Re: Granting access to NTFS drive

Adeel wrote:
Yes, I have successfully resolved the original problem.

Now the trouble is that every administrator can modify the
permissions and grant himself access via the same procedure
(although I just granted access to two specific accounts, one on
each machine. And removed the everyone group).

Is there any way I could restrict access to just two specific
administrator users... and disallow everyone else (including other
administrators) from granting themselves the access?

If you added the specific usernames (and they were not the default
"administrator") and not the group (administrators) <- then only those
usernames will have access. However - anyone with admin rights on a machine
owns it.. They can TAKE ownership away and give themselves rights.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


.

Relevant Pages

  • Re: Admnistrator
    ... If you have welcome screen enabled (the screen where usernames and pictures ... window should pop-up and type in Administrator. ... > getting errors when installing software that I may not ... > have the correct permissions. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admnistrator
    ... The way to fix the problem is either using the windows xp ... usernames and pictures ... >window should pop-up and type in Administrator. ... >> have the correct permissions. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: [OT] Administrator accounts (was: VMS DCL prompt)
    ... >> But then - there are areas where VMS is a lot better then Unix. ... >> ability to have more then one Administrator. ... > several usernames with UID 0 but each with its own password. ... > might not think that counts as multiple administrator accounts. ...
    (comp.lang.ada)
  • Re: PLEASE Help with Admin logon on W2k Pro Home PC
    ... Usernames are not case sensitive. ... "Administrator" is ... with a capital A and lowercase letters following it? ... > extra harddrive (not one you boot from) and transfer the files from there ...
    (microsoft.public.win2000.general)
  • Re: Programs that need admin rights, but user shouldnt have them
    ... Some GPO settings stick and some don't. ... >> Administrator on the computer (e.g. some of the Windows XP Firewall ... >> indicates whether a local administrator can override the setting or not. ... >>>the user to have local machine and domain local admin rights. ...
    (microsoft.public.win2000.group_policy)
Loading