Re: List Level Security problem - Please help!

Before I do this...
If I installed and created the top level site and I'm in the Domain Admins
group will this affect me? I'm listed as the portal server admin.

Thanks
Ron

"Shane Young [SPS MVP]" wrote:

http://support.microsoft.com/kb/892295/

This hotfix is included in WSS SP2 you just need to run the command line.

Now, this setting is only supported on WSS not SPS but I have played with it
and it works about 90% for SPS. The only things I have seen (in limited
testing) not work in SPS are GUI based things (example: Manage Portal site).
I would recommend you try this out in a test environment before you make and
changes to a production portal.

This falls under the probably not supported but probably works just fine for
you category. Know what I mean? Make sure the accounts you are using to
admin with are in the SharePoint admin group before you take away everyone's
permissions.

--
Shane Young - SPS MVP
SharePoint911 - http://www.SharePoint911.com
Blog - http://msmvps.com/shane/



"Capt_Ron" <monbleau(notthis)@palmbeach.k12.fl.us.NotThisEither> wrote in
message news:81DBCD45-0053-46AA-B909-B618E8E0FA71@xxxxxxxxxxxxxxxx
You are correct.
She is an Enterprise, Schema, and Domain admin. Luckily we only have 2 of
these people in our enterprise. We do have 8 Domain admins. Is there a
way
to block those?
Ron

"Shane Young [SPS MVP]" wrote:

Is she a local administrator on the server? By default all local
administrators for the SharePoint server (often includes domain
administrators) have administrator access to SharePoint. Also, if you
specified a SharePoint administrator group they would have admin access
to
the whole server.

--
Shane Young - SPS MVP
SharePoint911 - http://www.SharePoint911.com
Blog - http://msmvps.com/shane/



"Capt_Ron" <monbleau(notthis)@palmbeach.k12.fl.us.NotThisEither> wrote in
message news:D4325EFA-7FAA-4ECB-A619-600B0EDE9B35@xxxxxxxxxxxxxxxx
I have a custom list on a security team site.
We have a group within the security team site that handles computer
related
investigations. I would like to create a list of Security Events and
give
only those who should have access to it the proper access. All others
need
to be denied access.

How?

I created a list called Security Events
I created a site group called Restricted Access and added the people
from
that the investigations group into it.
I removed all groups from the List Security
I added the Restricted Access group to the List

That should have done what I wanted. But it doesn't. I have a user
that
is
listed as a Contributor on the Security Team Site. She has full access
to
the Security Events list!! Where could she be getting this access?

Thanks for your help
Ron






.

Relevant Pages

  • Re: Prevent Admin Logon to RWW
    ... 'Administrator' does not have RRAS rights, if I wish to VPN to a server I do ... OR since the introduction of RWW RDP Proxy I would prefer ... My preference is not to lock out the domain admins from RWW, ... you can still do remote admin work ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Admins removed from local admin group
    ... You can use restricted groups to fix the administrators on the local machines. ... Even if the user is local admin and removes the domain admins after the next GPO refresh they will be in again. ...
    (microsoft.public.windows.server.general)
  • Re: smtp AD site Link versus IP AD Site Link
    ... the Enterprise admin group, i will do both, also i am testing to increase the ... bandwidth to see if this help relief the problem, could you give me an idea ... about how to test if the network connection is suitable for AD replication ... > EA only gives you so many permissions; domain admins is what gives you ...
    (microsoft.public.win2000.active_directory)
  • Re: Admin Shares
    ... computer, click Start->Run, type \\<The local computer name>\C$. ... workgroup, domain admins doesn't exist)? ... > Subject: Admin Shares ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Rights..
    ... As far as I could see he wasn't asking about SPS, ... specifically about Microsoft Search. ... > Portal admin pages. ... >> group are able to do anything in the sharepoint site. ...
    (microsoft.public.sharepoint.windowsservices)