm |
| Folder Security | November 17, 2006, 6:34 am |
| Folder permissions help | November 16, 2007, 10:19 am |
| Prevent Folder moving | July 11, 2005, 9:17 am |
|
XML Sitemap