local administrator

[Ahmed Nour]

I have Win 2k Advanced Server Domain ,all of my users are
super user but some of them needs to install some programs
which need an administrative privillege so i create a
local administrator account for them to setup their appz .
but I found that any local admin could browse all data of
other domain clients(the same as domain admin)

help will be appreciated
Best regards

 

[Roger Abell]

inlined . . .

I have Win 2k Advanced Server Domain ,all of my users are
super user

I take that to mean they are Power Users group members (?)

but some of them needs to install some programs
which need an administrative privillege so i create a
local administrator account for them to setup their appz .
but I found that any local admin could browse all data of
other domain clients(the same as domain admin)

by "other domain clients" do you mean
- on other machines in the domain
if so, use a unique local admin account name on each machine,
such as on MachineX have account MachineXadm
- storage on same machine that belongs to different
domain user accounts that use that machine
if so, you can modify NTFS permissions so that the local
admin has to take explicit actions to change them in order
to get access to those storage area.