Hello, We have installed several PCs running Windows 2000 Professional at work, and of course, we have the admin password to get into those Windows 2K pro. workstations. Users are assigned only Power Users right to those PCs. Many confidential excel files and folders are being saved into these PCs, and users don't want anybody can see those files and folders including the administrator. I already set the owner of the files is the only one who has full control, and nobody else has access to it. When I logged in as the admin and tried to open the files, I got "access denied" message. However, I know I am still be able to take ownership of the file because I log in as the admin. I also know that admin has implicit ability to take ownership of any files in the system. Does anybody know is there any way the owner of file can block others including the admin from accessing the files? Thanks
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
File Permissions, Widnows 2000 Professional 1
- Thread starter oceanone
- Start date
-
1
- #4
Enable encryption on the folder that the file slay in; then ensure that the domain(or local PC) has a designated recovery agent in case the files need to be recovered and the person who encrypted them has left the company or forgerts their NT logon or whatever...
Back up the files on a regular basisi and remember, once these files are encrypted using EFS, there is only two ways to view them:
User who was logged into PC and/or users given permission after encryption can view/copy/paste/edit/delete the files
and recovery agent..thats it, anyone else will receive access denied when attempting to do anything but list the files.
Cheers,
J
Back up the files on a regular basisi and remember, once these files are encrypted using EFS, there is only two ways to view them:
User who was logged into PC and/or users given permission after encryption can view/copy/paste/edit/delete the files
and recovery agent..thats it, anyone else will receive access denied when attempting to do anything but list the files.
Cheers,
J
One more thing; by default the local administrator is the recovery agent when not working in a domain environment; you would want to remove that and add a domain admin as the recovery agent...someone who can be trusted obviously
Cheers,
jatcan
Cheers,
jatcan
- Status
Similar threads
