How to prevent IT staff access sensitive folder in windows 2003 server

[a208]

Hi,

There are some high confidential files in one shared folder for dept. staff access, however, they concern IT staff access this folder because they hold an administrator password, how to solve this problem.

Thanks in advance.

patrick

 

[Davetoo]

Don't share it on a network file server.

Short of that, they'll have to deploy some sort of encryption, which brings into play all sorts of other technical issues as far as recovery, etc.

I'm Certifiable, not cert-ified.
It just means my answers are from experience, not a book.

There are no more PDC's! There are DC's with FSMO roles!

 

[strongm]

>how to solve this problem

Remove their access to the admin password. If they need certain, specific admin rights, delegate these to their normal user accounts via through ADUC

 

[58sniper]

Just remember one thing - you can't support something you don't have access to. If you're worried about I.T. staff having access to sensitive materials, you need to look at the staff as well.

Pat Richard MVP
Plan for performance, and capacity takes care of itself. Plan for capacity, and suffer poor performance.

http://www.ucblogs.net/blogs/exchange/

 

[ACooperman]

I agree with 58sniper but if you need a workaround and your staff are using domain admin logins remove domain admin and leave enterprise admin, leave yourself and the users who need access to the files access. Not recommended but it works.