We are about to see if it is possible to work with a Hosting Provider to outsource the support of the OS on our server estate. One key requirements is that the hosting providers staff should not be allowed access to certain data on the servers. This will mainly be on attached SAN luns and not C: or D: drives.
While I understand that this can be achieved using NTFS permissions it is fairly simple to take ownership of a folder and modify the permissions. We need Object Auditing to be active and some mechanism of alerting if the Hosting Provider staff attempt to access the data or modify the permissions.
I have taken a Brief look at FCI and AD RMS but i'm not sure if that will do what I need without a lot more reading.
The server estate is a mix of Windows 2003 and Windows 2008 and 2008 R2. Can someone suggest a technology of methodology that would help guide me in the right direction.
thanks