Discussion Locked

Need to secure a client folder

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

How can you restrict access to a folder on a client PC from a particular user (with membership in the administrators group). Politically I cannot remove him from the admin group. The folder is not shared.

Could I rename the admin account or simply change the local admin password.

This is an executive turf issue. Good grief...

Thanks in advance for your assistance,

Jeff Charland

6 replies

by d.walker5

If an Administrator signs on locally, he/she will have access to any file. Remember, Administrator is GOD. That said, since the file isn't shared the only access will be local access. You can make it more difficult by encrypting the file, but the Administrator can still access

by don_brill

To make it a little tougher: if it's not already NTFS, convert it to NTFS. You could go to the Security tab on the folder in question, uncheck the box "allow inheritable permissions from parent to propagate to this object" and make a bunch of directassignents (possibly including SYSTEM)that wouldn't include the user-in-question.

by blackdiamond

Hey,

If you are running NTFS you can set rights to the folder to deny that particular user access to the folder. This is assuming that they are not logging on with the admin account but with their own account. If they login with another admin account they will be able to get around this.

by blackdiamond

Hey,

Thought I had answered this once today must not have come through.

If you are running NTFS you can set folder permissions to deny this user access to the folder. If they log in with another admin account they will have access. There areways around it, just depends on how savy and persistant this person is in seeing what is in it.

This discussion is closed to new replies.