I'm a General Manager of Engineering Organization, and i have critical data folders on a file server (Accounts, Financial Data, HR) and i want to ask if there any solution to restrict the network administrator from accessing these folders?

I can demote his account to power user but then i will face other issues in the future if i want him to troublshoot any network problem.

please try to give me some options

Thanks

You can try to disable to take ownership privilege for administrators, but assign this privilege for youself, and remove administrator from access rights of folders, and take ownership of you files. So, administrators can't access this files and can't take ownership. Administrators only can get files for backup, if they will have bypass security restriction privilege. But you can remove this privilege too.

Hi Ahmad,

I would like to know if the files are on local computer and if the network administartor is also the local administrator.

If he is a local admin, you may not able to restrict as he can still take ownership of the files stored on local. Maybe setup an EFS is availabe on this situation.

If he is not but you are, you can change the permission as Kubik mentioned to restrict.

 

• Marked as answer by Shaon ShanMicrosoft contingent staff, Moderator Friday, June 18, 2010 6:31 AM

Can you explain how to do that on a w7 system?

Hi

Can we have the steps we have to do restrict admin for access on the data and shared folders.

Thanks