File Permissions, Widnows 2000 Professional 1

[oceanone]

Hello, We have installed several PCs running Windows 2000 Professional at work, and of course, we have the admin password to get into those Windows 2K pro. workstations. Users are assigned only Power Users right to those PCs. Many confidential excel files and folders are being saved into these PCs, and users don't want anybody can see those files and folders including the administrator. I already set the owner of the files is the only one who has full control, and nobody else has access to it. When I logged in as the admin and tried to open the files, I got "access denied" message. However, I know I am still be able to take ownership of the file because I log in as the admin. I also know that admin has implicit ability to take ownership of any files in the system. Does anybody know is there any way the owner of file can block others including the admin from accessing the files? Thanks

 

[PAndersen]

The admin. should be able to access any file, but the owner may use cryptification to hide the content of the files.

 

[jrbarnett]

Don't store the files on the PC - USB flash disks are cheap enough these days.

John

 

[JatCan]

Enable encryption on the folder that the file slay in; then ensure that the domain(or local PC) has a designated recovery agent in case the files need to be recovered and the person who encrypted them has left the company or forgerts their NT logon or whatever...

Back up the files on a regular basisi and remember, once these files are encrypted using EFS, there is only two ways to view them:

User who was logged into PC and/or users given permission after encryption can view/copy/paste/edit/delete the files

and recovery agent..thats it, anyone else will receive access denied when attempting to do anything but list the files.

Cheers,

J

 

[JatCan]

One more thing; by default the local administrator is the recovery agent when not working in a domain environment; you would want to remove that and add a domain admin as the recovery agent...someone who can be trusted obviously

Cheers,

jatcan