Re: Log access or prevent access to private/confidential information.
- From: "Robin Tucker" <unmailable@xxxxxxxxxxxxx>
- Date: Tue, 30 Aug 2005 16:16:51 +0100
Yes indeed they can. But a reset password will give me some indication that
this has been done.
Note: I am not seeking to make sure this information *cannot ever be access
by any administrator at any time*, I am merely wanting such information to
be accessed with my or my managers permission in such circumstances as this
may be neccessary. With this method, my manager can, if required gain
access to the data by asking the administrator to reset the password.
"David Candy" <.> wrote in message
news:eQIm3DXrFHA.3640@xxxxxxxxxxxxxxxxxxxxxxx
Admins can take ownership of any file. File permissions won't help. Admins
can reset the user's password and login and access encrypted files.
--
--------------------------------------------------------------------------------------------------
http://webdiary.smh.com.au/archives/_comment/001075.html
=================================================
"Brian Cryer" <brianc@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1125410994.18200.0@xxxxxxxxxxxxxxxxxxxxx
> "Robin Tucker" <unmailable@xxxxxxxxxxxxx> wrote in message
> news:df1b6b$sr1$1$8300dec7@xxxxxxxxxxxxxxxxxxx
>> Hi,
>>
>> I would like to be able to log access to my folders from the network.
>> That is, I want to know when an administrator has accessed my drive. I
>> have private/confidential information on my PC and do not want
>> administrators to be able to access it, unless I give explicit
>> permission.
>> How can I achieve this?
>>
>> Thanks,
>>
>>
>> Robin.
>
> Robin,
>
> I don't think you can log access to folders. I've certainly not come
> across
> a way to do it.
>
> In terms of preventing administrators or any others from accessing your
> folders, there are a few options:
>
> 1. Use file permissions. Using windows explorer, right click the folder
> you
> want to protect, select properties. Then on the "Security" tab you have
> control over who has permissions to view, edit, etc on the folder. To stop
> system administrators I think you will need to revoke access to
> "Administrators". But review each of the permissions because I think the
> logic is to grant access to someone if they have access via any of the
> accounts/groups listed. You will also need to consider permissions on the
> files themselves. If you can't view or change the security permissions
> then
> its likely that the system administrators have locked this out - after
> all,
> fiddling with the file permissions in say the windows folder and you could
> break your system.
>
> 2. Encrypt your files. If you have your disk formatted NTFS then you can
> encrypt files (file properties > general > Advanced), but if you encrypt a
> file then I think that only you can read it - which isn't any good if you
> need to share the file with anyone else.
>
> Hope this helps,
>
> Brian.
>
> www.cryer.co.uk/brian
>
>
.
- References:
- Log access or prevent access to private/confidential information.
- From: Robin Tucker
- Re: Log access or prevent access to private/confidential information.
- From: Brian Cryer
- Log access or prevent access to private/confidential information.
- Prev by Date: Re: Easy Question (I think) abpout lock up
- Next by Date: Re: My Documents
- Previous by thread: Re: Log access or prevent access to private/confidential information.
- Next by thread: deleted contact list
- Index(es):
Relevant Pages
|
