local administrator

  • Thread starter Thread starter Ahmed Nour
  • Start date Start date
A

Ahmed Nour

I have Win 2k Advanced Server Domain ,all of my users are
super user but some of them needs to install some programs
which need an administrative privillege so i create a
local administrator account for them to setup their appz .
but I found that any local admin could browse all data of
other domain clients(the same as domain admin)

help will be appreciated
Best regards
 
inlined . . .
Ahmed Nour said:
I have Win 2k Advanced Server Domain ,all of my users are
super user
Click to expand...

I take that to mean they are Power Users group members (?)
but some of them needs to install some programs
which need an administrative privillege so i create a
local administrator account for them to setup their appz .
but I found that any local admin could browse all data of
other domain clients(the same as domain admin)
Click to expand...

by "other domain clients" do you mean
- on other machines in the domain
if so, use a unique local admin account name on each machine,
such as on MachineX have account MachineXadm
- storage on same machine that belongs to different
domain user accounts that use that machine
if so, you can modify NTFS permissions so that the local
admin has to take explicit actions to change them in order
to get access to those storage area.
 
Back
Top