Track Domain Admin.

[Guest]

The domain admins can go into any machines to see the data either by normal
logon or share drive (c$, D$). We are asked to provide a accessing log for
this. Where can I find a accessing log for this kind of access, especially
for the later one?
Thank you!

 

[Sundaram Narayanan[MSFT]]

The reality is there is no way to fully audit a domain administrator in a
domain if you don't trust them. The best way to fix this kind of an issue is
not to make anybody a domain admin who is not already trustworthy. If users
want to protect information from domain admins the only way is to use EFS
but even there you need plan your policy carefully.

 

[Danny Sanders]

If you can't trust your admin you should get one you can trust.


hth
DDS W 2k MVP MCSE