Protecting a file from the administrator (Windows 2k)?

From: Niels C Krieger Lassen (nckl@videometer.com)
Date: 09/30/02 

From: nckl@videometer.com (Niels C Krieger Lassen)
Date: 30 Sep 2002 04:22:29 -0700

Is there a way of protecting a file/directory from
modification/deletion by the administrator of a local Win2000 system ?
I guess not, but if that's the case, can I at least audit such events
(file modification) in the security log? From the reply of Eric
Torbenson to my previous posting (thanks!), I guess the answer is yes
(unfortunately the administrator can clear this log, but at least this
clearing would be logged).

><Krieger><

Relevant Pages

  • Re: Protecting a file from the administrator (Windows 2k)?
    ... Niels C Krieger Lassen wrote: ... > modification/deletion by the administrator of a local Win2000 system? ... > in the security log? ... > (unfortunately the administrator can clear this log, ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Grey screen after login to 2003 TS
    ... Anything in the EventLog, especially the security log? ... I believe that this can happen when users have too few permissions on ... Run them as administrator (when no user ... MCSE,CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: Is there a way to query Security Event Log with Filter in C#?
    ... I am login as an administrator on my Win2k server. ... have over 55k of entries in Security log in Event Viewer. ... ManagementObjectSearcher mos = new ManagementObjectSearcher; ... foreach ) ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Server 2003 updates fail
    ... Some how the administrators was removed from Manage auditing and security log in the local security setting. ... > Please verify permissions on the following rights include the built-in ... I was log on as the administrator when getting ...
    (microsoft.public.windowsupdate)
  • Re: Error Reading the Security Log
    ... Can you elaborate on your comment? ... >>I am getting this error when I try and read the events in the Security log. ... > Make sure you are effectively impersonating an Administrator. ...
    (microsoft.public.dotnet.languages.csharp)