Re: Can I hide my personal information from administrators of a domain?

From: Dmitriy Kopnichev (kopn_at_hotbox.ru)
Date: 10/30/03


Date: Thu, 30 Oct 2003 16:08:07 +0300

How to know if domain admin has access to the info?
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:%231oS4WWnDHA.2244@TK2MSFTNGP12.phx.gbl...
> If you have info stored on the local machine, and some
> account (domain admin or any other) has access to the
> info, it does not matter what account owns the info nor
> whether that account is or is not logged in.
> You can set permissions so that domain admins do not
> have access to some files/folders. You can also make it
> more difficult for domain admins to log into your machine
> (locally or over the network) but if they really want to get
> at something on your machine they can if the domain is
> W2k or later.
>
> --
> Roger Abell
> Microsoft MVP (Windows Server System: Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Dmitriy Kopnichev" <kopn@hotbox.ru> wrote in message
> news:uW6WZsVnDHA.1096@TK2MSFTNGP11.phx.gbl...
> > Can the domain administrators see my information even when I'm not
logged
> on
> > to a domain account but to a local account? Keeping the information on a
> > removable disk is not convenient. The only thing I need in the domain is
a
> > network exchange disk.
> > "Rick "Nutcase" Rogers" <rick@mvps.org> wrote in message
> > news:OkkrYrUnDHA.2592@TK2MSFTNGP10.phx.gbl...
> > > > Can I hide my personal information from administrators of a domain
in
> > > which
> > > > my computer is?
> > >
> > > Copy the information to disk, then delete it.
> > >
> > > > Or how to share a folder on my computer with other members
> > > > of the domain?
> > >
> > > Description of File Sharing and Permissions in Windows XP [Q304040]
> > > http://support.microsoft.com/?kbid=304040
> > >
> > > --
> > > Best of Luck,
> > >
> > > Rick Rogers aka "Nutcase" MS-MVP - Win9x
> > > Windows isn't rocket science! That's my other hobby!
> > > http://mvp.support.microsoft.com/
> > > Associate Expert - WinXP - Expert Zone
> > > www.microsoft.com/windowsxp/expertzone
> > > Win98 Help - www.rickrogers.org
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: Finding a Hacker
    ... definitely had the capability to obtain the domain admin credentials and may ... If the hacker did get in remotely using an administrator account on the ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Need to filter domain admin from GPO
    ... But think always about the part that a deny is the highest blocking you set and if you forget that you have set a deny or you are not in and someone else have to search for errors, it will be really heavy to find it. ... It's best practice to use a 2nd administrator account as your ... Block inheritance (I would have to move the domain admin from ... particular GPO using ACL deny. ...
    (microsoft.public.windows.group_policy)
  • Re: Administrator--Client installation account problem
    ... I stated the account was only required to be a ... Of course if it is a domain admin that works also. ... Jeff said to use a Regular domain user, ... You do not have to be in advanced security to push the client. ...
    (microsoft.public.sms.admin)
  • Re: Need to filter domain admin from GPO
    ... Normally Block inheritance works fine. ... What GPO setting do you like to filter? ... It's best practice to use a 2nd administrator account as your regular ... Block inheritance (I would have to move the domain admin from ...
    (microsoft.public.windows.group_policy)
  • Re: SQL account rights
    ... Please advice what is the best, suitable rights rather than domain admin ... Warren Brunk - MCITP - SQL 2005, ... Add it as a login to the SQL Server ... files, or backups, make sure that the service account has Full ...
    (microsoft.public.sqlserver.security)

Quantcast