"Is it possible to make it impossible for a domain admin to take ownership of a folder and it's contents?"

anonymous_at_discussions.microsoft.com
Date: 03/31/04 

Date: Wed, 31 Mar 2004 13:39:20 -0800

zip the files and use a strong encryption (not the windows
one, its flaky!) program on the zip file. The standard zip
password protection is not very strong.

>-----Original Message-----
>Greetings.
>
>"Is it possible to make it impossible for a domain admin
to take ownership
>of a folder and it's contents?"
>
>this question can also be phrased as...
>
>"is it possible to make something accessible only to one
user and no one
>else (including domain admin) can either change
permissions, take ownership,
>etc."? It seems to me this is not possible - that domain
admin can always
>take ownership of these files.
>
>The powers that be want one directory on our win2ksbs
server to be
>accessible only by a user, "fred". The domain admin
should not have access
>to this file nor should he be able to change permissions
nor should he be
>able to take ownership (thus allowing him to change
permissions).
>
>So it would appear to me that it is impossible (and for
good reason I would
>think) to make it impossible for domain admin to access a
certain directory
>because he could always take ownership of this directory
and then change
>permissions and then access the file.
>
>Is this true? Is it possible to make it impossible for a
domain admin to
>take ownership of a folder and it's contents?
>
>
>Thanks in advance,
>
>Russ White
>
>
>
>.
>

Relevant Pages

  • RE: Repair Re-install Goof Up?- Need Help
    ... How to take ownership of a folder ... In the Name list, click your user name, or click Administrator if you ... Do you want to replace the directory permissions with permissions ...
    (microsoft.public.windowsxp.general)
  • Re: Adding XP in another partition users into Vi$ta
    ... not simply assign ownership to another (for auditing purposes ... When logged in as a standard user, when you elevate you are logging in ... be considered for deny permissions. ... I removed all accounts that could access folder X. ...
    (microsoft.public.windows.vista.security)
  • RE: transfering data
    ... Attempt to take ownership of all the old folders / files, ... 1.Right-click the folder that you want to take ownership of, ... 4.In the Name list, click your user name, or click Administrator if you are ... you want to replace the directory permissions with permissions granting you ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Shared permissions vs. security
    ... If they need to write to that folder [which should not be the drive/root ... administrators group by default so you are giving redundant permissions. ... It is best practice not to logon as a domain admin to domain workstation ...
    (microsoft.public.win2000.security)
  • XP Folder Ownership Problems - Same issue can be resolved on Win2k, but Not XP
    ... there seems to be no equivalent to the "Take Ownership" ... >permissions for whatever reason and there ... problematic folder tells me I ... >First, I re-applied the Setup Security Template in MMC, ...
    (microsoft.public.windowsxp.security_admin)