Is it possible to prevent other system admins access to folders in windows 2003 server? i have 3 system admins on my server just because we all are trying to learn with it but I am going to store some of my business files on there as backup but don't want the other admins to have access to that folder. Can I do this and prevent them from changing the permissions some how?
Locking folders to prevent other system admins access
- Thread starter mplutodh1
- Start date
If they are full admin they can change whatever they want. You can deny them the rights on the folder, but they can take control of the folder if they'd like - but you can audit that so you'd know what they've done if you'd like.
Honestly its not a HUGE issue I just really don't want business data to be messed with, too risky for me. I know they probably wouldnt, or else I wouldnt trust them to have access as admins, maybe I'll just leave the server the way it is and store mp3s and crap on it instead.
Then work with setting up a VPN that my desktop can be in for me to access elsewhere.
Then work with setting up a VPN that my desktop can be in for me to access elsewhere.
If it's not a huge issue, and you basically trust them, then turn on 2003's auditing and deny access to their accounts for that folder. They lose access, and you can set it up so you get paged/e-mailed if they ever change rights to that folder.
Only if you use the built in EFS. If you use PGP/GnuPG or another (probably lesser) product, you should be relatively safe.
Re: Other's posting of encryption - how will that prevent others from erasing the files by accident?
I still see limiting access with the deny flag the best way to handle this...
I still see limiting access with the deny flag the best way to handle this...
You make it a non-issue. If you deny them access they would actively have to modify the file's permissions to be able to delete it. If they have to do that, it isn't an accident.
The encryption keeps the contents safe, proper precautions (GOOD backups, key security, etc.) are still important.
Originally posted by: dclive
Right.
It's a partial solution, at best. With the encryption, the data cannot be messed with (as per a requirement from the OP), but with just denying access the files can.
Agreed, the files can be messed with - that would require specific action (take control) on the part of the other admins.
Encryption is good if it is believed that someone is going to actively go after the files; I completely agree. I was positing that the other admins wouldn't do that given the OPs general comments.
Encryption is good if it is believed that someone is going to actively go after the files; I completely agree. I was positing that the other admins wouldn't do that given the OPs general comments.
TRENDING THREADS
-
Discussion Zen 5 Speculation (EPYC Turin and Strix Point/Granite Ridge - Ryzen 9000)- Started by DisEnchantment
- Replies: 23K
-
Discussion Intel Meteor, Arrow, Lunar & Panther Lakes Discussion Threads
- Started by Tigerick
- Replies: 18K
-
-
-
Facebook
Twitter