Admin Rights to others C drive 2

[boxster8]

Hi All,

Is there any way to restrict some administrator accounts from accessing other users C drive? I need our some of our network users to have admin rights, but I don't want them to be able to go to \\computername\c$. Any suggestions would be greatly appreciated!

Best Regards,
Don

 

[Scotsdude]

just give them local admin rights....

------------------------------------------------------
Matt
Life is all shadows and dust.
Live it up with women and wine while you can

 

[boxster8]

Scotsdude,

Thanks. But they need to be able to log into other users computers as administrators, as they trouble shoot users issues. Our users are power users, so the techs that I'm referring to need to log in as themselves with admin rights on any computer. Our boss is concerned that when these technicians are on their own computers, they can back door to someone's C drive....like his. Right now the techs are in AD as "wsadmins".

Best Regards,
Don

 

[boxster8]

FYI,

I just logged in as the local admin (administrator/this computer) on a laptop, and I was able to connect to outhers C drive.

 

[Scotsdude]

thats...mildy worrying, being able to map to anothers c drive like that...

essentialy, though, if they require to have admin rights when tehy login to the pc, they will have th ability to map to their c drive. i don't think you can avoid this.

------------------------------------------------------
Matt
Life is all shadows and dust.
Live it up with women and wine while you can

 

[lhuegele]

Your technicians should have 2 AD accounts - one to use for admin duties, and another one that is just a regular domain use account. The domain use account is what they should use for normal log-in to their own workstations, and the other one for use when they need to do administrative tasks for users or on servers.

This is mostly a company policy issue. Clearly communicate the policy to the admins in question, and even have them sign an acknoledgement and put it in their employee files so there's no question that they understand what's expected of them in their role as an administrator.

Then, remind your boss that there needs to be a certain level of trust given to those administrators and IT in general because if you can't trust your IT people, there will always be huge barriers to getting anything meaningful done. IT needs to be a business partner, and without trust, that's impossible.

Good luck,

 

[boxster8]

Thanks all! I didn't think there was a way, but I wasn't sure...