Windows Forum

Ask something
Question Locked

Security Threat!

0 helpful
4 replies

by dxmatrix

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We are agroup of admnistrators! But one member of our team seems to be good in creating problems and then he is defeated to solve them out, "is there a way this one member of our team can be denied access to some specific areas of the system and files while still maintaining his group membership?"

4 replies

by Former member

Re-training. I would not have a person like that going around making problems and not knowing how to cure them. You can always tie his hands behind his back.

Try this:

http://www.bluechillies.com/list/access-denied.html

Please post back if you have anymore problems or questions.

by dford

change permissions on folders, ad, etc you want to deny him access to, to deny for that specific user account. Deny overides allow.

by roberto

You could apply "deny" permissions on files and folders to block him/her access. However an administrator will still have access to change permissions on files/folders to which he was specifically denied access, and is thus able to change permissions to remove the deny ACLs.

Unfortunately there is no "preventive" measures you can take, you will be limited to monitoring the access and the permission changes to find out after-the-fact if he/she changed the ACLs.

This discussion is closed to new replies.