Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 130
  • Last Modified:

Does anyway know how to restict certain folders from the Administrators while allowing a paticular Administrator to have access?

There are a number of HR folders that I do not want the Domain Administrators to access. However, I do want the HR department to access them (one of the HR users must be included in the Domain Administrators group). What is the best way to go about keeping all but one Admins out of a folder?
0
AnimatorOne
Asked:
AnimatorOne
  • 3
1 Solution
 
Jason WatkinsIT Project LeaderCommented:
Hi,

The best way to do it would be to use explicit permissions on the folder's ACL.  Remove the domain administrators, and add the folks you would like to have access.  It may be easier to create a global group after the HR users and add the users, then add that group to the folder's ACL.

/F
0
 
Ahmed Abdel SalamPh.D. CandidateCommented:
is you restrict access to domain admin and permet it to HR group this user will not be able to access it.
deny access overight the permit access
0
 
Jason WatkinsIT Project LeaderCommented:
I would use deny very carefully...

Also, if you really want to keep the admins out make sure their permission to take ownership of the folder is removed.  Deny should be used for quick breaks in access to a file-system object.

/F
0
 
AnimatorOneAuthor Commented:
Thank you
0
 
Jason WatkinsIT Project LeaderCommented:
Thanks for the points!
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now