Questions

Windows 2003 Server Standard Administrator Access

Tags:
+
0 Votes
Locked

Windows 2003 Server Standard Administrator Access

croney1979
Is it possible to not allow the administrator account or a person with administratrative rights access to a specific folder on the server.
The president of our company does not want the IT guy to be able to look at a few specific folders that are confidential on the server. Is this possible? How
would I fix this problem?
  • +
    0 Votes
    lowlands

    On the folder permissions make sure that permissions are not inherited. Then only give the President access and make him the owner of the files/folders.

    It is not completely waterproof of course, because an admin can always take ownership again and redo the permissions.

    +
    0 Votes
    croney1979

    We are using Veritas Backup Exec, the latest version and would this have problems doing its daily backup?

    +
    0 Votes
    lowlands

    It depends what account the backup service runs under. If it is Local System, you'll have to make sure system also has read/write permissions. Same if it runs under some kind of domain account.

    +
    0 Votes
    sarve1985

    It is possible but only till then when u r the owner of that folder

    Do One Thing

    Take the ownership of that particular folder on ur name and remove the administrator from the owner ship

    i think this is only the solution but As he(Administrator) take the ownership back

    then he can see that folder and its contents

  • +
    0 Votes
    lowlands

    On the folder permissions make sure that permissions are not inherited. Then only give the President access and make him the owner of the files/folders.

    It is not completely waterproof of course, because an admin can always take ownership again and redo the permissions.

    +
    0 Votes
    croney1979

    We are using Veritas Backup Exec, the latest version and would this have problems doing its daily backup?

    +
    0 Votes
    lowlands

    It depends what account the backup service runs under. If it is Local System, you'll have to make sure system also has read/write permissions. Same if it runs under some kind of domain account.

    +
    0 Votes
    sarve1985

    It is possible but only till then when u r the owner of that folder

    Do One Thing

    Take the ownership of that particular folder on ur name and remove the administrator from the owner ship

    i think this is only the solution but As he(Administrator) take the ownership back

    then he can see that folder and its contents