I have a good one for ya today. Let me give you a quick backstory so you may understand these needs better. We had an employee who was a system administrator at my current company. Since he was a system administrator, he had complete control over everything. Well, he decided he wanted to see what other employee's salaries were, so he gave himself permission to the folder containing everyone's salary in the shared drive. He was caught after an audit, and immediately let go.
My boss did not want this happening any more, so he signed up for a cloud storage service that only himself and HR new the password to. This has worked just fine, but now he wants to cancel the service to avoid paying the monthly cost associated with it.
We are moving everything we own away from local storage servers to SharePoint. An easy solution, if we were still going to use our own storage servers, would be to password encrypt a compressed folder on a share drive, that way only the person who knows the password could access it. Since we are going strictly SharePoint, I need a way to give him an area where he (and HR) can store private documents (like employee salaries), where not even I (system administrator) can access it.
I could create a SharePoint library which only gives him and HR permissions, and then remove my permissions completely from the library. The only problem is, I could theoretically grant myself permission again (as I am the administrator) and view anything I want, so this will not work. Does anybody have an idea of what can be done? Maybe even if there was a sure-fire way to make sure he gets emailed if anyone tries to change their permissions to view that SharePoint library?
Thank You For Your Time.