|
| If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below. |
|
|||||||
|
|
Thread Tools | Display Modes |
|
#1
March 19th 08, 11:46 AM
posted to microsoft.public.windowsxp.security_admin
|
|||
|
|||
What is the best way to restrict access to Domain Admins on certainfolders?
Some of the folders in our file system contain sensitive financial
data. The file server is managed by our IT department. How do I restrict the people in Domain Admins group (some of them are from IT Department) from accessing sensitive data? If I remove read permissions to Domain Admins, backup jobs may fail. 
|
| Ads |
|
#2
March 19th 08, 01:42 PM
posted to microsoft.public.windowsxp.security_admin
|
|||
|
|||
|
What is the best way to restrict access to Domain Admins on certain folders?
Ravi wrote:
Some of the folders in our file system contain sensitive financial data. The file server is managed by our IT department. How do I restrict the people in Domain Admins group (some of them are from IT Department) from accessing sensitive data? If I remove read permissions to Domain Admins, backup jobs may fail. EFS. But be very careful. Your domain admins/IT staff are the ones you need to rely on to administer/manage/back up and restore your data. If you encrypt something and they can't work on it/back it up, and you can't unencrypt it, your data is lost. Hire only admins you can trust, and have everyone sign computer use agreements, nondisclosure agreements, and so forth.. Note for future This isn't really the best group for a question like this - I'd post in microsoft.public.windows.server.active_directory with a possible crosspost to microsoft.public.security.
|
|
#3
March 25th 08, 06:41 AM
posted to microsoft.public.windowsxp.security_admin
|
|||
|
|||
|
What is the best way to restrict access to Domain Admins on ce
"Lanwench [MVP - Exchange]" wrote:
EFS. But be very careful. Your domain admins/IT staff are the ones you need to rely on to administer/manage/back up and restore your data. If you encrypt something and they can't work on it/back it up, and you can't unencrypt it, your data is lost. Very true. Besides, IT staff are Gods eyes glow and you would do well to kneel before us.
|
|
#4
March 25th 08, 01:03 PM
posted to microsoft.public.windowsxp.security_admin
|
|||
|
|||
|
What is the best way to restrict access to Domain Admins on ce
Anteaus wrote:
"Lanwench [MVP - Exchange]" wrote: EFS. But be very careful. Your domain admins/IT staff are the ones you need to rely on to administer/manage/back up and restore your data. If you encrypt something and they can't work on it/back it up, and you can't unencrypt it, your data is lost. Very true. Besides, IT staff are Gods eyes glow and you would do well to kneel before us. We especially like offerings of glazed raspberry-jelly doughnuts.
|
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
