Re: OT Windows Admin rights

In article <gh394p$95e$1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
Alan <Alan.Crowder@xxxxxxxxxxxxxx> wrote:
"Jim" <blueflies@xxxxxxx> wrote in message
news:ejlf06-gqb.ln1@xxxxxxxxxxxxxxxxxxxxxxxxxxx
In article <gh38mr$8vj$1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
Alan <Alan.Crowder@xxxxxxxxxxxxxx> wrote:
"Jim" <blueflies@xxxxxxx> wrote in message
news:i4lf06-8mb.ln1@xxxxxxxxxxxxxxxxxxxxxxxxxxx
In article <gh382n$8oq$1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
Alan <Alan.Crowder@xxxxxxxxxxxxxx> wrote:
System running WinXP pro, fully patched up and with up to date
anti-virus, a particular application HAS to run as an Admin, is there
any way other Admins can be locked out from viewing the results?

If I was to create a folder on another drive as an admin could I protect
it from another Admin?

Using the folder encryption should work.

Go on.......

In what way?

Like how does one make it work?

Oh, OK.

Well, you can create a folder, right click on it, general tab, advanced,
then click on Encrypt contents to secure data. This turns on folder
encryption. Everything in that folder should show up in green.

The problem of getting the data to be stored in that folder is
application specific.

The encryption is keyed off the user password, so even if another user
is a member of the Administrators group they can't easily access the
files.

There is a problem in my clever scheme, unfortunately: the local
administrator account can retrieve files in some circumstances. And
anyone who has administrator privileges to the machine can change the
password of the local Administrator. If the machine is joined to a
domain you can set policies up to close the hole with a little fiddling.

I assume you're only looking for a 99% solution, though: there's no way
of ensuring perfect security in environments where people can
shoulder-surf passwords and install keyloggers.

Lots more details here
http://en.wikipedia.org/wiki/Encrypting_File_System
.

Relevant Pages

  • Re: Is there a dominant administrator account?
    ... is it possible to set my account so that another administrator ... it sounds like you have marked your profile directory as private and the other administrators have not. ... If they are admin, they can still get to your files but the process is a multistep one. ... The easiest way to toggle this setting is to go to the profile folder under Documents and Settings, right click on the folder, go to the Sharing tab and click the "Make this folder private..." ...
    (microsoft.public.windowsxp.general)
  • Re: Vista and Visual FoxPro 6.0
    ... Did you try running your app as superman, I meant, Administrator? ... and although there were admin ... the program files folder. ...
    (microsoft.public.fox.programmer.exchange)
  • Re: cant read folder - dell please help.
    ... I believe I'm running as the administrator. ... I do not see any securities tab to click to take ownership of the folder? ... Go to the security tab and click advanced. ... > encryption certificate or a Recovery Agent from the installation under ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: HELP---------HELP
    ... workgroup, or the key for the Administrator of the domain to solve this ... THIS USERS HE MAKE ENCRYPTED FILE SYSTEM OVER THIS FOLDER ... > | MESSSGAE AND ITS UNABLE TO REMOVE THE ENCRYPTION AND DISPLAY ACCESS DENIED. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to open secured files
    ... folder, other users even administrator can’t see the contents of these files. ... > I have tried with mmc and consoles and tried to import encryption and ... Why so much complications in Microsoft for a user. ...
    (microsoft.public.win2000.general)