Re: Domain Admin - Having too much power inside Sharepoint!!

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: P K I (stanley.poon_at_s-concept.com.hk)
Date: 03/17/04 

Date: Wed, 17 Mar 2004 23:33:30 +0800

Thank you, I got to try on the next week... real thanks!

"Serge Tremblay" <strembla@nospam.rocler.qc.ca> wrote in message
news:%23vF2HwADEHA.1236@TK2MSFTNGP11.phx.gbl...
> Try removing the domain admin group from the local admin group on your sps
> server. It's should fix your problem.
>
> Serge
> "Stanley P" <stanley.poon@s-concept.com.hk> a écrit dans le message de
> news:D2CD4736-06AF-47EA-A185-20B1D8E280E7@microsoft.com...
> > Condition:
> > 1 AD on Win2K-AS-SP4
> > 1 SQL2K on WinServ03-Ent
> > 1 SPPS03 on WinServ03-Ent
> > Problem:
> > No matter how tight the security policies are, with user(s) belong to
> DomainAdmin Group, he could manage ""everything"" inside the portal.
> >
> > I've set many of the web parts visible to different audience and various
> security measures, and they work fine. Whenever users with domain admin
> right logs in, he could only see the visible web parts that he should.
> However, he could MANAGE the content and change all settings.
> >
> > Any solutions to solve this problem?
> >
> > Should I didn't make it clear enough, please tell.
> >
>
>

Relevant Pages

  • Re: Domain Admin - Having too much power inside Sharepoint!!
    ... Try removing the domain admin group from the local admin group on your sps ... > No matter how tight the security policies are, ... he could only see the visible web parts that he should. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Local login
    ... You will see that the domain admins group is a member of this local group ... You can add other members so you could add her individual account to this ... That page says that folks with Adminstrator accounts are in the> Domain Admin group. ...
    (microsoft.public.windows.server.sbs)
  • Re: Security - Deleted admin group
    ... As a member of the domain admin group and being the owner you should be able ... > policy that is based on computer name. ... > There are two machines with apply group policy permissions and that is it. ...
    (microsoft.public.windows.group_policy)
  • Re: Deleting Local Files
    ... > the LOCAL admin group on the workstation, this will allow them to do what ... >> new enviroment I don't want all staff in the Domain Admin group (security ... >> Keith Holt ...
    (microsoft.public.windows.server.sbs)