Link to home
Start Free TrialLog in
Avatar of bbmservis
bbmservis

asked on

Sharepoint issue

Im running a SBS2003 R2 server premium, new deployed server, and trying to set some permissions in sharepoint services portal.
I want that incoming faxes library is allowed to access only specified users/group, but in my case everyone can acces, regardless on permnission I set. Even tried to delete all users in Site Settings/manage users, left only administrator but still when i log in to workstation with domain user account i am able to acces everything even administer whole portal!
What is going on here?
Avatar of Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy
Flag of United States of America image

From the Incoming Faxes Document Library screen (http://companyweb/Incoming%20Faxes/Forms/AllItems.aspx)
Select the "modify settings and colums" link from the left-side column.

Then select "change permissions for this document library" and delete all the site groups that are listed.  You can then add the specific users you want.  I'd suggest though that you put the users you want to have access in an Active Directory Security Group and then just add that group in SharePoint.  This way you don't have to change it directly if you have employee changes.

Jeff
TechSoEasy




One other thing... make sure you don't have anonymous access enabled.

See: http://companyweb/_layouts/1033/setanon.aspx for the settings.

Jeff
TechSoEasy
Avatar of bbmservis
bbmservis

ASKER

Nope, i tried that  those both things even before posted a question.
Yesterday i removed and reinstall sharepoint following KB on Microsoft site.
I can remove all users and still be able to browse companyweb portal!!!!
Is  something wrong  with IIS ???
One more thing noticed, when i create new domain user account through SBS wizard, it doesnt appears in
sharepoint, and what i know it should be created as a web designer rights???
Which KB article did you follow to remove and reinstall SharePoint?

If you create a new domain user with the Add User Wizard and use the Default User Template, then yes it should create their SharePoint user account... but only if you didn't delete the Template Users from SharePoint's Users list.

Also... you can't really and don't want to prohibit users from accessing the main page of http://companyweb  However, you may want to create sub-sites instead of just document libraries on the main site to further segment out how permissions are applied.

Jeff
TechSoEasy
http://support.microsoft.com/?id=829114
this article!
Correct, i just want to deny accesing some parts of companyweb!
I want to set permissions per doc. library not  per site!
I have tried on other installations of SBS 2003 to prohibit access to particular doc. librarires and it works!
On this problematic installation  it doesnt!
Well, you should be able to do that unless you've got the wrong permissions set after reinstalling.

Above you said, "I can remove all users and still be able to browse companyweb portal"

Where exactly are you removing all users?

Jeff
TechSoEasy

FYI, there are two different user lists...

You were probably looking at:
http://companyweb/_layouts/1033/user.aspx

And then there's the higher up, "Site Colleciton Users"
http://companyweb/_layouts/1033/siteusrs.aspx

If that list includes any users or "NT AUTHORITY\AUTHENTICATED USERS", then you haven't really removed them.  Don't remove the 4 user template accounts though, or you will have to restore them to get the add user wizard to work.

Jeff
TechSoEasy
First of all sorry for not replying so long, too busy and to be honest i forgot about this a llitle bit!
Jeff:

"Where exactly are you removing all users?"
 i was removing users here:
http://companyweb/_layouts/1033/user.aspx


fact is that i still have same problem, i was repairing  outlook web access and after that permsissions are not working!
something with IIS?? maybe??
Perhaps my comment above wasn't clear enough...

If you were only removing the users from
http://companyweb/_layouts/1033/user.aspx

You still need to ALSO remove them from
http://companyweb/_layouts/1033/siteusrs.aspx

Jeff
TechSoEasy
OK, removed all users from both link, except templates, when i try to acess site, asks me for user & pass,
enter credentials with some sbs user, after that it appears here http://companyweb/_layouts/1033/siteusrs.aspx and not  here http://companyweb/_layouts/1033/user.aspx!
In first link  u cannot set permissions, and in second where is possibble, user is not present!
Any clues??
If you removed ALL users except templates, then you don't have any rights anymore to access the site.  That wasn't what I thought you were doing here.

At any rate, you can fix this problem by running the Change User Permissions Wizard from the Users Snap-in of the SBS Server Management Console.  Reapply the appropriate template to your users and it will recreate their SharePoint account.

Jeff
TechSoEasy
Jeff,  
problem is when everyone is removed and you access http://companyweb it asks you for login and password, that windows credentials windows, input some domain user and after that companyweb is accessible, and that user appears http://companyweb/_layouts/1033/siteusrs.aspx and not here http://companyweb/_layouts/1033/user.aspx. Also it has access to all doc libraries!
???
Thank you, Jeff for help, i will try that solution above , report comes shortly :)
If you left the templates as users, then what I suggested above will work... did you even try running the Change User Permissions wizard?

Jeff
TechSoEasy
Then, once you get that fixed... you can redo the permissions on the Fax Document Library.

Jeff
TechSoEasy
hi, did Change User Per. Wizard., didnt worked!
Im out of clues...........:( :(


test.JPG
test2.JPG
After Wizard it adds
which are created as user tmpl but still everyone can acces everywhere regardless of permissions!
All of the users should be listed in BOTH screens there.  If they are not in the first one that defines their "group" as just reader, then they will have full access.

The Change User Permissions Wizard should fix that.

Jeff
TechSoEasy
Still nothing, is it possible to stop and/or remove SBS Sharepoint 2.0  , and after that install Sharepoint server 3.0 ,than create new company portal?
No.  SBS2003 is only compatible with WSS 2.0.  You can reinstall the Companyweb site by following http://support.microsoft.com/kb/829114.  You can also install WSS 3.0 in a side-by-side configuration by following http://sbsurl.com/wss3, but it will not replace your http://companyweb nor will WSS 3.0 respond to any of SBS's wizards.

Jeff
TechSoEasy
Mystery solved, if user is member of domain power users  it has full rights regardless of permission on site!
Removed from domain power users and set to domain users & works!
ASKER CERTIFIED SOLUTION
Avatar of Jeffrey Kane - TechSoEasy
Jeffrey Kane - TechSoEasy
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial