Re: Access issues in the SharePoint portal



Hi,
Thanks for the reply. But the problem is still there. I don't see this
NT AUTHORITY\authenticated in the Manange users page. If I go to
http://sitename/_layouts/1033/siteusrs.aspx and delete the user named
"dummy" and when I open the portal again and give "Dummy" as user name
again, it accepts it and the user gets added automatically to the user
list in http://sitename/_layouts/1033/siteusrs.aspx.
And moreover this user gets admin rights i.e this user can actually
perform admin tasks. Authentication is not asked. I have checked it.

Any clue?

Thanks in advance,
Munish

ls2005@xxxxxxxxx wrote:
In the Manage Users page underneath Users there is a section called
Domain Groups. If this has NT AUTHORITY\authenticated users make sure
the 'Site Groups' is set to Reader. This gives Read access to everyone
on your network unless you have granted them a higher level. It might
look like they have Administrator rights but when they get to the last
step of adding or changing an item it will ask for their logon details.

It would be better if Admin functions were only visible to Users with
Admin/Web Designer/Contributor access etc. but sadly SharePoint does
not do this which misleads people into thinking they can make changes
to the site or content when they only have read access

Hope this helps.


kaushal77@xxxxxxxxx wrote:

Hi,
I have the following problem:
Any local windows user is getting admin access to the SharePoint portal
(is able to see Actions web part(which contains links for Edit Page
etc.)
Suppose i create a user called "Dummy" in my windows server.
When I open my portal and when I put user name as "Dummy" and proper
password, I am automatically logged into the portal as an
administrator.
I haven't given ANY rights to this user on my portal.
When I click on Site Settings- Manage Security and Additional
settings(Under General Settings) -Show User information (under Users
and Permissions), i see this user name. Here I also see a user named NT
AUTHORITY/SYSTEM. But when I click on Manage Users, I don't see these
extra users.
This problem was not happenning earlier and only users having rights on
the portal were able to access it. I am sure some setting has changed
but I am not able to put my hand on it.
My IIS settings are as follows:
The portal uses MSSharePointPortalAppPool as the Application Pool and
"Network Service" as the application pool identity (I have tried
changing it to "Local Service" or "Local System", but it didn't help.

For the portal, anonymous access is disabled and Basic Authentication"
is on.

The server does not use active directory as of now and all the users
are local windows users.
Can Anyone help please.

Regards,
Munish

.



Relevant Pages

  • Re: Access issues in the SharePoint portal
    ... Domain Groups. ... Any local windows user is getting admin access to the SharePoint portal ... I haven't given ANY rights to this user on my portal. ... settings(Under General Settings) -Show User information (under Users ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Time Restrictions on Users
    ... Besides, you would need admin ... rights to change these settings. ... And your account is probably set to a user ...
    (microsoft.public.windowsxp.general)
  • All Users getting admin access to SharePoint Portal
    ... Any local windows user is getting admin access to the SharePoint portal ... I haven't given ANY rights to this user on my portal. ... settings(Under General Settings) -Show User information (under Users ... "Network Service" as the application pool identity (I have tried ...
    (microsoft.public.sharepoint.portalserver)
  • Access issues in the SharePoint portal
    ... Any local windows user is getting admin access to the SharePoint portal ... I haven't given ANY rights to this user on my portal. ... settings(Under General Settings) -Show User information (under Users ... "Network Service" as the application pool identity (I have tried ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: I need help with configuring GP?
    ... use GP in a Windows 2003 environment to give rights to a "limited ... Admin person" to be able to create email enabled user & computer ... Which settings do I need to set to make this happen, ...
    (microsoft.public.windows.group_policy)