prevent access to other files

From: Ahmed Nour (anonymous_at_discussions.microsoft.com)
Date: 10/18/03 

Date: Sat, 18 Oct 2003 05:04:54 -0700

I have WIN2k Advanced Server Domain and about 50 clients
and each user has a user account to use it to log on the
domain
,the major of the users' accounts are power users (with
respect to their pcs)
but some of them are local administrators (with respect
to their pcs)
and both of them are just normal domain users with
respect to the domain active directory
they are normal users
the problem is:-any user who has a local administrator
account could access any data located on any hard drives
of other pcs connected to the network except the servers
and I Want to prevent the local administrator to do so

I tried More And More But No result.
Help will be so much appreciated

Best Regards:-
Ahmed Nour

Relevant Pages

  • RE: Why should we disable local administrator accounts?
    ... I understand that you have concerns on disabling local Administrator ... Account on client workstations in SBS domain. ... At least if your local admin passwords are ...
    (microsoft.public.windows.server.sbs)
  • Re: local administrator account password policy
    ... computers that hold critical data are physically secured, ... less risk of local administrator passwords being compromised as it is easy ... computers] will make password cracking much more difficult after the policy ... account access smart cards. ...
    (microsoft.public.windows.server.security)
  • Re: Cant Modify Local Security Setting - Windows XP SP 2
    ... If you logon to your computer as a local administrator you will not be ... account will no longer allow your to logon to your computer once removed ... > problem because the system will not refresh the domain policies. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Userenv errors
    ... it seems like I'm getting these Userenv errors on several PCs, ... account in your domain? ... Windows 2000 Server and Windows ... PLEASE NOTE the newsgroup SECURE CODE and PASSWORD were ...
    (microsoft.public.windows.server.sbs)
  • Re: How hard would it be to script this process
    ... scripting that little bit might be somewhat simpler for you ... > Log in as Local Administrator Account and do the following: ... > b) Rename the built-in Administrator account, ... > a) Create a domain account user profile. ...
    (microsoft.public.windows.server.scripting)