?
Solved

Sharepoint issue

Posted on 2007-11-27
23
Medium Priority
?
399 Views
Last Modified: 2011-10-19
Im running a SBS2003 R2 server premium, new deployed server, and trying to set some permissions in sharepoint services portal.
I want that incoming faxes library is allowed to access only specified users/group, but in my case everyone can acces, regardless on permnission I set. Even tried to delete all users in Site Settings/manage users, left only administrator but still when i log in to workstation with domain user account i am able to acces everything even administer whole portal!
What is going on here?
0
Comment
Question by:bbmservis
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 12
  • 10
23 Comments
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20400175
From the Incoming Faxes Document Library screen (http://companyweb/Incoming%20Faxes/Forms/AllItems.aspx)
Select the "modify settings and colums" link from the left-side column.

Then select "change permissions for this document library" and delete all the site groups that are listed.  You can then add the specific users you want.  I'd suggest though that you put the users you want to have access in an Active Directory Security Group and then just add that group in SharePoint.  This way you don't have to change it directly if you have employee changes.

Jeff
TechSoEasy




0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20400181
One other thing... make sure you don't have anonymous access enabled.

See: http://companyweb/_layouts/1033/setanon.aspx for the settings.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20404850
Nope, i tried that  those both things even before posted a question.
Yesterday i removed and reinstall sharepoint following KB on Microsoft site.
I can remove all users and still be able to browse companyweb portal!!!!
Is  something wrong  with IIS ???
0
Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

 

Author Comment

by:bbmservis
ID: 20406707
One more thing noticed, when i create new domain user account through SBS wizard, it doesnt appears in
sharepoint, and what i know it should be created as a web designer rights???
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20408483
Which KB article did you follow to remove and reinstall SharePoint?

If you create a new domain user with the Add User Wizard and use the Default User Template, then yes it should create their SharePoint user account... but only if you didn't delete the Template Users from SharePoint's Users list.

Also... you can't really and don't want to prohibit users from accessing the main page of http://companyweb  However, you may want to create sub-sites instead of just document libraries on the main site to further segment out how permissions are applied.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20411388
http://support.microsoft.com/?id=829114
this article!
Correct, i just want to deny accesing some parts of companyweb!
I want to set permissions per doc. library not  per site!
I have tried on other installations of SBS 2003 to prohibit access to particular doc. librarires and it works!
On this problematic installation  it doesnt!
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20416205
Well, you should be able to do that unless you've got the wrong permissions set after reinstalling.

Above you said, "I can remove all users and still be able to browse companyweb portal"

Where exactly are you removing all users?

Jeff
TechSoEasy

0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20416246
FYI, there are two different user lists...

You were probably looking at:
http://companyweb/_layouts/1033/user.aspx

And then there's the higher up, "Site Colleciton Users"
http://companyweb/_layouts/1033/siteusrs.aspx

If that list includes any users or "NT AUTHORITY\AUTHENTICATED USERS", then you haven't really removed them.  Don't remove the 4 user template accounts though, or you will have to restore them to get the add user wizard to work.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20900153
First of all sorry for not replying so long, too busy and to be honest i forgot about this a llitle bit!
Jeff:

"Where exactly are you removing all users?"
 i was removing users here:
http://companyweb/_layouts/1033/user.aspx


fact is that i still have same problem, i was repairing  outlook web access and after that permsissions are not working!
something with IIS?? maybe??
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20905228
Perhaps my comment above wasn't clear enough...

If you were only removing the users from
http://companyweb/_layouts/1033/user.aspx

You still need to ALSO remove them from
http://companyweb/_layouts/1033/siteusrs.aspx

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20918326
OK, removed all users from both link, except templates, when i try to acess site, asks me for user & pass,
enter credentials with some sbs user, after that it appears here http://companyweb/_layouts/1033/siteusrs.aspx and not  here http://companyweb/_layouts/1033/user.aspx!
In first link  u cannot set permissions, and in second where is possibble, user is not present!
Any clues??
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20922187
If you removed ALL users except templates, then you don't have any rights anymore to access the site.  That wasn't what I thought you were doing here.

At any rate, you can fix this problem by running the Change User Permissions Wizard from the Users Snap-in of the SBS Server Management Console.  Reapply the appropriate template to your users and it will recreate their SharePoint account.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20926849
Jeff,  
problem is when everyone is removed and you access http://companyweb it asks you for login and password, that windows credentials windows, input some domain user and after that companyweb is accessible, and that user appears http://companyweb/_layouts/1033/siteusrs.aspx and not here http://companyweb/_layouts/1033/user.aspx. Also it has access to all doc libraries!
???
Thank you, Jeff for help, i will try that solution above , report comes shortly :)
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20934113
If you left the templates as users, then what I suggested above will work... did you even try running the Change User Permissions wizard?

Jeff
TechSoEasy
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20934151
Then, once you get that fixed... you can redo the permissions on the Fax Document Library.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20947958
hi, did Change User Per. Wizard., didnt worked!
Im out of clues...........:( :(


test.JPG
test2.JPG
0
 

Author Comment

by:bbmservis
ID: 20948138
After Wizard it adds
which are created as user tmpl but still everyone can acces everywhere regardless of permissions!
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20965754
All of the users should be listed in BOTH screens there.  If they are not in the first one that defines their "group" as just reader, then they will have full access.

The Change User Permissions Wizard should fix that.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 21002432
Still nothing, is it possible to stop and/or remove SBS Sharepoint 2.0  , and after that install Sharepoint server 3.0 ,than create new company portal?
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 21009356
No.  SBS2003 is only compatible with WSS 2.0.  You can reinstall the Companyweb site by following http://support.microsoft.com/kb/829114.  You can also install WSS 3.0 in a side-by-side configuration by following http://sbsurl.com/wss3, but it will not replace your http://companyweb nor will WSS 3.0 respond to any of SBS's wizards.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 21013582
Mystery solved, if user is member of domain power users  it has full rights regardless of permission on site!
Removed from domain power users and set to domain users & works!
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 750 total points
ID: 21026818
Well of course that would cause the problem.  Why were you making them a member of the Domain Power Users group to begin with?  I specifically recommended that you use the Default User Template which would NOT have made them a member of that group.

Jeff
TechSoEasy
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
In this video, Percona Solutions Engineer Barrett Chambers discusses some of the basic syntax differences between MySQL and MongoDB. To learn more check out our webinar on MongoDB administration for MySQL DBA: https://www.percona.com/resources/we…
Suggested Courses

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question