Re: security paradox
From: flex (info@entyerprisecomputernet.com)
Date: 09/29/02
- Next message: Dennis Benn: "Administrator Logon"
- Previous message: Justin Casell: "Audit Logs."
- In reply to: Greg Lorriman: "security paradox"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "flex" <info@entyerprisecomputernet.com> Date: Sun, 29 Sep 2002 03:03:21 GMT
"Greg Lorriman" <temp@lorriman.com> wrote in message
news:OCtPetlZCHA.3736@tkmsftngp08...
>
> I'm the admin on a small network. I have admin rights on the NT box and
all
> the attached computers. This allows me access to very sensitive
information.
> I don't want access to that information.
>
> In order to avoid this problem I get a "Server Operator" account, and the
> admin password is changed and only known to the managing director. The
> managing director is not technical, but is capable of typing the password
as
> needed, with a 3rd person to act as a "chaperone" during any period that
> admin access is needed by myself.
>
> However this system is unworkable since admin access is required more
> frequently than anticipated; the MD is constantly being troubled and the
3rd
> person is fed up and bored.
>
> How is this conundrum usually dealt with? AFAICS admin access is too
> powerful, and I don't know of a "step down" that will allow server
> administration while disallowing user folder access.
>
> This must be a nightmare in a large network with multiple admins.
>
> The system to which I refer is an NT server with win2k clients. The info
to
> which I am referring is that which newspapers would be interested in and
so
> this conundrum and a need for a solution is causing myself and my boss
some
> anxiety. It's not so much that I can't trust myself, but that there is no
> real reason why the persons effected by this security issue should trust
me,
> and nor anyone who might replace me. There's is also the issue of leak
> detection : by having just one individual with the admin password
restricts
> accountability somewhat. If an enquiry were launched into a breach of
> security myself and my boss want to be as protected as possible.
>
> Anyone got more of a clue than we have?
>
> A decent book recommendation would be lovely too!
>
> Greg
>
>
>
>
>
Have the person who owns this information encrypt it. End of problem
Flex
- Next message: Dennis Benn: "Administrator Logon"
- Previous message: Justin Casell: "Audit Logs."
- In reply to: Greg Lorriman: "security paradox"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
