In a windows 2008 R2 server with multiple administrator accounts, is it possible to create private folders (one per admin) in one drive that the other administrators cannot unlock (gain access to)?
I have tried using deny "Full control" on a folder from one account, but the other account could simply remove that restriction.
We're a very small company, about to install a new server at a colocation company. The plan is to install the OS, SQL, and IIS, test it, then courier it to the hosting company. It will then presumably appear online, ready for further set up. We plan to manage it over RDP.
Last time we went through this process, we were using Server 2003, and the IPSEC admin was something of a grind.
Is it any different with Server 2008? Is there a quick way of restricting all access except that originating from a couple of IP addresses?
Would appreciate any pointers, or a good idiot's guide to securing Server 2008 for non-experts.
I need to lock down a system so that a group of individuals can log into the server via ssh.
When they log into ssh I would like them to be presented with a screen session and locked down to that single application. This is so the application can continue to run in the background, while nothing else from the command line can be run.
Any ideas? Maybe there is a better solution than screen?
I was just wondering if there is the "Lockdown Mode" for trial version of the ESXi 4.1 version? I can't seem to enable to option as when I F2 to customize the system, the option is not selectable and there is no such option found in the vSphere 4.0. Any help would be appriciated. Thanks!
I know we all struggle to strike a balance between keeping our user's workstations locked down but still usable. I have a real problem with one client whose users are constantly installing toolbars, games, malware etc. I really want to be able to take away their local administrative rights (and so does management). The problem is they rely on a handful of poorly written applications that require local administrator rights to run properly. Before anybody suggests it, it is not possible to get rid of these applications.
I realize I can create custom shortcuts to these applications using the runas command and saving the local administrator credentials. The problem with this solution is:
What I would love is to install some application or apply a Group Policy that allows me to specify applications that should be allowed to elevate the local profile's permissions. Is there a solution like this available?
How does everyone else handle locking down workstations and still supporting legacy/poorly written software?