how do I disable Disk management ?

hello
I have a win2012 server with many users on it and some jerk likes to delete drives
so I need to disable diskmanagmeant for everyone but myself
this Screenshot by Lightshot seems to aply only to myself
done from gpedit.msc
really annoying this should be effecting everyone not just me

If you have access to the Server version of Windows, odds are you're running a domain and that would be a much better place to make this change. Just make it so only domain administrator level accounts have access to that program. Also, why would you not report this guy's action to his supervisor along with yours? In plenty of, most even, companies that kind of thing is more than enough to see you joining the ranks of the unemployed.

You may want to read up on this. http://www.tech-faq.com/implementing-account-and-security-policies.html If the proper GPO's are in place. No end user should have the kind of access you are talking about.

the server isn't running a domain
and I have many admin class users
I don't know which one is causing problems so I want to block them all from this program
but without demoting them all

The only way to fix the problem is run it as a domain.

Otherwise you will continue having this problem.

somone setup one of my servers as a domain once and I couldn't figure out how to manage users on it hehehe

You probably shouldn't be in the position you are if you can't figure out how to manage a domain, but that aside... Unless people absolutely need admin access to do their jobs, you shouldn't be giving that to them. You've already demonstrated an excellent reason why. Most people can be trusted, but there's always a couple of idiots who will cause problems because they can.

Even if you don't know who it is, I'd still approach the higher ups, tell them what's been going on and let them send some kind of company-wide message saying how this issue has come to their attention and they want whoever is doing it to stop immediately. Then go on to say that if it happens again, you are empowered to take any means you deem necessary to investigate and identify the culprit who will then be summarily terminated. Even if there's some kind of union contract saying you can only be fired for good cause, I'd say intentionally sabotaging the company computer systems counts as good cause. If you get some kind of pushback on this from company management, you've likely just identified the person responsible and you're screwed because they're higher up in the corporate food chain.

Without a domain you can't limit what an admin can do. The Administrator account is a little different but still equal for practical purposes. All admin accounts are equal and have the same rights you do. Any attempt to use group policy or other method can be quite easily circumvented, merely speed bumps along the way.

You really need to find a non technical solution to this problem.

there is no higher up to go to

anyway if I can't stop them how about tracking down who is doing it
what event logs do I look for
drive deleting or formatting

basically any changed to the drive config

I think what I'd do as Administrator is start changing User passwords on the Server then see who squawks the loudest. Does the room with the Server have a lockable door? Maybe change the lock? Might help to find out if access/changing is being accomplished remotely.

amartin99 said:

there is no higher up to go to

anyway if I can't stop them how about tracking down who is doing it
what event logs do I look for
drive deleting or formatting

basically any changed to the drive config

Click to expand...

I think at this point you're well and truly screwed and there's basically nothing you're going to do to find the person responsible. If you can't even go to someone above you in the corporate food chain, don't have a domain set up and don't know what logs to be checking I think that amounts to game, set and match for the person causing you problems. The final nail in the coffin is not being able to remove admin rights. Something on that list has to change or you may as well resign yourself to your current circumstances.

Maybe something here:
https://www.google.com/search?site=....0....0...1c.1.54.hp..4.21.2274.0.SH0K7Ubn9Xw