PDA

View Full Version : how do I disable administrator account at windows 2000


IBICO
05-11-2001, 07:00 AM
How do I disable the possibility for the domain administrator to access my computer from the nettverk. I am using a laptop with windows 2000, that I use both at work, and home. I have alot of sensitive information on my computer, and I do NOT want the administrator on my nettvork at work reading my hardisk. I know there is a way to use regedit to disable, but do not know where.

Skave
05-11-2001, 08:04 AM
You cant !
Als long as the Computer log into the domain you cant deny them the access.

But you can encrypt your pesonal data so that the admin can adminstrat the data but not read them !!!

But be careful if something happens to the harddisk or you lose the PW there is only limeted help.

RWSchlatter
05-11-2001, 07:01 PM
J believe following should work:
make yourself the (only) owner of a (data) directory. Then to my knowledge, no admin can look at your data without you knowing. How do you know? you wold have lost ownership - a special priviledge of admins: the may take ownership anytime - but then you see / feel it. Ownership cannot be returned without login on the the account concerned and you have the password.

Howto:
go to the data directories you want to have protected,
right click and display the Properties,
select the Security tab,
make sure that the checkbox "inherited..." is not selected.
if you are not listed, add yourself, remove any other account or group, remove Administrator group.
Possibly add group EVERYONE, then Deny all permissions.
Depending how you make your data backups, possibly add group Backup Operators to the group.
Click advanced, then select Owner tab, check ownership.

If you have special software in the directory (not just data), or database data, special Usernames may require an entry giving them selective access.

______________
Regards - Richard