Securing a server within W2K domain

  • Thread starter Thread starter Doggus
  • Start date Start date
D

Doggus

I would like to know the best (most secure) way to secure a server
within a domain tree. Our company has a server that confidential
documents are kept on that only 2 or 3 people will be allowed to
access. We just finished setting up our new W2K domain and currently
only have a domain root, no sub domains. Is there a way to set this
server up as a domain controller in our current tree (making it a
subdomain) and make it so that only these 3 people will have access?
The administrator of the root domain (or anyone else) must not have
any access to this secure server.

I thought about creating a completely new forest with this server and
then creating a one-way trust relationship back to our main domain and
putting these three individual accounts in the new domain. The only
problem is I can't seem to get Exchange email to work across this type
of setup.

Thanks for any info. I can provide more information if this isn't
clear.
 
Just use the NTFS permissions to allow only who you want. There is no way
to prevent the Administrator. If the Administrator permissions are removed,
then the Administrator can just put them back. Think about that,...if the
Administrator could be removed,...then how could the permissions ever be set
again or adjusted since it take an Administrator to do that?
 
Back
Top