Re: "Is it possible to make it impossible for a domain admin to take ownership of a folder and it's contents?"

From: Dave (noone_at_nowhere.com)
Date: 03/31/04


Date: Wed, 31 Mar 2004 12:25:20 -0500


"Oli Restorick [MVP]" <oli@mvps.org> wrote in message
news:#WQ2MO0FEHA.3640@tk2msftngp13.phx.gbl...
> It's possible to remove the "take ownership" right from domain admins, but
> these same people can give the right back to themselves.
>
> It's impossible. The only solution would be to make Fred and only Fred
the
> domain admin. :-)
>
> Oli
>

or to keep the critical data on a removable media or a non-networked machine
in a locked room.