PDA

View Full Version : Want to Deny Local Admin group


darkhawk-uk
04-08-2008, 08:02 AM
Sorry if this is old hat,
I have a dialema,
I'm have a member server of a very large network, all of the user accounts are in the Active Dir of the HQ. The server we have on site is only a member server and as such still using local groups.
The Service dept, is a member of the Local Admins group on the server.
However there is a private folder that we want to limit access to certain members of that group.
The current situation is that i have taken ownership of the folder and explicitly set the rights for the people that need access to it.
But anyone of the admin group can take ownership of the folder and assign themselves rights. I realise that this is not the best setup, but it is ran by HQ, and we won't be DC Promo'd anytime soon.

Any help would be great thanks