Can I hide my personal information from administrators of a domain?

[Dmitriy Kopnichev]

Hello
Can I hide my personal information from administrators of a domain in which
my computer is? Or how to share a folder on my computer with other members
of the domain?

 

[Rick \Nutcase\ Rogers]

Can I hide my personal information from administrators of a domain in
which

my computer is?

Copy the information to disk, then delete it.

Or how to share a folder on my computer with other members
of the domain?

Description of File Sharing and Permissions in Windows XP [Q304040]
http://support.microsoft.com/?kbid=304040

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Dmitriy Kopnichev]

Can the domain administrators see my information even when I'm not logged on
to a domain account but to a local account? Keeping the information on a
removable disk is not convenient. The only thing I need in the domain is a
network exchange disk.

Can I hide my personal information from administrators of a domain in which
my computer is?

Copy the information to disk, then delete it.

Or how to share a folder on my computer with other members
of the domain?

Description of File Sharing and Permissions in Windows XP [Q304040]
http://support.microsoft.com/?kbid=304040

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Roger Abell]

If you have info stored on the local machine, and some
account (domain admin or any other) has access to the
info, it does not matter what account owns the info nor
whether that account is or is not logged in.
You can set permissions so that domain admins do not
have access to some files/folders. You can also make it
more difficult for domain admins to log into your machine
(locally or over the network) but if they really want to get
at something on your machine they can if the domain is
W2k or later.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

Can the domain administrators see my information even when I'm not logged on
to a domain account but to a local account? Keeping the information on a
removable disk is not convenient. The only thing I need in the domain is a
network exchange disk.

Can I hide my personal information from administrators of a domain in which
my computer is?

Copy the information to disk, then delete it.

Or how to share a folder on my computer with other members
of the domain?

Description of File Sharing and Permissions in Windows XP [Q304040]
http://support.microsoft.com/?kbid=304040

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Dmitriy Kopnichev]

There's only a domain account on my computer also. Can I restrict access for
the domain account to my info. The domain account was made for me.
Yes. The domain is W2k.

If you have info stored on the local machine, and some
account (domain admin or any other) has access to the
info, it does not matter what account owns the info nor
whether that account is or is not logged in.
You can set permissions so that domain admins do not
have access to some files/folders. You can also make it
more difficult for domain admins to log into your machine
(locally or over the network) but if they really want to get
at something on your machine they can if the domain is
W2k or later.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

Can the domain administrators see my information even when I'm not

logged

on
to a domain account but to a local account? Keeping the information on a
removable disk is not convenient. The only thing I need in the domain is a
network exchange disk.

Can I hide my personal information from administrators of a domain in
which
my computer is?

Copy the information to disk, then delete it.

Or how to share a folder on my computer with other members
of the domain?

Description of File Sharing and Permissions in Windows XP [Q304040]
http://support.microsoft.com/?kbid=304040

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Guest]

What you can do partially depends on whether you are a local administrator of
your machine, or a "user" or a "power user". (If you are a "guest", you had
better act like one, if you want to be invited back).

If you are not a local administrator, there is almost nothing you can do to
hide your files from administrators, except maybe to keep them in a
password-protected zip file or something like that.

If you are a "user", you normally will not be able to create shares or change
permissions, but if you are a "power user" or "administrator", you may be able
to create shares to allow others access to folders over the network, or change
permissions to allow different access.

If you are a local administrator, you usually can change permissions to deny
access to domain administrators - but they can change those permissions, too,
unless you remove them from being administrators on your machine - in which
case your machine could then be considered to be no longer a fully functioning
member of the domain, and you would be pretty much on your own.

|Hello
|Can I hide my personal information from administrators of a domain in which
|my computer is? Or how to share a folder on my computer with other members
|of the domain?

 

[Malke]

What you can do partially depends on whether you are a local
administrator of
your machine, or a "user" or a "power user". (If you are a "guest",
you had better act like one, if you want to be invited back).

If you are not a local administrator, there is almost nothing you can
do to hide your files from administrators, except maybe to keep them
in a password-protected zip file or something like that.

If you are a "user", you normally will not be able to create shares or
change permissions, but if you are a "power user" or "administrator",
you may be able to create shares to allow others access to folders
over the network, or change permissions to allow different access.

If you are a local administrator, you usually can change permissions
to deny access to domain administrators - but they can change those
permissions, too, unless you remove them from being administrators on
your machine - in which case your machine could then be considered to
be no longer a fully functioning member of the domain, and you would
be pretty much on your own.

|Hello
|Can I hide my personal information from administrators of a domain
|in which my computer is? Or how to share a folder on my computer
|with other members of the domain?

Bottom line: it would be better not to have private data on a work
computer. Save it for home.

Malke

 

[Dmitriy Kopnichev]

Yes. I'm a local administrator of my machine. The domain administrators
don't have a local administrator account.

 

[Dmitriy Kopnichev]

There's only my domain account in "User Accounts" when I logon to my domain
account. There's no any domain account at all when I logon to a local
account. How to remove domain administrators from being administrators on my
machine?

 

[Dmitriy Kopnichev]

My domain account is in the "Administrators" group.

 

[Dmitriy Kopnichev]

I get "Change Password
The system cannot change your password now because the domain RNE is not
available." The domain RNE is available because I'm able to logon to my
domain account.

 

[Roger Abell]

If it says the domain is unavailable it is unavailable.
If you disable the ability to log in with cached credentials
you may discover that you cannot log in (because the domain
is not available)

 

[Dmitriy Kopnichev]

How to disable the ability to log in with cached credentials?

