Advanced security settings from client account

Khalid Salameh · 10 Sep 2016

Hello,

I want to secure my files and my account.

I connect my laptop to Domain and it is "Windows server 2008", so any of client have an account can login to here account, but I don't want to give these client any permission to login to my files, I want to give him only permession to access or to login to here file

What I need is to keep my account (Documents/Desktop/Pictures/etc...) and files on "Local Disk( D : )" in safe, even if he had a password of administrator/Domain....

- or If I can separate my Admin account from a Domain accounts????

I want a high protection for my "Admin" account.

How can I do this ?? please if any body can help me?

Lance1 · 10 Sep 2016

Welcome Khalid Salameh to W7F. First off, are you the Admin on that Domain or just a user? If your just a user, you have no control over the security of that Domain and your account is not an "Admin" account. only the Administrator of the Domain has that authority. But you have the option to logon to your locale machine. As I said, if your just a user, Here's a link to give you an understanding of the difference between a Local Account vs Domain User Account

LMiller7 · 10 Sep 2016

If you are a domain admin these are the things you should know, and well. This cannot be learned adequately by asking questions on a forum.

If you are not a domain admin security is out of your control. If you have concerns take them to the domain admin or the IT staff. Do not attempt to take this into your own hands. You cannot hide anything from a domain admin.

Khalid Salameh · 17 Sep 2016

In short, I own language training center ASP.net, and I'm Administrator on Domain and I want all students to enter their account only and not to give them any powers to any amendment to the options, they are doing Login to the software on Visual studio by "Run as Administrator", so I they have a password of an administrator domain account..

Is there a way to prevent them from reaching powers even if it has a password?

LMiller7 · 17 Sep 2016

You cannot restrict what another domain admin can do. All attempts to do so are ultimately futile. You should find another way that does not require students to have a domin admin account.

RolandJS · 17 Sep 2016

The only solution that I can think of: place all your off-limits-to-students answer keys, documents, notes, etc. into a strongly passworded "pot" -- be it a partition, be it a folder -- probably labeled Teacher for example. I think there are still utilities that can offer that kind of protection; and keep that l-o-n-g password on a piece of paper in your wallet.
**Have an EZ-backup/EZ-restore full images, made weekly, bi-weekly, of your Teacher stuff on a usb ext HD [2-3TB is what's selling now] small enough to fit into a quart freezer baggie - in your teacher briefcase like the President carries the Football. Do not use any usb ext HD that has on-board/circuit-level encryption.**

Layback Bear · 17 Sep 2016

LMiller7 said:

You cannot restrict what another domain admin can do. All attempts to do so are ultimately futile. You should find another way that does not require students to have a domin admin account.

Right on the money. Admin privileges to students opens the door to everything for the students.

Lance1 · 17 Sep 2016

Khalid Salameh said:

In short, I own language training center ASP.net, and I'm Administrator on Domain and I want all students to enter their account only and not to give them any powers to any amendment to the options, they are doing Login to the software on Visual studio by "Run as Administrator", so I they have a password of an administrator domain account..

Is there a way to prevent them from reaching powers even if it has a password?

Your granting them administrative privileges.. Why are you doing that?? They all should be Standard users and nothing more. To grant them more is disaster. I suggest that you lock them down tight. And if they need something for their studies they would have to come to you. Administrative privileges for students is wrong on so many if not all levels. When I studied for my MCSE back in 2000 we had no access no nothing. We only had what the instructor needed or wanted to give us for the course. Tuff... But thats how it should be.

Alejandro85 · 18 Sep 2016

Of course that if you give them administrator access (even for a single program) then you give FULL access to the whole computer. Moreover, if that account is a domain administrator instead of just a loca admin, the students effectively OWN your domain. That's the inherent characteristic of administrator accounts, and the very reason why standard accounts exist.

Now, question is why you're giving admin accounts to students. You mention Visual Studio for developing asp.net websites. But that in fact don't requires administrative access at all!. It uses a local dev server that doesn't even runs as a service, it's a plain program that runs the website locally. There is no reason at all for giving administrator access for that, and for almost any development work.
Question is, why do you want to run Visual Studio as administrator?