Re: Permissions (seperate area?)

Tech-Archive recommends: Fix windows errors by optimizing your registry

rossk wrote:
Anyone know how I can do this?

I need to create a folder so a group of user can store data there but
lock the sys admin out (myself) and encrypt the data? Basically I
need an area that only this one guy can control and no one else. He
needs to be able to control that area in whole (permissions etc)

If he does this I need to know I can still back that data up. I know
in unix I can with root but not sure with windows.

Thanks!!

You can't permanetly lock out the admins. You can encrypt the data so that
the admin can not examine or alter it. The admin should have had an recovery
certificate created which you need to take into account if you really want
to ensure this. While the user can control the data, he/she is also
responsible for it. You've not only the need to backup the encrypted data,
but also the certificates needed to encrypt and decrypt it.


--
/kj


.

Relevant Pages

  • Re: Permissions (seperate area?)
    ... E. Now how can I get them to take control of the folder and lock the ... I have an issue when I select the Encrypt contents to secure data ... you hope the admin cannot ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: SSO configstore.
    ... yes, this might be a problem, so i actually have to double encrypt the data ... If you have clusttered environment domain admin can do ... I have deveolped a secure pipeline ... I have chosen the SSO db and used the "Configstore" to ...
    (microsoft.public.biztalk.general)
  • Re: Permissions (seperate area?)
    ... lock the sys admin out and encrypt the data? ... need an area that only this one guy can control and no one else. ... You can't permanetly lock out the admins. ... the admin can not examine or alter it. ...
    (microsoft.public.windows.server.sbs)
  • Re: keep others out of my computer
    ... Admin would be the only user, ... other system or other default permissions alone. ... Then I would create a backup admin account. ... I would then encrypt my entire hard drive (ignoring files that cannot be ...
    (microsoft.public.win2000.security)
  • Re: disabled account accepting publickey authentication
    ... >> that are expecting you to use this listfile module, ... > problem for admins trying to lock someone out completely. ... let the admin configure things the way they need them to work ... publickey authentication on a server before their fired and unless the ...
    (comp.security.ssh)