Re: Demoting administrator to reader does not work!

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Edward Lee (elee_at_ulgm.org)
Date: 10/19/04 

Date: Mon, 18 Oct 2004 21:09:26 -0500

Your correct Ted. Local Administrators on the server also get admin rights
to SPS. 

-- 
Edward Lee
Microsoft MVP - Sharepoint Portal Server
"tedteng" <tedteng@discussions.microsoft.com> wrote in message 
news:56345B94-2CF4-4E93-B360-60A64FDB1ACA@microsoft.com...
> Is this account a system admin? Maybe I remember wrongly cos my domain 
> amdin
> tolde me he has full privilige for the portal. If I can check with him 
> later,
> I follow up with this thread.
>
> br
>
> ted
>
> "steve" wrote:
>
>> I have a user who requested to be demoted from
>> Administrator to reader..
>>
>> no matter what we do this user can't lose his
>> administrative privelages!
>>
>> The user self demoted himself but even though it shows him
>> with 'reader' privelages, he can still add users,
>> successfully.
>>
>> An alternate admin demoted him and even as a 'reader' he
>> could still add users, successfully.
>>
>> What's going on here? It appears this isn't a widespread
>> problem as with other users the demotions work. This
>> sounds like a fairly serious security problem.
>>
>> We are using WSS for Server 2003 with a SQL back end..
>>
>>
>>

Relevant Pages

  • Re: Windows 2003 - User Logins vs Software
    ... > We have recently installed a Windows 2003 domain server. ... admin, open "Active Directory Users and Computers", locate the workstation ... "Administrators" group under "Local users and Groups". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Rights in TS
    ... Administrators have complete and unrestricted access ... Regarding deploying the server without Group Policy active. ... relative to the two programs we have that require admin access. ...
    (microsoft.public.windows.terminal_services)
  • Re: Giving user / group ability to logoff user
    ... Tell the administrators to logoff and not lock the computer. ... > as these select users can log in to the server. ... > operators (whom have no admin privilages)are stuck. ...
    (microsoft.public.win2000.security)
  • Installing Software and Permissions
    ... etc etc on my TS Server. ... Security group and they'll have TS admin permissions... ... Added TS_Admins to the Local group on the TS Server - Administrators ... member of the TS_Admins group and try and install a piece of software.... ...
    (microsoft.public.windows.terminal_services)
  • Re: Authentication Prompt to Logon to Site
    ... Server 2007 - MOSS 2007 for short. ... Using "SharePoint Portal Server" can easily get people confused and SPS is ... for authentication whenever I access the site even though my account ... is a member of the followin admin groups: ...
    (microsoft.public.sharepoint.portalserver)