Re: Domain Admins and Sharepoint

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

I think you might be misunderstanding the intent of this patch. It serves
two purposes, one it keeps the honest people honest. Locks don't keep
determined burglars out of your house. If they want in badly enough,
they'll get in. They'll bust a window, whatever. All security consists of
is making yourself a harder target. This patch keeps honest admins honest
and makes it tougher for them to get in, should they want in. The second
thing it does is make other users feel better about the security of their
sites. This patch makes it so an admin can't just accidentally walk into
their site. They have to go out of their way to get it. It gives the users
(including executives) a feeling of security, which is just as important as
actually being secure.

In closing, you're right. This patch won't keep them out if they really
want in. But putting it on is better than nothing at all if it's a concern.

tk
"Jtyc" <yo@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:eklZo5peGHA.3808@xxxxxxxxxxxxxxxxxxxxxxx
SP2 for WSS includes a way to keep local admins out of the sites they
don't have explicit person to. The implementation is covered here,
http://support.microsoft.com/kb/892295/

Interesting. Well, that will slow a domain admin down but you still can't
prevent them from seeing the data if they really want to.









.

Relevant Pages

  • Re: Do you want a pitcher, or a position player
    ... 1,2,3 punch. ... Now all they got is Rivera. ... They need to patch up that hole, ... I don't think we need any more bats, to be honest. ...
    (alt.sports.baseball.ny-yankees)
  • Re: Lost - adultery
    ... Sofa - Spud wrote: ... life played away from home with a women who to be honest wasn't a ... patch on his wife I thought about how often I had seen this on US ...
    (uk.media.tv.misc)
  • Re: Missing stdint.h includes?
    ... Kind of odd why they're redefined there to be honest, ... esp because POSIX doesn't say that they should be defined there. ... developer with a commit bit who's interested in cleaning up ... Patch 1: ...
    (freebsd-hackers)
  • Re: new patch
    ... how are people finding D2005 since this patch? ... I can't say I have noticed a difference to be honest, ... My blog ... Prev by Date: ...
    (borland.public.delphi.non-technical)
  • Re: [patch 06/12] elevator=as back-compatibility
    ... Well the patch is trivial enough, but I don't see it fitting the stable ... criteria to be honest. ...
    (Linux-Kernel)