Re: Windows fle protection on Windows Server 2003

From: Eduard Koller [MSFT] (eduardk_at_online.microsoft.com)
Date: 04/28/04 

Date: Wed, 28 Apr 2004 10:32:36 -0700

Members of the administrators group will be able to replace the file, no
matter what you're doing.
You should not add to the Administrators group users you don't trust. 

-- 
Eddy Koller[MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at 
http://www.microsoft.com/info/cpyright.htm
"George Valkov" <null@somewhere.com> wrote in message 
news:OfyjjlQKEHA.1892@TK2MSFTNGP09.phx.gbl...
> Is it possible to mark a file as protected from
> the registry, so that Windows will prevent
> anyone from modifying or deleting this file.
>
> I have an important executable file that runs
> with very high privileges and I want to make sure
> that even a member of the Administrators group
> cannot change it.
>
> I have already set the NTFS permissions for this file.
>
>
>
> George Valkov
>
>
>
>
>
>

Relevant Pages

  • Re: Rid AD of Circular Group Membership
    ... and have use on members if it is used there. ... Administrators group is still intact), nor do they have empowerments over ... Admins is being used for by the 30+ can be delegated I(ex. ... The quess is each has an account and uses it, ...
    (microsoft.public.windows.group_policy)
  • Re: Adding User ID in Local Admin Group using Group Policy
    ... If you want to add and RESTRICT ... one would not use the Members list, ... The effect is that ClientAdm is added to the Administrators group ... Another useful one -- reset the local admin password while you're at it, ...
    (microsoft.public.windows.group_policy)
  • Re: Adding User ID in Local Admin Group using Group Policy
    ... If you want to add and RESTRICT ... one would not use the Members list, ... The effect is that ClientAdm is added to the Administrators group ... Another useful one -- reset the local admin password while you're at it, ...
    (microsoft.public.windows.group_policy)
  • Local Administrators & Active Directory
    ... I'm working on some Win XP laptops and am new to Active Directory so ... I check the members list in Administrators... ... Any idea why the Administrators group members constantly are being ...
    (microsoft.public.windows.server.active_directory)
  • Re: Restricted Group not working as expected
    ... in the local administrators group in each of the computers in the domain. ... Add myself into a domain group called "Admin" ... I leave blank for "Members of this group". ...
    (microsoft.public.windows.group_policy)