How to block access to a Win 2K server

I guess I'm not understanding what you are trying to accomplish... what good is a server that *no one* has access to?

It sounds like the easiest solution would be to remove it from the domain.

paul

This is fairly normal for things like payroll systems. You can do it if you have access to the local administrator account.

1. Remove the domain group 'domain admins' from the local administrator group. This is the big one, but check all of the local groups for domain users or groups. You will probably want to create a local group, thisserverusers, to contain all of the authorized domain users. You will give appropriate access rights to this group.

2. Check your shares on the server so that they explicitly allow only those users who should have access.

This should do it. If you are concerned about someone physically logging on to the server, continue with the next two items.

3. Make very sure that the domain accounts that you WANT to have access (if any), and all appropriate local groups and users are in the access lists of all disks (NTFS permission lists).

4. Remove the 'Everyone' NTFS access permissions from your various directories. DO NOT DENY access to this group-- that will lock you out! Simply remove the group from the access list. Also, do NOT just remove permissions at the top and have the changes propogate. This may have unexpected consequences.

Note that you probably want to have some way for a system backup to happen. If your installation does remote backups, you may want to explictly allow the backup user to back up your server. If not, you will need to do your own backups.

Good luck.

If you are looking to block admin access you will need to realize that even if you are successful you run the risk of being having your server removed from the network by an admin.

I don't think there is a way to completely restrict access from enterprise admins. If you are looking for a way to protect data then you might need to look at removing the data to a disk (whether cd, jazz, Writeable DVD, zip, or floppy)

A better solution for you, in this case, would probably be to encrypt the data you need to protect with a third party application and retain keyed access only for yourself.

Hope these suggestions help. Sorry if they don't.

This question was auto closed due to inactivity