Solved

Sharepoint issue

Posted on 2007-11-27
23
392 Views
Last Modified: 2011-10-19
Im running a SBS2003 R2 server premium, new deployed server, and trying to set some permissions in sharepoint services portal.
I want that incoming faxes library is allowed to access only specified users/group, but in my case everyone can acces, regardless on permnission I set. Even tried to delete all users in Site Settings/manage users, left only administrator but still when i log in to workstation with domain user account i am able to acces everything even administer whole portal!
What is going on here?
0
Comment
Question by:bbmservis
  • 12
  • 10
23 Comments
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20400175
From the Incoming Faxes Document Library screen (http://companyweb/Incoming%20Faxes/Forms/AllItems.aspx)
Select the "modify settings and colums" link from the left-side column.

Then select "change permissions for this document library" and delete all the site groups that are listed.  You can then add the specific users you want.  I'd suggest though that you put the users you want to have access in an Active Directory Security Group and then just add that group in SharePoint.  This way you don't have to change it directly if you have employee changes.

Jeff
TechSoEasy




0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20400181
One other thing... make sure you don't have anonymous access enabled.

See: http://companyweb/_layouts/1033/setanon.aspx for the settings.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20404850
Nope, i tried that  those both things even before posted a question.
Yesterday i removed and reinstall sharepoint following KB on Microsoft site.
I can remove all users and still be able to browse companyweb portal!!!!
Is  something wrong  with IIS ???
0
 

Author Comment

by:bbmservis
ID: 20406707
One more thing noticed, when i create new domain user account through SBS wizard, it doesnt appears in
sharepoint, and what i know it should be created as a web designer rights???
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20408483
Which KB article did you follow to remove and reinstall SharePoint?

If you create a new domain user with the Add User Wizard and use the Default User Template, then yes it should create their SharePoint user account... but only if you didn't delete the Template Users from SharePoint's Users list.

Also... you can't really and don't want to prohibit users from accessing the main page of http://companyweb  However, you may want to create sub-sites instead of just document libraries on the main site to further segment out how permissions are applied.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20411388
http://support.microsoft.com/?id=829114
this article!
Correct, i just want to deny accesing some parts of companyweb!
I want to set permissions per doc. library not  per site!
I have tried on other installations of SBS 2003 to prohibit access to particular doc. librarires and it works!
On this problematic installation  it doesnt!
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20416205
Well, you should be able to do that unless you've got the wrong permissions set after reinstalling.

Above you said, "I can remove all users and still be able to browse companyweb portal"

Where exactly are you removing all users?

Jeff
TechSoEasy

0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20416246
FYI, there are two different user lists...

You were probably looking at:
http://companyweb/_layouts/1033/user.aspx

And then there's the higher up, "Site Colleciton Users"
http://companyweb/_layouts/1033/siteusrs.aspx

If that list includes any users or "NT AUTHORITY\AUTHENTICATED USERS", then you haven't really removed them.  Don't remove the 4 user template accounts though, or you will have to restore them to get the add user wizard to work.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20900153
First of all sorry for not replying so long, too busy and to be honest i forgot about this a llitle bit!
Jeff:

"Where exactly are you removing all users?"
 i was removing users here:
http://companyweb/_layouts/1033/user.aspx


fact is that i still have same problem, i was repairing  outlook web access and after that permsissions are not working!
something with IIS?? maybe??
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20905228
Perhaps my comment above wasn't clear enough...

If you were only removing the users from
http://companyweb/_layouts/1033/user.aspx

You still need to ALSO remove them from
http://companyweb/_layouts/1033/siteusrs.aspx

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20918326
OK, removed all users from both link, except templates, when i try to acess site, asks me for user & pass,
enter credentials with some sbs user, after that it appears here http://companyweb/_layouts/1033/siteusrs.aspx and not  here http://companyweb/_layouts/1033/user.aspx!
In first link  u cannot set permissions, and in second where is possibble, user is not present!
Any clues??
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20922187
If you removed ALL users except templates, then you don't have any rights anymore to access the site.  That wasn't what I thought you were doing here.

At any rate, you can fix this problem by running the Change User Permissions Wizard from the Users Snap-in of the SBS Server Management Console.  Reapply the appropriate template to your users and it will recreate their SharePoint account.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20926849
Jeff,  
problem is when everyone is removed and you access http://companyweb it asks you for login and password, that windows credentials windows, input some domain user and after that companyweb is accessible, and that user appears http://companyweb/_layouts/1033/siteusrs.aspx and not here http://companyweb/_layouts/1033/user.aspx. Also it has access to all doc libraries!
???
Thank you, Jeff for help, i will try that solution above , report comes shortly :)
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20934113
If you left the templates as users, then what I suggested above will work... did you even try running the Change User Permissions wizard?

Jeff
TechSoEasy
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20934151
Then, once you get that fixed... you can redo the permissions on the Fax Document Library.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 20947958
hi, did Change User Per. Wizard., didnt worked!
Im out of clues...........:( :(


test.JPG
test2.JPG
0
 

Author Comment

by:bbmservis
ID: 20948138
After Wizard it adds
which are created as user tmpl but still everyone can acces everywhere regardless of permissions!
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 20965754
All of the users should be listed in BOTH screens there.  If they are not in the first one that defines their "group" as just reader, then they will have full access.

The Change User Permissions Wizard should fix that.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 21002432
Still nothing, is it possible to stop and/or remove SBS Sharepoint 2.0  , and after that install Sharepoint server 3.0 ,than create new company portal?
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 21009356
No.  SBS2003 is only compatible with WSS 2.0.  You can reinstall the Companyweb site by following http://support.microsoft.com/kb/829114.  You can also install WSS 3.0 in a side-by-side configuration by following http://sbsurl.com/wss3, but it will not replace your http://companyweb nor will WSS 3.0 respond to any of SBS's wizards.

Jeff
TechSoEasy
0
 

Author Comment

by:bbmservis
ID: 21013582
Mystery solved, if user is member of domain power users  it has full rights regardless of permission on site!
Removed from domain power users and set to domain users & works!
0
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 250 total points
ID: 21026818
Well of course that would cause the problem.  Why were you making them a member of the Domain Power Users group to begin with?  I specifically recommended that you use the Default User Template which would NOT have made them a member of that group.

Jeff
TechSoEasy
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
The articles for turning off the Client firewall policy on the internet are for SBS 2008 and don't really help for SBS 2011. They actually moved the Client firewall policy. In 2011, the client firewall policy has moved to the SBS computers conta…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now