IRC takeover - How to file permission protect from admin in XP

[asm0deus]

Hey ATers,

We have two offices, one in FL and one in NC, to stay in touch we have an IRC server and my close friend in the FL office has forcefully taken over as net admin. Well us guys up in NC are sick of him abusing his power and want to take back the server. We are running Unreal IRCD (Unreal3.2.8.1), I'm familiar with handling operator commands and stuff like that but here's the issue:

We both have administrator access to that WindowsXP server. So we went back and forth editing our ircd.conf file ad infinitum. So the best end game I can come up with (excluding a recompiled .exe that favors our office) is file permissioning the conf file for a user he doesnt have access to (and hashing the password).

I'm not very familiar with creating file permissions that are protected from an administrator and was wondering if anyone could point out a good page describing how one would accomplish this without having to install any 3rd party software.

Thanks so much for any tips/tricks/ideas

 

[alkemyst]

close friend?

Move the admin account to a power user, create a new one. If he has physical access and you don't he wins though.

 

[asm0deus]

Well this is also a test server for some of our clients, I'd like to keep the administrator account untouched so as not to wreck havok on any other software. He does have physical access and I don't, but this is a semi-critical server for a few projects so he won't reboot it to or anything. Hence why I want to try to do it with a new user or some other less invasive but effective magic that just makes that one file safe from adminstrator editing.

 

[lxskllr]

Can't you setup a new IRC server where he doesn't have any permissions? Bypass the whole deal.

 

[asm0deus]

Yeah I have a copy of the server running locally on my computer, issue then would be having 30 employees switch their irc settings to use mine instead and that's a bit of a messy takeover. I was just hopeful there would be an easy way to make a file admin proof.

Can't you setup a new IRC server where he doesn't have any permissions? Bypass the whole deal.