Re: How can admin not have access to certain shares?

On Feb 16, 9:36 am, bo...@xxxxxxxxxxxxxx wrote:
Gents;

We have a compliance issue where our system admin is not supposed to
have access to certain shares.

Any ideas as to how we can accomplish this seemingly mutually
exclusive feat?

Thanks  

As others have commented, you can take away the right for the
administrato to access something on the box, but you can't keep it
away if they really want to do something. You can, however, monitor
the proper access levels through a solution like we offer (shameless
plug: www.securitay.com/spm) and/or use of Microsoft's (or other)
event log collection system. Through a combination of setting the
correct policy (no access for admins) and then monitoring the systems
so that the policy does not change, you can achieve the desired
compliance level for your systems.

HTH,
Dave
.