Networks

General discussion

Locked

Preventing access to Admins

By ithink2020 ·
The COO of the company has requested that he have a folder on the network (or his local computer), which only he has access to. He is asking the not even Domain Admins be able to access this folder. He does not want to use a program that requires him to type in a password every time he needs to access a file/folder. Also, our network security policy does not allow users to access Internet storage sites.

I have looked at the built-in file encryption in Windows, but Admins can take ownership of files and reset the permissions on the folders. I have also looked into a couple third party programs, but the ones I have looked at require a password every time you want to access the folder you are working with.

Is there a way to block Admins from folders? Or does anyone know of any third party software that will lock down a folder, but once set up, requires no user interaction?

I need an answer ASAP. First person to give an answer that they know works, gets all 1000 points!
Thank you,

Matt Schmitt
IT Tech.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Preventing access to Admins

by ithink2020 In reply to Preventing access to Admi ...

Unfortunatly, Microsoft is the company standard.

Collapse -

Preventing access to Admins

by pricepd In reply to Preventing access to Admi ...

Setup a seperate Win2K machine that is not part of the domain, and to which only your boss has admin password and rights to the machine. Encrypt the file on that machine. Connect the machine to the network, but don't join the domain. Set up a batch file on the machine to copy the encripted folder to the network nightly so that it will get backed up. (the folder can only be decrypted by that machine no domain admin can decrypt the file.) Make sure NTFS permissions on the network share are set to everyone write.

This seems like a lot of trouble. It would be easier to just type the password in each time.

Good Luck,

Preston

Collapse -

Preventing access to Admins

by ithink2020 In reply to Preventing access to Admi ...

The question was auto-closed by TechRepublic

Collapse -

Preventing access to Admins

by jack In reply to Preventing access to Admi ...

I don't understand the difficulty. Why not disable sharing on the local drive?

If the administrative shares (C$,D$,ADMIN$,etc) are created on this machine, set AutoShareServer to 0 to stop creating these shares.

See the knowledgebase article for the registry keys at: http://support.microsoft.com/default.aspx?scid=KB;en-us;q245117

Collapse -

Preventing access to Admins

by jack In reply to Preventing access to Admi ...

As far as the "no login", go to the control panel and open the Users & Passwords. Uncheck "Users must enter a user name and password to use this machine." When you check OK, it'll ask you which user should be the default user to log in.

Good Luck, I've got a boss like yours too.

Collapse -

Preventing access to Admins

by ithink2020 In reply to Preventing access to Admi ...

The question was auto-closed by TechRepublic

Collapse -

Preventing access to Admins

by shmaltz In reply to Preventing access to Admi ...

I decided to write another answer, although I know that I will get rejected.
Answer 6 and 7 both of your solutions will not work.
Answer 6 suggests using a computer that is not connected to the domain. How will your boss use the domain resource when it is not part of the domain? He will have to enter a new password. If so go with 3rd part encryption. If the admin has access to the mahcine (even not via the network) he can alwyas reset the admin password (there is a lot of ways, just to mention one using a lynux boot).
Answer 7 suggests disabling the Admin share points. Has it occured to you that the same way I disabled it I can enable it (using even remote registry)?

Collapse -

Preventing access to Admins

by shmaltz In reply to Preventing access to Admi ...

By far Artk is the only one that gave the right answer.

Collapse -

Preventing access to Admins

by ithink2020 In reply to Preventing access to Admi ...

The question was auto-closed by TechRepublic

Collapse -

Preventing access to Admins

by ithink2020 In reply to Preventing access to Admi ...

This question was auto closed due to inactivity

Related Discussions

Related Forums