A new security section established in our organization and the management wants to restrict the technical support section from accessing shares and all other type of confidential data or maneuver to get them. What should I do as a security officer to stop doing this? Right now, they Admin rights.

create a security group. assign the technical team to the group. assign the group to the locations you desire at the privledge levels you desire. Assign the group to locations you don't want them accessing and set them to deny privledge level. You should also audit their activity. This very well may cripple the technical teams abiltity to perform their jobs. Give a person a fish, they eat for a day. Suggest they internet search and they learn a skill for a lifetime.

of course if they are in the admin group they can give themselves access! Are you in the admin group?

And here I thought taking them out of the admin group was the no brainer part :-) Give a person a fish you feed them for a day. Ask a person to internet search and they learn a skill for a lifetime.

Never assume anything on this forum!