Track Domain Admin.

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

The domain admins can go into any machines to see the data either by normal
logon or share drive (c$, D$). We are asked to provide a accessing log for
this. Where can I find a accessing log for this kind of access, especially
for the later one?
Thank you!
 
The reality is there is no way to fully audit a domain administrator in a
domain if you don't trust them. The best way to fix this kind of an issue is
not to make anybody a domain admin who is not already trustworthy. If users
want to protect information from domain admins the only way is to use EFS
but even there you need plan your policy carefully.
 
If you can't trust your admin you should get one you can trust.


hth
DDS W 2k MVP MCSE
 
Back
Top