Re: SPS2003 rights

From: Colin Gardner (colin.gardner_at_nc3a.nato.int)
Date: 10/30/04


Date: 30 Oct 2004 11:38:17 -0700


"Eli Robillard" <EliRobillard@discussions.microsoft.com> wrote in message news:<C1AB8BA0-BFD8-451D-A762-52C94548D6FB@microsoft.com>...
> Is it possible that your machine or the account you use to login to it are in
> a different domain than your boss?
>
> Windows Integrated Authentication should avoid a login, if you login to your
> machine on the same domain as the one in which the SharePoint portal is
> installed. Once you cross domains you will be asked to login, unless you've
> already done so in the same browser session. Open a new broswer, or a
> document from another domain and you should be asked to re-authenticate.
>
> Take care,
> Eli.
>
> "Mike Varley" wrote:
>
> > Hi Folks
> >
> > I have just set up a single server SPS2003. I'm running on SQL 2000 STD. I'm
> > pretty sure I set everything up correctly. I have a domain user as the
> > Sharepoint admin account. The installation seemed to go without a hitch.
> >
> > I then setup a single portal site. I set anonymous access to 'Areas, content
> > and search'. This also seemed to work OK except that when I try to access
> > the site from my machine I get asked to login. I didn't question this at
> > first. However I then went to my boss (who had asked me to setup the thing)
> > and asked him to have a look at the site. Strangely, he was not asked to
> > login! Not only that but he was able to add himself as an administrator of
> > that site. Surely that can't be right. Any idea what's going on? (we are
> > both domain admins by the way)
> >
> > Is there any in depth documention that explains how SPS security works?
> >
> > Thanks for you help.
> >
> > Cheers
> >
> > Mike
> >
> >
> >I know this is obvious but check that site is added as a trusted
site to the local intranet zone on both machines otherwise you'll
continue to get the nagging login. If your boss can add himself as a
site administrator then it is probably because the Domain Admins group
is a member of the Administrators group on you Sharepoint server - in
other words he is treated as local admin and is therefore all
empowered.

Regards
Colin



Relevant Pages

  • Re: Password Problem with Server Login
    ... however we have other users who are members of the "Domain Admins". ... cannot login to the server using these users either...this is what I ... just the Administrator account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Users Unable to Connect to OWA
    ... Can you give specific errors or what the failed user login attempts are ... Do any users work such as domain admins? ... > Edition with Exchange 2003 stand edition. ... > Douglas Franklin ...
    (microsoft.public.exchange2000.connectivity)
  • Re: Visual Studio gives direct dbo access to Sql Server 2000 ??? <<Update>>
    ... After I did this I made sure I could still login ... into the db with the "dba" account we've set up. ... With respect to developers that are also domain admins ... ...
    (microsoft.public.sqlserver.security)
  • Re: Exchange user cannot login via outlook
    ... Domain admins don't have rights to open everyone's mail by default. ... error messege the domain controller is not available. ... the can login to the domain but the cannot login to the Outlook. ...
    (microsoft.public.exchange.clients)
  • Re: Some users unable to log into domain.
    ... only one account login is able to currently ... If one login was able to contact the domain, ... Ive tried two logins featured under the domain admins group, ...
    (microsoft.public.windows.server.active_directory)