I am not sure about Keith's suggestion. In theory it should work but since you said that these users from the NT world are equivlent to root and they are still admins in the NT Domain the filer resides in (which they probably are) I believe they would still be able to open server manager on the Filer. I am not positive but I think this could be the case.

Also I believe that as long as these NT admins have change access to these directories/files they could be able to share it anyway. Keep in mind that even if you find a way to disable server manager, with the correct rights (which in your scenerio I believe they would have)NT admins still have a variety of command line ways of administering this data if they want to.

From: "Keith Brown" keith@netapp.com Reply-To: "Keith Brown" keith@netapp.com To: toasters@mathworks.com, "Marion Hakanson" hakanson@cse.ogi.edu Subject: Re: disable NT remote management? Date: Fri, 18 May 2001 16:32:12 -0700

...

So, does anyone know how to disable access to Server Manager,

Remove the "FILERDOMAIN\Domain Admins" global group from the filer's "BUILTIN\Administrators" local group using User Manager for Domains. This will prevent your NT adminstrators from messing with filer shares.

I am almost, but not quite 100% certain that administrative rights to the file system will be unaffected by this (the "Administrators" local group SID is a domain-wide constant if memory serves, so it should still find its way into your NT admin's security tokens via other means), but give it a try.

Keith

_________________________________________________________________ Get your FREE download of MSN Explorer at http://explorer.msn.com