Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

Hello
How can I get access to my files and folders on my portable drive on other
computers? I do not want to give access to a Windows XP group because I
don't want
Administrators of our domain have direct access to my files on the drive.
They will not take ownership because I will see the taking. I want to get
access by a password.

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

Use a 3rd-party security/encryption software - needs to be installed on each
computer where you're using your drive

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

"Dmitry Kopnichev" <kopn@hotbox.ruDELETE> wrote in message
news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl...
> Hello
> How can I get access to my files and folders on my portable drive on other
> computers? I do not want to give access to a Windows XP group because I
> don't want
> Administrators of our domain have direct access to my files on the drive.
> They will not take ownership because I will see the taking. I want to get
> access by a password.
>

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

Owners of computers could not allow installing the software on their
computers. Can't I use Windows for a password protected access?
"S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
news:eAhfvJshFHA.2424@TK2MSFTNGP09.phx.gbl...
> Use a 3rd-party security/encryption software - needs to be installed on
> each
> computer where you're using your drive
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> "Dmitry Kopnichev" <kopn@hotbox.ruDELETE> wrote in message
> news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl...
>> Hello
>> How can I get access to my files and folders on my portable drive on
>> other
>> computers? I do not want to give access to a Windows XP group because I
>> don't want
>> Administrators of our domain have direct access to my files on the drive.
>> They will not take ownership because I will see the taking. I want to get
>> access by a password.
>>
>
>

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

Still struggling with this hey Dmitry ?

Since you cannot install anything on the machines where this
will be used, you really need to just use NTFS.

To get it set up you will for a while have to have a grant to a
built-in group, like Users, unless you can log in as an admin on
each machine where use is needed.
1. set full control for Users on the external NTFS
then on each system where it will be used
2. set full grant to the account used on that system
when doing this
2a. the grants to accounts from other systems are known only
on the other systems and so will show up as SID strings or
as Unknown - leave them alone.
3. when you set the grant to the last account, on the last system
where this will be used, remove the grant of Full to Users
that was only needed in order to be able to make the grants
to the specific users
Whatever temporary group, like Users above, used to build
up the desired permissions must be understood on each system
so it must be a builtin group that will include the account you
log in with on each system.

--
Roger Abell
Microsoft MVP (Windows Security)

"Dmitry Kopnichev" <kopn@hotbox.ruDELETE> wrote in message
news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl...
> Hello
> How can I get access to my files and folders on my portable drive on other
> computers? I do not want to give access to a Windows XP group because I
> don't want
> Administrators of our domain have direct access to my files on the drive.
> They will not take ownership because I will see the taking. I want to get
> access by a password.
>

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

In news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl,
Dmitry Kopnichev <kopn@hotbox.ruDELETE> typed:
> Hello
> How can I get access to my files and folders on my portable drive on
> other computers? I do not want to give access to a Windows XP group
> because I don't want
> Administrators of our domain have direct access to my files on the
> drive. They will not take ownership because I will see the taking. I
> want to get access by a password.

Roger's reply re NTFS is correct. However, if you're trying to bypass your
network admins, and you are not officially one yourself, I can't help you.
If the data isn't supposed to be on your computer/on the network, don't do
it.

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:eXGo3VvhFHA.2152@TK2MSFTNGP14.phx.gbl...
>
>
> In news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl,
> Dmitry Kopnichev <kopn@hotbox.ruDELETE> typed:
> > Hello
> > How can I get access to my files and folders on my portable drive on
> > other computers? I do not want to give access to a Windows XP group
> > because I don't want
> > Administrators of our domain have direct access to my files on the
> > drive. They will not take ownership because I will see the taking. I
> > want to get access by a password.
>
> Roger's reply re NTFS is correct. However, if you're trying to bypass your
> network admins, and you are not officially one yourself, I can't help you.
> If the data isn't supposed to be on your computer/on the network, don't do
> it.
>