If it says the domain is unavailable it is unavailable.
If you disable the ability to log in with cached credentials
you may discover that you cannot log in (because the domain
is not available)

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

I get "Change Password
The system cannot change your password now because the domain RNE is not
available." The domain RNE is available because I'm able to logon to my
domain account.

What you can do partially depends on whether you are a local

administrator

of
your machine, or a "user" or a "power user". (If you are a "guest",

you
had

better act like one, if you want to be invited back).

If you are not a local administrator, there is almost nothing you can

do
to

hide your files from administrators, except maybe to keep them in a
password-protected zip file or something like that.

If you are a "user", you normally will not be able to create shares or change
permissions, but if you are a "power user" or "administrator", you may

be

able
to create shares to allow others access to folders over the network,

or
change

permissions to allow different access.

If you are a local administrator, you usually can change permissions

to
deny

access to domain administrators - but they can change those

permissions,
too,

unless you remove them from being administrators on your machine - in which
case your machine could then be considered to be no longer a fully functioning
member of the domain, and you would be pretty much on your own.

 

[Dmitriy Kopnichev]

Should I remove my domain account to hide my information from domain
administrators? I can get access to needed network folders even under my
local account.

 

[Dmitriy Kopnichev]

Will I retain access to needed network folders if I click "Workgroup" in
"Computer name changes" window in "System Properties" window.

 

[Dmitriy Kopnichev]

How to know if domain admin has access to the info?

If you have info stored on the local machine, and some
account (domain admin or any other) has access to the
info, it does not matter what account owns the info nor
whether that account is or is not logged in.
You can set permissions so that domain admins do not
have access to some files/folders. You can also make it
more difficult for domain admins to log into your machine
(locally or over the network) but if they really want to get
at something on your machine they can if the domain is
W2k or later.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

Can the domain administrators see my information even when I'm not

logged

on
to a domain account but to a local account? Keeping the information on a
removable disk is not convenient. The only thing I need in the domain is a
network exchange disk.

Can I hide my personal information from administrators of a domain in
which
my computer is?

Copy the information to disk, then delete it.

Or how to share a folder on my computer with other members
of the domain?

Description of File Sharing and Permissions in Windows XP [Q304040]
http://support.microsoft.com/?kbid=304040

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Dmitriy Kopnichev]

Will I retain access to needed domain network folders if I click "Workgroup"
in "Computer name changes" window in "System
Properties" window?

If you have info stored on the local machine, and some
account (domain admin or any other) has access to the
info, it does not matter what account owns the info nor
whether that account is or is not logged in.
You can set permissions so that domain admins do not
have access to some files/folders. You can also make it
more difficult for domain admins to log into your machine
(locally or over the network) but if they really want to get
at something on your machine they can if the domain is
W2k or later.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

Can the domain administrators see my information even when I'm not

logged

on
to a domain account but to a local account? Keeping the information on a
removable disk is not convenient. The only thing I need in the domain is a
network exchange disk.

Can I hide my personal information from administrators of a domain in
which
my computer is?

Copy the information to disk, then delete it.

Or how to share a folder on my computer with other members
of the domain?

Description of File Sharing and Permissions in Windows XP [Q304040]
http://support.microsoft.com/?kbid=304040

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Roger Abell [MVP]]

In the local security policy (or, in GPO from Active Directory)
set the number of cached credentials to store policy to zero (0).

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4

How to disable the ability to log in with cached credentials?

If it says the domain is unavailable it is unavailable.
If you disable the ability to log in with cached credentials
you may discover that you cannot log in (because the domain
is not available)

can

do

to
hide your files from administrators, except maybe to keep them in a
password-protected zip file or something like that.

If you are a "user", you normally will not be able to create shares or
change
permissions, but if you are a "power user" or "administrator", you

may
be

 

[Roger Abell [MVP]]

Look at the NTFS perrmissions to see aht groups/accounts
are granted access, and compare this to the accounts that
are members in those groups. In default, Domain Admins
are members of the local Administrators group, but they could
be added into other groups.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4

How to know if domain admin has access to the info?

If you have info stored on the local machine, and some
account (domain admin or any other) has access to the
info, it does not matter what account owns the info nor
whether that account is or is not logged in.
You can set permissions so that domain admins do not
have access to some files/folders. You can also make it
more difficult for domain admins to log into your machine
(locally or over the network) but if they really want to get
at something on your machine they can if the domain is
W2k or later.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
logged

is

a

network exchange disk.
Can I hide my personal information from administrators of a domain in
which
my computer is?

Copy the information to disk, then delete it.

Or how to share a folder on my computer with other members
of the domain?

Description of File Sharing and Permissions in Windows XP [Q304040]
http://support.microsoft.com/?kbid=304040

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone

 

[Roger Abell [MVP]]

This depends. Usually one can use a domain account that
is granted access to a domain resource in order to access
that resource from a non-domain machine. However, the
resource can be configured so this is not possible.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4

Will I retain access to needed domain network folders if I click "Workgroup"
in "Computer name changes" window in "System
Properties" window?

If you have info stored on the local machine, and some
account (domain admin or any other) has access to the
info, it does not matter what account owns the info nor
whether that account is or is not logged in.
You can set permissions so that domain admins do not
have access to some files/folders. You can also make it
more difficult for domain admins to log into your machine
(locally or over the network) but if they really want to get
at something on your machine they can if the domain is
W2k or later.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
logged

is

a

network exchange disk.
Can I hide my personal information from administrators of a domain in
which
my computer is?

Copy the information to disk, then delete it.

Or how to share a folder on my computer with other members
of the domain?

Description of File Sharing and Permissions in Windows XP [Q304040]
http://support.microsoft.com/?kbid=304040

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Win9x
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone