Re: Domain Admins and Sharepoint

My company is comprised mostly of domain admins...I removed domain
admins from local administrator on the sharepoint server, however, none
of my security permissions on sharepoint have any effect whatsoever.
I've read a couple of posts, that say that domain admins should have
all rights, which I agree with also. But sharepoint sites may have
critical business information that an IT-based should not have direct
access to. Yes, they could mine into the database and do a bunch of
tricky stuff. Still I believe that on the surface level there should
still be a way to limit access. Does anyone have experience with this?
Any workarounds at all?

If your box is in the domain, you are never going to stop domain admins from
being to able to access your data in SharePoint.

Your company needs to re-evaluate it's security policies if you ask me.


.

Relevant Pages

  • Re: Administrator
    ... Well as far as the SQL DBA point I brought up, part of the reason for that is ... that there is no global SQL Admins domain group anyway but that wasn't done ... because of Sharepoint especially since SQL Server existed before Sharepoint ... > me a choice which I can choose to include domain admins as ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Reconnecting Sharepoint Services after installing Sharepoint Portal 2003
    ... > Hi Colin, ... > "you must be a member of the domain admins, schema admins, and enterprise ... >> Do you think I should consider removing MSDE Sharepoint and Sharepoint ... I'm therefore hopeful that if only we can ...
    (microsoft.public.windows.server.sbs)
  • Re: Reconnecting Sharepoint Services after installing Sharepoint Portal 2003
    ... You should be able to run that setup. ... Enterprise admins ... Have to check out the central admin sharepoint thing first and then will dig ... "Colin Strain" schreef in bericht ...
    (microsoft.public.windows.server.sbs)
  • Re: Reconnecting Sharepoint Services after installing Sharepoint Portal 2003
    ... reporting back, and do let us know if it all works out for you. ... "Colin Strain" schreef in bericht ... >> "you must be a member of the domain admins, schema admins, and ... >>> Do you think I should consider removing MSDE Sharepoint and Sharepoint ...
    (microsoft.public.windows.server.sbs)
  • Re: Reconnecting Sharepoint Services after installing Sharepoint Portal 2003
    ... "you must be a member of the domain admins, schema admins, and enterprise ... > remember something somewhere about "not recognising Administrator because ... > the SID is not the same as in the SQL database" but since I haven't ... > Do you think I should consider removing MSDE Sharepoint and Sharepoint ...
    (microsoft.public.windows.server.sbs)
Loading