Hey, I thought he just wanted to have the pix of the sig-other around
but beyond network admin eyes
--
Roger

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

Thanks for your reply, Roger.
Thus, I have to give the Full grants to the Users group each time there is a
smallest possibility I might need my portable drive contents on any other
Windows NT and remove the grant of Full to Users each time I come back to my
domain Windows XP. I will have to give and remove Full grants too often and
it will take too much time.
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:uVgvszuhFHA.1948@TK2MSFTNGP12.phx.gbl...
> Still struggling with this hey Dmitry ?
>
> Since you cannot install anything on the machines where this
> will be used, you really need to just use NTFS.
>
> To get it set up you will for a while have to have a grant to a
> built-in group, like Users, unless you can log in as an admin on
> each machine where use is needed.
> 1. set full control for Users on the external NTFS
> then on each system where it will be used
> 2. set full grant to the account used on that system
> when doing this
> 2a. the grants to accounts from other systems are known only
> on the other systems and so will show up as SID strings or
> as Unknown - leave them alone.
> 3. when you set the grant to the last account, on the last system
> where this will be used, remove the grant of Full to Users
> that was only needed in order to be able to make the grants
> to the specific users
> Whatever temporary group, like Users above, used to build
> up the desired permissions must be understood on each system
> so it must be a builtin group that will include the account you
> log in with on each system.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
> "Dmitry Kopnichev" <kopn@hotbox.ruDELETE> wrote in message
> news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl...
>> Hello
>> How can I get access to my files and folders on my portable drive on
>> other
>> computers? I do not want to give access to a Windows XP group because I
>> don't want
>> Administrators of our domain have direct access to my files on the drive.
>> They will not take ownership because I will see the taking. I want to get
>> access by a password.
>>
>
>

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

Why do you think the data isn't supposed to be on my computer? Our Admin
just keeps the network working, they are not supposed to see all the
commercial data that other specialists possess.
"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:eXGo3VvhFHA.2152@TK2MSFTNGP14.phx.gbl...
>
>
> In news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl,
> Dmitry Kopnichev <kopn@hotbox.ruDELETE> typed:
>> Hello
>> How can I get access to my files and folders on my portable drive on
>> other computers? I do not want to give access to a Windows XP group
>> because I don't want
>> Administrators of our domain have direct access to my files on the
>> drive. They will not take ownership because I will see the taking. I
>> want to get access by a password.
>
> Roger's reply re NTFS is correct. However, if you're trying to bypass your
> network admins, and you are not officially one yourself, I can't help you.
> If the data isn't supposed to be on your computer/on the network, don't do
> it.
>

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

I can log in as an admin on each machine where use is needed.
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:uVgvszuhFHA.1948@TK2MSFTNGP12.phx.gbl...
> Still struggling with this hey Dmitry ?
>
> Since you cannot install anything on the machines where this
> will be used, you really need to just use NTFS.
>
> To get it set up you will for a while have to have a grant to a
> built-in group, like Users, unless you can log in as an admin on
> each machine where use is needed.
> 1. set full control for Users on the external NTFS
> then on each system where it will be used
> 2. set full grant to the account used on that system
> when doing this
> 2a. the grants to accounts from other systems are known only
> on the other systems and so will show up as SID strings or
> as Unknown - leave them alone.
> 3. when you set the grant to the last account, on the last system
> where this will be used, remove the grant of Full to Users
> that was only needed in order to be able to make the grants
> to the specific users
> Whatever temporary group, like Users above, used to build
> up the desired permissions must be understood on each system
> so it must be a builtin group that will include the account you
> log in with on each system.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
> "Dmitry Kopnichev" <kopn@hotbox.ruDELETE> wrote in message
> news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl...
>> Hello
>> How can I get access to my files and folders on my portable drive on
>> other
>> computers? I do not want to give access to a Windows XP group because I
>> don't want
>> Administrators of our domain have direct access to my files on the drive.
>> They will not take ownership because I will see the taking. I want to get
>> access by a password.
>>
>
>

