So, we have a newish head of HR and she has been making changes ext... one of the changes is this spiffy program to help figure out pay ranges, benefits, raises ext... since there are multiple people accessing this software from different PCs we decided to store the database on our fileserver under the HR folder with the usual user restrictions. This software does not seem to have any usernames or passwords to keep people out. its come to light (and not because anything bad happened) that IT has access to all folders on the file server because we have admin access. this sorta has the head of HR freaking out because if we were so inclined (not that we are) we could install the application and poke through the database and see everyone's pay.
so my question to yall: how do you deal with locking down HR's data when IT has and needs the keys to the kingdom?