how can we restrict the users from accessing some files from the server?

Question

actually we have 60 users and most of them are having the administrative privilage.that means they r in the administrator group.now the problem what we are facing we need to create and keep some folders in the network.and it shold be accessable only for some particular users others can't open the contents.but when we are trying for that in the securities it's showing everyone full control.we don't want to give full control for every one.only for some particular users.how can we perform it.is it possible through power user group.if so means how can we create new power users from this existing condition.or we want to redesign our entire network for resolve this problem.if u have any solution for this plz send as soon as possible with necessory steps.thanks.

Answer 1

Make the Admin's a special user class, such as Power Users and those who are Admins that need those files cn be fulll blown Admins.

Answer 2

From a security standpoint having 60 people all with admin access is a security nightmare of nearly epic perportions.

There should be just one. The geekyist one you have. Spend some money and get him an education in cyber security. It will save you big bucks down the road.

As to the administrator thing, only someone who understands the necessity of keeping newbies out of registry is quallified to administer any computer. Cyber Security 101.

Go to start, settings, control panel, user accounts. Pick One administrator (the geek) and let the rests be users. If a user needs an administrative adjustment to some software or system, he or she should see the administrator.

Pretty simple really.

Obviously the Administrator account should be password protected.

A good password is at least 8 characters long and should be a combination of upper and lower case letters and numbers.

It should be regularly changed. (on a schedule).

You didn't mention how your computers get online, but if your connection is cable or dsl, you need a Router. Linksys makes one for your system. I have found them reliable.

Start visiting tech sites like PC World.com or PCMag.com, TechRepublic.com. These are user level tech sites that teach without patronising.

Run good firewalls, protect your ports and party on.

Answer 3

you should not give everyone admin privileges, I don't think that you can stop 'admin' user from accessing something, the best thing would be is to use some program that will encrypt the files that you don't want someone to see then install decryptor program on computers that you want to have access to those files, the files would be password(encryption key) protected, so no one without a key could access(decrypt) the files