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

Some of the machines where use is needed are Windows XP Home.
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:uVgvszuhFHA.1948@TK2MSFTNGP12.phx.gbl...
> Still struggling with this hey Dmitry ?
>
> Since you cannot install anything on the machines where this
> will be used, you really need to just use NTFS.
>
> To get it set up you will for a while have to have a grant to a
> built-in group, like Users, unless you can log in as an admin on
> each machine where use is needed.
> 1. set full control for Users on the external NTFS
> then on each system where it will be used
> 2. set full grant to the account used on that system
> when doing this
> 2a. the grants to accounts from other systems are known only
> on the other systems and so will show up as SID strings or
> as Unknown - leave them alone.
> 3. when you set the grant to the last account, on the last system
> where this will be used, remove the grant of Full to Users
> that was only needed in order to be able to make the grants
> to the specific users
> Whatever temporary group, like Users above, used to build
> up the desired permissions must be understood on each system
> so it must be a builtin group that will include the account you
> log in with on each system.
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
> "Dmitry Kopnichev" <kopn@hotbox.ruDELETE> wrote in message
> news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl...
>> Hello
>> How can I get access to my files and folders on my portable drive on
>> other
>> computers? I do not want to give access to a Windows XP group because I
>> don't want
>> Administrators of our domain have direct access to my files on the drive.
>> They will not take ownership because I will see the taking. I want to get
>> access by a password.
>>
>
>

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

In article <#hfE616hFHA.720@TK2MSFTNGP14.phx.gbl>, kopn@hotbox.ruDELETE
says...
> Why do you think the data isn't supposed to be on my computer? Our Admin
> just keeps the network working, they are not supposed to see all the
> commercial data that other specialists possess.

You are wrong, the network admin can and will be able to see all data on
the network, if you don't trust the network admin then you need to get a
new one.

It really seems like you're doing something you don't need to be doing
and that you feel you have a reason to hide.



> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
> news:eXGo3VvhFHA.2152@TK2MSFTNGP14.phx.gbl...
> >
> >
> > In news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl,
> > Dmitry Kopnichev <kopn@hotbox.ruDELETE> typed:
> >> Hello
> >> How can I get access to my files and folders on my portable drive on
> >> other computers? I do not want to give access to a Windows XP group
> >> because I don't want
> >> Administrators of our domain have direct access to my files on the
> >> drive. They will not take ownership because I will see the taking. I
> >> want to get access by a password.
> >
> > Roger's reply re NTFS is correct. However, if you're trying to bypass your
> > network admins, and you are not officially one yourself, I can't help you.
> > If the data isn't supposed to be on your computer/on the network, don't do
> > it.
> >
>
>

--
--
spam999free@rrohio.com
remove 999 in order to email me

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

Only General manager is supposed to see all the information. But he will not
administrate the network himself of course. General manager has even a
second computer separate from the Admins network to keep information
securely. Our Admin is two times younger than most of our specialists and
has only computer education and is not devoted to our business as the
General manager is. A company can never take just a computer specialist into
it's confidence, can never entrust all its commercial information to him.
"Leythos" <void@nowhere.lan> wrote in message
news:MPG.1d3eea582772e4b9899d7@news-server.columbus.rr.com...
> In article <#hfE616hFHA.720@TK2MSFTNGP14.phx.gbl>, kopn@hotbox.ruDELETE
> says...
>> Why do you think the data isn't supposed to be on my computer? Our Admin
>> just keeps the network working, they are not supposed to see all the
>> commercial data that other specialists possess.
>
> You are wrong, the network admin can and will be able to see all data on
> the network, if you don't trust the network admin then you need to get a
> new one.
>
> It really seems like you're doing something you don't need to be doing
> and that you feel you have a reason to hide.
>
>
>
>> "Lanwench [MVP - Exchange]"
>> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
>> message
>> news:eXGo3VvhFHA.2152@TK2MSFTNGP14.phx.gbl...
>> >
>> >
>> > In news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl,
>> > Dmitry Kopnichev <kopn@hotbox.ruDELETE> typed:
>> >> Hello
>> >> How can I get access to my files and folders on my portable drive on
>> >> other computers? I do not want to give access to a Windows XP group
>> >> because I don't want
>> >> Administrators of our domain have direct access to my files on the
>> >> drive. They will not take ownership because I will see the taking. I
>> >> want to get access by a password.
>> >
>> > Roger's reply re NTFS is correct. However, if you're trying to bypass
>> > your
>> > network admins, and you are not officially one yourself, I can't help
>> > you.
>> > If the data isn't supposed to be on your computer/on the network, don't
>> > do
>> > it.
>> >
>>
>>
>
> --
> --
> spam999free@rrohio.com
> remove 999 in order to email me

