Restrict take ownership rights

Giganews Newsgroups
Subject: Restrict take ownership rights
Posted by:  Gunna (Gun…@discussions.microsoft.com)
Date: Wed, 3 Sep 2008

I know this is a dumb question but i have to ask.  Is there anyway I can
restrict members of a XP desktops local administrator group from taking
ownership of a folder.  I have given a group access to a folder on a XP
machine and then taken the local administrators group access to the same
folder away.  I want to ensure that local administrators cannot come along
and elevate their own privilleges by taking ownership.

The folder holds very sensitive data that adminis are not allowed to access
however they need local admin rights for some other reasons e.g. applying
patches and general admin.  Is there another group on these desktops that can
be used for admin purposes like the Server Operators group for servers?

Replies