Internal Audit question

[WWII]

I am an IT auditor for an internal audit department. Our company uses Active
Directory with Winows 2000 and 2003 servers and XP Pro workstations.
Currently our IT support personnel have admin access to servers and
workstations. My question is: Is there a way to allow the IT support
personnel to do there job while restricting access to user data? The support
people need to apply upgrades, install software, etc. We want to allow them
to do this but restrict their access to user data in the Docs & Settings
folder on the workstations, user directories on the servers, etc. Currently
the IT support people have admin rights on the workstations. Can they do
their job as a Limited user with proper permissions?

I know this is a long post but i would appreciate any help.

Thanks.

 

[Keith]

I know this is a long post but i would appreciate any help.

This is an MS Access NG.

 

[Chris Mills]

No. It would conflict with the purpose of IT support.
(administrator access means administrator access)
You require physical security (background checks, non-disclosure agreements,
signed contracts and legalese, things like that)
Chris