Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We've a server 2008 Std installed on our network.

I want to setup 2 folders, that will be shared only with two relevant users. I've changed the Security to just those users, however when I double click on them while logged in as Administrator, all I have to do is click "continue" and the administrator gets added to the permissions.

Is it possible to block these from being viewed by the administrators? I seem to remember that on older systems you could do this. If the administrator NEEDED access, they then had to take ownership etc. This would still be acceptable for me.



share|improve this question

You can't block an administrator from anything. If you need to restrict access, take away their membership in the Administrators group. As you've mentioned, they can just take ownership.

If you look closely as what the UAC prompt is asking you for permission to do, it's likely taking ownership of the folder and adding an explicit ACE for the current user, just in one click instead of 10.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.