File Protection

[UTTech]

Windows 2000 SB

I would like to store files on the network that I want noone including the server admin to have access to. Is there anyway to do that in Active Directory? I was thinking if I can create 2 separate domains on the same server and not give admin access to 1 domain? Is that even possible?

 

[Shift838]

no not possible to create 2 domains on one server. you could add the administrators group for access and assing the No Access permission. they they cannot view it.

 

[JBruyet]

But make sure you yourself are not in the administrator's group or you'll deny access to yourself.

HTH,

Joe Brouillette

 

[Serbtastic]

The server admin will always be able to take ownership of the file and open it. There is nothing you can do about that, its just a right an administrator has.

 

[mwood60098]

Use EFS to encrypt the file/folder you don't want others to access.

HTH,

Woody

"Don't let education get in the way of learning"

 

[UTTech]

Can Server Admin give access to himself to an EFS encrypted file?