Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
New Users have full admin permission regardless of SP Group
0 views
Skip to first unread message
GTS, Inc.
Feb 18, 2009, 9:26:42 PM2/18/09
to
When I create a new domain user account, that user has FULL
permission
without adding the new user to any SP groups. I have checked the
default group permissions, they are all default. I have checked
anonymous access, it is turned off. I have checked IIS and all
sharepoint sites are NOT set to allow anonymous access, and I have
checked POLICY FOR WEB APPLICATION.
permission
without adding the new user to any SP groups. I have checked the
default group permissions, they are all default. I have checked
anonymous access, it is turned off. I have checked IIS and all
sharepoint sites are NOT set to allow anonymous access, and I have
checked POLICY FOR WEB APPLICATION.
The latter is the only thing I have found to change the site at all.
In my user list under POLICY FOR WEB APPLICATION, I have:
NT AUTHORITY\LOCAL SERVICE - FULL READ
NT AUTHORITY\NETWORK SERVICE - FULL CONTROL
NT AUTHORITY\SYSTEM - FULL CONTROL
BUILTIN\USERS - FULL CONTROL
The last one is the account that impacts site function. If I remove
it or change the permissions, it affects ALL users on the site.
0 new messages