Re: Access rights issue with Sharepoint - newbie question
- From: "Engelbert" <Engelbert@xxxxxxxxxxxxxxxxxxxxxx>
- Date: Sat, 30 Sep 2006 19:13:27 +0300
My pleasure. I'm just glad you've sorted it out.
Engelbert
<shadowpath@xxxxxxxxxxx> wrote in message
news:1159625415.354094.101630@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Engelbert you are a genius - sorry for leaving it so long to respond.
I wrote the whole thing down on paper and traced it all out, and you're
absolutely right ... that the domain user is a domain admin on the PDC
is TOTALLY irrelevant, as the WSS server isn't running activedirectory.
That I took the domain users out of the domain admins group on the WSS
server IS relevant, and I double-checked and I'd set up all the
security on the WSS server correctly.
The biggest issue is this (and it's deceptively simple, AND YES you've
already pointed it out) :-
The users can access all the options - they just can't change any of
them.
It's a bit of a bummer to be honest, as I wanted the users to be unable
to post (as in to not see an option to post) on the announcements
portion of the site, but that can't be achieved in WSS it appears ...
all you can do is prevent them being able to use the post function ...
Engelbert thanks so much for your time and trouble in answering my
query - I REALLY appreciate it.
Kind regards,
David.
!?!?! Shadow !?!?!
Engelbert wrote:
You restarted IIS I presumed.
Them being in the Adminstrators Group on another server isn't relevant to
this.
What happens is that when a domain user accesses a WSS server two things
happen (and I'm not sure of the order but I think it's this one)
- there's a check to a DC to see if that domain user exists and the
password
is right.
- there's a check (on the WSS server itself / the WSS database) if that
user
has rights to that site (sub-site/doc lib) and if so whether the rights
that
user has are suficient for what he/she is trying to do.
[So if he is trying to update but has only read rights he'll be asked to
give a name/password that does have update rights on that site (etc.)]
In the case of a member of the WSS server's Administrator Group this
second
check isn't (default version - it can nowadays be overwritten; there's a
KB
article),carried out as they are deemed to have full rights to all sites
(etc.) everywhere on the WSS server.
Any clues there for your case ?
A final thought.
It might have been that you allocated All Domain Users to the entire site
and have given them say Read rights and you now see that they can access
something like Site Settings which is for Admins.Yes they can access it
but
the test is whether they can *Save* their amendments. !
Engelbert
<shadowpath@xxxxxxxxxxx> wrote in message
news:1159274684.681416.138980@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Domain Admins shouldn't be a problem - I'm the only one, and I'm the
one that would be making all the site-changes to the SharePoint app as
well ...
It didn't have any effect is the answer (removing Domain Users from the
Administrators Group) - I believe it may be because the users are not
being authenticated against the server that SharePoint is running on -
they are being authenticated as coming from ActiveDirectory, and that's
on two of our other servers ... perhaps I should delete Domain Users
from the Administrators group on *those* servers ?
David.
Engelbert wrote:
You might want to consider removing Domain Administrators too.
You might well not want them to see all content on the SharePoint
sites.
Engelbert
<shadowpath@xxxxxxxxxxx> wrote in message
news:1159268469.255993.287340@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Geeeeeeeeenius - thanks for the head's up and the information on the
groups :)
You were right - domain users were included in the administrators
group
of the server, so I have removed them so that now administrator and
domain administrators are part of the administrators group, and
domain
users are just a part of the users group - however it's not had any
effect as yet, so I'm going to bounce the server and see whether
that
helps sort things out ...
I'll let you know :)
Many thanks and kind regards,
David.
shadowpath@xxxxxxxxxxx wrote:
Hi, I wonder if you can help me please. I posted this message on
another sharepoint discussion group yesterday but haven't received
any
feedback, so I thought I would try here where there are
considerably
more users ...
I recently customised Sharepoint on one of our servers at work
(which
doesn't have active
directory on it), and I'm having a problem ...
1) User calls up internet explorer and goes to the IP address of
the
Sharepoint Server
2) Dialogue box is displayed calling for their username and
password
3) They enter their respective username and password as per the
PDC
(which has active directory installed on it)
4) They are given access to Sharepoint.
All good so far, BUT ...
A) Whilst Sharepoint acknowledges that they are logged in as the
user
they have logged in as (if you go Site Settings > Update My
Information
it will show you who you're currently logged in as), *ALL* users
have
unrestricted access to the whole of the site, including the
highest-levels of customisation.
Specifically, I have created a user called "Dummy" - I've given
them a
full login account with Active Directory, and when they log into
the
Sharepoint server, even though I've told the Sharepoint server that
they should be just a reader, they have administrator access
rights.
Any ideas ??
Many, MANY thanks !!
!?!?! Shadow !?!?!
.
- References:
- Re: Access rights issue with Sharepoint - newbie question
- From: shadowpath
- Re: Access rights issue with Sharepoint - newbie question
- Prev by Date: Re: wss3 b2 :: search and then some
- Next by Date: SQL 2005 SP1 and WSS 2.0 SP2
- Previous by thread: Re: Access rights issue with Sharepoint - newbie question
- Next by thread: Re: wss3 b2 :: search and then some
- Index(es):
Relevant Pages
|
Loading
