Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash desktop driver drivers error ethernet excel freeze gaming graphics hard drive hardware hdmi internet laptop malware memory monitor motherboard network operating system printer problem ram registry router slow software sound svchost.exe trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Prevent administrators from viewing/modifying files/folder

Reply  
Thread Tools
jeffnorem's Avatar
Junior Member with 2 posts.
 
Join Date: Jul 2008
Experience: Advanced
24-Jul-2008, 01:01 PM #1
Prevent administrators from viewing/modifying files/folder
Hello,

I know there is usually an inherent trust of a companies administrator group. I work for a very large corporation (100+ admins) and am in charge of security compliance intiatives. I have a folder that has very sensitive bank auditing information and I want to make sure that only my team can access/change these docs.

It has been awhile since I did any special access permissions etc.. so I was wondering if someone could help me figure out if I could use special permissions (possibly the deny attribute) to set it up so administrators can change/add/edit user access, but not actually view or modify the files and sub-folders without changing permissions?

any help would be appreciated..
thanks
Elvandil's Avatar
Computer Specs
Moderator with 48,924 posts.
 
Join Date: Aug 2003
Location: Vermont
Experience: "Been through the mill."
24-Jul-2008, 01:08 PM #2
I don't think that we can help you since you are asking us to help you override an admin.

But you might consider simple, non-NTFS encryption.
jeffnorem's Avatar
Junior Member with 2 posts.
 
Join Date: Jul 2008
Experience: Advanced
24-Jul-2008, 01:24 PM #3
First I want to point out that this is not an question of me trying to be unethical, I do not have the desire or rights to set this myself, my request would go through to our adminstrators to set this up. I am just looking to have some knowledge to provide them a possible solution to do what I am asking.

The justification pretty much explains itself, this is information that general server operators or domain admins do not need to view, and they still would have all rights to controlling new/changed access to the folder, I would still have none. I am not trying to overide and admin

thanks for your help
Elvandil's Avatar
Computer Specs
Moderator with 48,924 posts.
 
Join Date: Aug 2003
Location: Vermont
Experience: "Been through the mill."
24-Jul-2008, 02:07 PM #4
Then I guess I don't fully understand what you are trying to accomplish. You want to prevent the admins from having access to the files, but you plan to enlist their aid in accomplishing this? I'm not trying to be sarcastic or argumentative, but I am really unclear about what you are trying to do.

Maybe if you could give an example of how not having this set up has resulted in a problem and what the problem was?
__________________
Microsoft MVP
異驚の界世 ˇpןɹoʍ ǝɥʇ ɟo sɹǝpuoʍ ǝɥʇ ɟo ǝuo sı ǝpoɔıun ʞuıɥʇ ı
1002richards's Avatar
Computer Specs
Senior Member with 4,542 posts.
 
Join Date: Jan 2006
Location: Sussex, UK
Experience: Intermediate
24-Jul-2008, 02:46 PM #5
Hi,
My employer of 100,000 has 'Admins' who are totally trusted (they have to be!). Ten of us across the country needed a shared drive. The Admins set this up and we chose the passwords. Sure, they can access it but there's an audit log of who did what & when. Surely something like that would suffice? If you can't trust the Admins ... or as the Romans said "Who guards the guards?" (Sorry I don't know the Latin!)

Richard
DotHQ's Avatar
Member with 449 posts.
 
Join Date: May 2008
Location: Ohio USA
Experience: Advanced
24-Jul-2008, 03:43 PM #6
Yes this can be done a number of ways. Password protecting and encrypting the files or a product such as 'source safe' which locks up the files and even keeps multiple versions of the file in case you need to backtrack.
However, password protecting with encryption would appear the safest to me.
__________________
"May you buld a ladder to the stars and climb on every rung" - Bob Dylan
"In this age of Fiberglass I'm searching for a gem" - Bob Dylan
Net Music Talk Forums Fourms .com Net Cooking Talk DotHQ .com
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 02:15 AM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.