Solved

How to prevent administrator from deleting folder Windows server 3K

Posted on 2014-01-27
5
181 Views
Last Modified: 2014-10-23
I want to block the administrator logonfrom being able to delete files and/or the folder that contains them.  I need to call scripts using the administrator logon, but want to block it from being able to delete any files in the folder.
0
Comment
Question by:eshapley
  • 3
5 Comments
 
LVL 20

Expert Comment

by:Patrick Bogers
ID: 39812869
So in the folder properties edit the admin and only allow read and traverse file, disable write and modify. No need to explicitly set deny rights.
0
 

Author Comment

by:eshapley
ID: 39813081
If only it were that easy.  Is your solution referring to properties found in advanced tab, or in the securities tab only.  The issue I am having is that when I change one of the permissions a new entry admin entry gets created in the advanced tab.  I can remove the new entry, but still, nothing takes affect.
0
 
LVL 20

Accepted Solution

by:
Patrick Bogers earned 500 total points
ID: 39813102
Then the admin is probably the owner for that folder, change the owner first in that case.
0
 
LVL 70

Expert Comment

by:KCTS
ID: 39813105
The simple answer is that you can't - Even if you remove the permission, being an administrator, the administrator could just give themselves the permission back again.
0
 
LVL 20

Expert Comment

by:Patrick Bogers
ID: 39813147
True but they need to take this extra step.
0

Featured Post

Netscaler Common Configuration How To guides

If you use NetScaler you will want to see these guides. The NetScaler How To Guides show administrators how to get NetScaler up and configured by providing instructions for common scenarios and some not so common ones.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Have you considered what group policies are backwards and forwards compatible? Windows Active Directory servers and clients use group policy templates to deploy sets of policies within your domain. But, there is a catch to deploying policies. The…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

837 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question