Keeping Network Admin from accessing users’ home directories

1110 pts.
Administrative privileges
Data Center management
Home Directory
Network administration
Network Administrator
We do not want our network administrator to have access to users home directories. How can we make this happen?

Answer Wiki

Thanks. We'll let you know when a new response is added.

Depending on how you do permissions you can remove administrator from the access list either in active directory or NTFS permissions. Just log on as administrator and right click on whatever you wish to remove permissions from and share options and remove the administrator. Just be sure that someone has full control over the folder to make changes and perhaps make a back up account that has full access in case something happens to the owner of that account. The only thing is if he has full domain admin controls like mentioned he could potentially revert this change. So if it is a trust issue you probably look into replacing this guy or knocking him down on the permissions list to power user not administrator.

Discuss This Question: 3  Replies

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • Technochic
    What is the domain functional level and the OS of the server on which the folders are kept?
    57,010 pointsBadges:
  • swinehart6803
    If your network admin is a member of the domain admin group that makes it difficult, but not impossible. He/she could always take ownership of the files, and then revert access back again. Plus you could always audit the files and see when they were viewed or modified, if you have a reason the believe that the admin may be going where he/she is not supposed to be. I agree with Technochic, you need to give some more info on this issue, and the OS's being used.
    1,050 pointsBadges:
  • Subhendu Sen
    I think this is not possible without Administrator right. If general user have right to control home directories other than Administrator, hope it will possible. Or u have to use a 3rd party Sw for this purpose. But remember without knowledge don't do that !
    142,670 pointsBadges:

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.


Share this item with your network: