stand-alone windows 2000 or .net server in a workgroup with all local
accounts.
add specific user rights only to each folder
leave off admin account
uncheck inherit permissions
uncheck "take ownership"

----- Original Message -----
From: "Orin Rehorst" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[EMAIL PROTECTED]>
Sent: Friday, November 22, 2002 11:30 AM
Subject: OT: Absolute file protection


> Am I missing any options?
>
> Objective: set up server folder / storage area for access by specified
users
> only (no admin access allowed) in the NT / WIN2K server environment.
>
> Options, from worst to best:
>
>
> * Set up a folder with access allowed for specified users only. This
> will not work in our environment because the admins for the domain can
take
> ownership of any folder.
> * Set up a separate server and domain with the specified users the
> only admins. The specified users would have to maintain the domain (and
> server). Also, with physical access to the server, knowledgeable people
with
> enough time and effort could access the separate server and domain.
> * Use the password options of Word, Excel and other applications.
> There are software packages that can crack into these files.
> * Share a folder on the PC of one of the specified users. Anyone on
> the LAN with enough knowledge, time, and effort could hack into a shared
> folder.
> * Use available software packages to make files in a folder encrypted.
> Knowledgeable people with enough time and effort could compromise such
> files.
> * Store the files on an offsite third party system. It could be made
> difficult for anyone beyond the specified users to know that this type of
> storage arrangement had even been set up. Admins of the third party may be
> able to access the information.
>
>
> Regards,
> Orin
>
> Orin Rehorst
> Port of Houston Authority
> (Largest U.S. port in foreign tonnage)
> e-mail:  [EMAIL PROTECTED]
> Phone:  (713)670-2443
> Fax:      (713)670-2457
> TOPAS web site: <www.homestead.com/topas/topas.html>
>
>
>
> _________________________________________________________________
> List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
> Archives:               http://www.swynk.com/sitesearch/search.asp
> To unsubscribe:         mailto:[EMAIL PROTECTED]
> Exchange List admin:    [EMAIL PROTECTED]


_________________________________________________________________
List posting FAQ:       http://www.swinc.com/resource/exch_faq.htm
Archives:               http://www.swynk.com/sitesearch/search.asp
To unsubscribe:         mailto:[EMAIL PROTECTED]
Exchange List admin:    [EMAIL PROTECTED]

Reply via email to