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (More info?)

"Dmitry Kopnichev" <kopn@hotbox.ruDELETE> wrote in message
newsC%23sKZ7hFHA.2916@TK2MSFTNGP14.phx.gbl...
> Only General manager is supposed to see all the information. But he will
> not administrate the network himself of course. General manager has even a
> second computer separate from the Admins network to keep information
> securely. Our Admin is two times younger than most of our specialists and
> has only computer education and is not devoted to our business as the
> General manager is. A company can never take just a computer specialist
> into it's confidence, can never entrust all its commercial information to
> him.

As others have pointed out you need to rethink your business model when it
comes to computers. With today's technology the network administrator will
potentially have access to everything. You can use auditing to see what has
been done but it's pretty hard to stop it from being done. The only way I
know to get around this is to keep data that sensitive on a computer not
connected to the LAN or use 3rd party encryption software.

Kerry


> "Leythos" <void@nowhere.lan> wrote in message
> news:MPG.1d3eea582772e4b9899d7@news-server.columbus.rr.com...
>> In article <#hfE616hFHA.720@TK2MSFTNGP14.phx.gbl>, kopn@hotbox.ruDELETE
>> says...
>>> Why do you think the data isn't supposed to be on my computer? Our Admin
>>> just keeps the network working, they are not supposed to see all the
>>> commercial data that other specialists possess.
>>
>> You are wrong, the network admin can and will be able to see all data on
>> the network, if you don't trust the network admin then you need to get a
>> new one.
>>
>> It really seems like you're doing something you don't need to be doing
>> and that you feel you have a reason to hide.
>>
>>
>>
>>> "Lanwench [MVP - Exchange]"
>>> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
>>> message
>>> news:eXGo3VvhFHA.2152@TK2MSFTNGP14.phx.gbl...
>>> >
>>> >
>>> > In news:u1uy8XrhFHA.3316@TK2MSFTNGP14.phx.gbl,
>>> > Dmitry Kopnichev <kopn@hotbox.ruDELETE> typed:
>>> >> Hello
>>> >> How can I get access to my files and folders on my portable drive on
>>> >> other computers? I do not want to give access to a Windows XP group
>>> >> because I don't want
>>> >> Administrators of our domain have direct access to my files on the
>>> >> drive. They will not take ownership because I will see the taking. I
>>> >> want to get access by a password.
>>> >
>>> > Roger's reply re NTFS is correct. However, if you're trying to bypass
>>> > your
>>> > network admins, and you are not officially one yourself, I can't help
>>> > you.
>>> > If the data isn't supposed to be on your computer/on the network,
>>> > don't do
>>> > it.
>>> >
>>>
>>>
>>
>> --
>> --
>> spam999free@rrohio.com
>> remove 999 in order to email me
>

Archived from groups: microsoft.public.security,microsoft.public.security.homeusers,microsoft.public.windowsxp.security_admin (