none
Restrict access for Domain admins to the server and share folders in it.

    Question

  • Hi Team,

    Basically, i need to restrict access to File servers in the domain from Domain Admins.

    All the administrators and domain admins can access the server by default. I need to restrict them to RDP the server and as well accessing the share folders in the server. How we can do ??

    As a risk measures, i have dedicated two member team, only they should have access to that servers. Apart from no else should have.

    Also in some of the CASES, FILE SERVER ARE ALSO ACTING AS ADC.

    Please suggest and provide you ideas, my ultimate goal is to no should access the file server and it shares.

    Regards, Dj 

    Tuesday, July 30, 2013 9:59 AM

Answers

  • Hello,

    don't make them domain admin. Any setting you configure a domain admin can revert.

    If you don't trust people don't make them admin.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Tuesday, July 30, 2013 10:19 AM

All replies