Restrict Enterprise Admin

  • Thread starter Thread starter Guest
  • Start date Start date
Terry said:
How can I restrict the Entrpise admin from having access to financial
data?
Click to expand...

Encrypt it (and if you use the built-in Encrypting File System, make sure he
isn't a recovery agent. Otherwise, use some third-party tool.) Make sure
you don't lock yourself out though.

Other than that, there is no way. Administrators can do anything.
 
What about using the deny attributes?

Colin Nash said:
Encrypt it (and if you use the built-in Encrypting File System, make sure he
isn't a recovery agent. Otherwise, use some third-party tool.) Make sure
you don't lock yourself out though.

Other than that, there is no way. Administrators can do anything.
Click to expand...
 
Terry said:
What about using the deny attributes?
Click to expand...


Sure, but an administrator can use his privileges to override those "deny"
entries, and give himself permission again though.

Again, be SUPER careful with deny or you could lock yourself out (and wind
up needing an administrator to grant you access again.) For example, if you
"Deny" "Everyone" but "Allow" your account, then nobody including you can
get access. This is because you are a member of "Everyone" and the "Deny"
takes precedence. Only way to fix that is for an administrator to take
ownership and replace the permissions.
 
Back
Top