Re: "Is it possible to make it impossible for a domain admin to take ownership of a folder and it's contents?"

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 03/31/04 

Date: Wed, 31 Mar 2004 11:41:04 -0500

Hi - note that I also replied in another group - if you need to post to
multiple groups, it's best to do so all at once in a single message
(separate the NG names with commas) so that everyone can follow the thread.
A lot of people subscribe to multiple groups, and this way you won't be
asking anyone to reproduce someone else's work, and everyone can benefit.

Crossposting = posting once to several newsgroups within a single message.
This is not a Bad Thing (presuming the list of groups posted to is small,
and all the groups are truly relevant to your question)

Multiposting = posting separate, identical posts to several newsgroups. This
is a Bad Thing. :-)

See http://www.aspfaq.com/etiquette.asp?id=5003 and
http://www.blakjak.demon.co.uk/mul_crss.htm

Russell White wrote:
> Greetings.
>
> "Is it possible to make it impossible for a domain admin to take
> ownership of a folder and it's contents?"
>
> this question can also be phrased as...
>
> "is it possible to make something accessible only to one user and no
> one else (including domain admin) can either change permissions, take
> ownership, etc."? It seems to me this is not possible - that domain
> admin can always take ownership of these files.
>
> The powers that be want one directory on our win2ksbs server to be
> accessible only by a user, "fred". The domain admin should not have
> access to this file nor should he be able to change permissions nor
> should he be able to take ownership (thus allowing him to change
> permissions).
>
> So it would appear to me that it is impossible (and for good reason I
> would think) to make it impossible for domain admin to access a
> certain directory because he could always take ownership of this
> directory and then change permissions and then access the file.
>
> Is this true? Is it possible to make it impossible for a domain
> admin to take ownership of a folder and it's contents?
>
>
> Thanks in advance,
>
> Russ White

Relevant Pages