@Douglas Hamilton is this not an issue for non-technical companies. Let's suppose the one technical person on the company sets up Sharepoint and creates sites. The Management team wish to create a new area for management material. The technical resource as an administrator can grant himself access to this location, which the management team has no knowledge of? Isn't this a huge design flaw, or is there a way to protect against this?