Re: Demoting administrator to reader does not work!

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Steve (shost_at_REM.OVE-ME.intel-imec.com)
Date: 10/19/04


Date: Tue, 19 Oct 2004 11:16:51 -0700

The user is not a local server administrator, nor in the
administrators group of our domain. Just a regular user..

he has admin rights on his computer, but that should have
NO bearing on sharepoint sites, which reside on a seperate
server of course..

The user used to be administrator on this sharepoint, but
now has been demoted, deleted, and readded each no matter
what the user still has administrative access to add
users, etc..

So what could one do to further diagnose this problem?

>-----Original Message-----
>Your correct Ted. Local Administrators on the server also
get admin rights
>to SPS.
>
>--
>Edward Lee
>Microsoft MVP - Sharepoint Portal Server
>
>
>"tedteng" <tedteng@discussions.microsoft.com> wrote in
message
>news:56345B94-2CF4-4E93-B360-60A64FDB1ACA@microsoft.com...
>> Is this account a system admin? Maybe I remember
wrongly cos my domain
>> amdin
>> tolde me he has full privilige for the portal. If I can
check with him
>> later,
>> I follow up with this thread.
>>
>> br
>>
>> ted
>>
>> "steve" wrote:
>>
>>> I have a user who requested to be demoted from
>>> Administrator to reader..
>>>
>>> no matter what we do this user can't lose his
>>> administrative privelages!
>>>
>>> The user self demoted himself but even though it shows
him
>>> with 'reader' privelages, he can still add users,
>>> successfully.
>>>
>>> An alternate admin demoted him and even as a 'reader'
he
>>> could still add users, successfully.
>>>
>>> What's going on here? It appears this isn't a
widespread
>>> problem as with other users the demotions work. This
>>> sounds like a fairly serious security problem.
>>>
>>> We are using WSS for Server 2003 with a SQL back end..
>>>
>>>
>>>
>
>
>.
>



Relevant Pages

  • Re: IIS and Frontpage security
    ... The user must have FP Admin rights to the web, this is not that same as have Admin rights to the ... server via the OS. ... FrontPage Resources, WebCircle, MS KB Quick Links, etc. ... When I log in as an administrator I can edit the webpage ...
    (microsoft.public.frontpage.extensions.windowsnt)
  • RE: Cant set Local Security policies. They fail to save
    ... I followed your instructions on applying the predefined security templates. ... I still can’t set any of the local security policies on the server box. ... > using local Administrator account to test, ... >>> member of either the Remote Operators group or the Domain Power Users ...
    (microsoft.public.windows.server.sbs)
  • Re: Help - administrator locked out!
    ... Second - thanks for your extremely helpful response. ... with 1 Novell server. ... I don't pretend that I'm some sort of super administrator or anything. ... I agree it's my practices that have got me into trouble in the first ...
    (microsoft.public.windows.server.general)
  • Re: FIRED IT ADMIN HAS LOCKED US OUT OF SBS
    ... you have risen to an Administrator this would be a given. ... server and run all LOB apps on these. ... If there are no encrypted files, just reset the DSRM account ...
    (microsoft.public.windows.server.sbs)
  • Re: FOR A SKILLED IT EXPERT - WIN2K SERVER - DOMAIN CONTROLLER
    ... After installing a parallel copy of WIN2K SERVER, ... Administrator access in Directory Services Restore Safe Mode. ... > Thanks Roger - OK - just finished a second windows server installation> to ... > Will try this and see if she boots up in the first installation.... ...
    (microsoft.public.win2000.security)