Click here to get back home

Remove Administrator Rights from Folder in Win2k Server

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Remove Administrator Rights from Folder in Win2k Server bu 11-11-2005
Get Chitika Premium
Posted by bu on November 11, 2005, 9:44 am
Please log in for more thread options
Is there any way to completely remove Administrator rights (including the
ability to change owners, set permissions, etc) from a folder? I know all
of the risks associated with such a change, but I have a client that insists
on it.

tia,
B




Posted by Steven L Umbach on November 11, 2005, 11:13 am
Please log in for more thread options
You can do that but it can be an exercise in futility as a skilled
administrator can always gain access again and quickly and I would explain
that to them in a not so subtle manner. If they have data that needs to be
confidential then other options such as EFS encryption [that has it's own
risks] or isolating the computer from any domain and physically securing it.
Anyhow you would need to go into Local Security Policy and remove
administrators from the user rights to backup files and directories and take
ownership of files or other objects. Those user rights apply to the whole
computer and there is no way to do it for just a folder. --- Steve


> Is there any way to completely remove Administrator rights (including the
> ability to change owners, set permissions, etc) from a folder? I know all
> of the risks associated with such a change, but I have a client that
> insists
> on it.
>
> tia,
> B
>
>




Posted by bu on November 11, 2005, 12:57 pm
Please log in for more thread options
thanks for the reply, Steven...

B


> You can do that but it can be an exercise in futility as a skilled
> administrator can always gain access again and quickly and I would explain
> that to them in a not so subtle manner. If they have data that needs to be
> confidential then other options such as EFS encryption [that has it's own
> risks] or isolating the computer from any domain and physically securing
it.
> Anyhow you would need to go into Local Security Policy and remove
> administrators from the user rights to backup files and directories and
take
> ownership of files or other objects. Those user rights apply to the whole
> computer and there is no way to do it for just a folder. --- Steve
>
>
> > Is there any way to completely remove Administrator rights (including
the
> > ability to change owners, set permissions, etc) from a folder? I know
all
> > of the risks associated with such a change, but I have a client that
> > insists
> > on it.
> >
> > tia,
> > B
> >
> >
>
>




Similar ThreadsPosted
Win 2008: Is it safe to remove USERS local group from c:\ NTFS rights? November 8, 2008, 6:57 pm
Remove List Folder access only? March 16, 2006, 2:18 am
Can't remove user from administrator group November 11, 2005, 2:47 pm
remove users from Administrator groups ? What should I know ? September 3, 2008, 10:48 am
Code to remove a user group from file or folder ACL March 22, 2006, 1:45 pm
copying local user accounts from one win2k server to another November 4, 2005, 8:38 am
SQL Server Administrative rights VS DBA SA rights July 25, 2006, 8:30 am
How to set different USB access privileges in Win2K\WinXP\Win2003 March 15, 2008, 9:20 pm
How to open LSA API on Win2k in order to determine if a computer is member of domain October 17, 2007, 5:45 am
new forms on print server without admin rights February 10, 2006, 9:51 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap