How do I setup a Sharepoint 3.0 (WSS) site so that subsite users don't have access to the full list of users, only the list of subsite users?

We recently migrated from Sharepoint 2.0 to Sharepoint 3.0 and in the process we have discovered that we seem to be unable to completely hide the list of users for the entire site. This is essential because we use Sharepoint to allow us to create subsites for each of our patients, and of course they aren't supposed to be able to see the list of other patients. In 2.0 this was easy, we added the subsite users via the subsite and there was no way anyone could get to the complete list. In 3.0 a whole host of things seem to lead to the full list of users, including resetting a password, clicking on a link at the top of a form for customizing personal settings, etcetera. Is there hope? We tried creating a site profile that basically offered no access to the main site, but even that didn't work.
Peter ForsterWebsite DevelopmentAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

The User Information List is a built in list that is unique to every site collection. It holds the name of every user that access the site AND every user that is granted access to the site collection.

You can not secure this list. I believe WSS 2.0 had the same User Information List and behavior.
Peter ForsterWebsite DevelopmentAuthor Commented:
It didn't work the same in practice, although it might have worked the same in principle.

So in WSS 2.0 when the user was given access to a subsite they could not access the main site. In fact, the only way of getting to the complete list of users was going to Main Site administration and clicking on User statistics (which was always a strange way of getting there but had the advantage that no one without access to main site administration could get to the overall list). Now it is much easier to get to the complete list.

I am thinking that we may need to switch platforms but still hoping that someone can think of a work around.
Its been awhile since we migrated off of 2003, but I think you're right that its "easier" to get to the complete list in 2007, but I am pretty sure it was possible to get to the list in 2003 if you knew how (i.e, adding a user lookup column to a list that points to the User Information List).

How about promoting all the subsite to its own top level site collection? Doesn't sound like a bad idea especially if you have strict security requirements.

Tutorial on how to promote the subsite to top level site collection -

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Peter ForsterWebsite DevelopmentAuthor Commented:
For some reason I didn't see quihong's useful response. I am going to check into it now. Sort of fits with my theory, which is that we were taking advantage of poor GUI design. We have found an alternative solution through Microsoft paid support and I will post which one was better as soon as we complete testing.
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server Apps

From novice to tech pro — start learning today.