Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Stopping admin accounts accessing another's documents

22 Jun 2009   #11
sup3rsprt

XP, Seven, 2008R2
 
 

Quote   Quote: Originally Posted by dmex View Post
You can remove the Administrators Group from always being able to take ownership of objects via the Local Security Policy
That's a good trick, and funny, but if the other Admin is smart enough he can also edit the Local Security Policy.

I wonder if, besides using a Power User, there is a way to solve this using built-in encryption? I know EFS was a pretty weak system but have there been any improvements to this in Win7?


My System SpecsSystem Spec
.
23 Jun 2009   #12
dmex

 

Quote   Quote: Originally Posted by sup3rsprt View Post
That's a good trick, and funny, but if the other Admin is smart enough he can also edit the Local Security Policy.
If you take ownership of mmc.exe and gpedit.msc then set the security to prevent access, other admins would be unable to edit policy's

Quote:
I wonder if, besides using a Power User, there is a way to solve this using built-in encryption? I know EFS was a pretty weak system but have there been any improvements to this in Win7?
Unless an Admin configures a recovery key, other users cant access EFS protected files. I would keep regular backups of your EFS key encase your password is reset since it will also erase your EFS key as a security measure

Steven
My System SpecsSystem Spec
23 Jun 2009   #13
sup3rsprt

XP, Seven, 2008R2
 
 

Unfortunately I don't think EFS will protect the files from being deleted, unless of course something has changed in Windows 7.
My System SpecsSystem Spec
.

27 Apr 2010   #14
cmdahome

Win 7 Ultimate
 
 
One Caveat

Bear in mind that the folder you are trying to protect must have been created by the user who is trying to secure and own it; ie, if root creates it, then fred tries to secure it, he cannot.
My System SpecsSystem Spec
Reply

 Stopping admin accounts accessing another's documents




Thread Tools




Similar help and support threads
Thread Forum
Full Admin Accounts
Hi everyone, I'm trying to set up a user to be an administrator in Windows 7 Ultimate... 1) I created the user as an Administrative account 2) I have turned UAC off in Conrol Panel -> Users Accounts -> Change User Account Control Settings by setting it to "Never Notify" 3) I have set UAC...
System Security
Stopping My Video files from going into My Documents folder.
When I download onto BBC iPlayer the downloaded programme is stored in My Videos/BBC iPlayer downloads file which is fine. My problem is, the same download goes into Documents\ My Videos but I have synched Documents with free Dropbox for backup purposes and as space is limited in Dropbox I will...
General Discussion
Preventing Guest from accessing Admin account
Hi there, I have setup a guest account on Windows 7 Ultimate 32-bit and noticed that after logging in to the guest account, I am able to access my own account folder (admin account). This is wierd as this should not happen. Any user logged in to the guest account should not be able to see the...
System Security
How can i block certain user accounts from accessing certain partition
Hi i have patition (c) and partition (D) and partition (j) I need help blocking a standard user from accessing partition (D) and partion (j). windows 7 Home premium 64 bit Thnks for any help in advanced
General Discussion
one computer, 7 users accounts need to share admin documents
I want to be able to share Administrator documents and files with user acoounts on the same computer.... without having access to the internet. I only have one computer. But I have 7 different user accounts on that one computer. I want each of my users to have access to the Administrators...
Network & Sharing
Accessing Office Documents Using Your Phone
More...
News


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:44.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App