|
Posted by bu on November 11, 2005, 12:57 pm
Please log in for more thread options thanks for the reply, Steven...
B
> You can do that but it can be an exercise in futility as a skilled
> administrator can always gain access again and quickly and I would explain
> that to them in a not so subtle manner. If they have data that needs to be
> confidential then other options such as EFS encryption [that has it's own
> risks] or isolating the computer from any domain and physically securing
it.
> Anyhow you would need to go into Local Security Policy and remove
> administrators from the user rights to backup files and directories and
take
> ownership of files or other objects. Those user rights apply to the whole
> computer and there is no way to do it for just a folder. --- Steve
>
>
> > Is there any way to completely remove Administrator rights (including
the
> > ability to change owners, set permissions, etc) from a folder? I know
all
> > of the risks associated with such a change, but I have a client that
> > insists
> > on it.
> >
> > tia,
> > B
> >
> >
>
>
|