Pau Lo
asked on
SharePoint ACL testing.
I will soon have to look at some access control lists/ permissions on directories in SharePoint (version yet to be revealed) for a data protection piece of work. Just wondered if there is any PowerShell cmdlets, similar to get-acl which you can run over a traditional windows file server which could be of use, or if the acl's are actually in the database associated with sharepoint rather than the objects themselves. I did read many years back checking permissions in SharePoint was horrendously complex but I hope things have improved.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Ah. The $64000 question. yes and yes and even yes. It can use AD groups, SharePoint Groups, and/or AD users (directly). In a simple farm, in a perfect world, you would use AD groups. Easier to manage and prevents all sorts of issues. However, I have never seen a Farm in a perfect world. In many cases. AD user groups would be initially setup for basic site access and as you add lists and subsites, it would devolve into hodgepodge of AD groups, SharePoint groups and direct AD user permission assignments. In a company where the AD group is separate from the Sharepoint admins, it could be worse.
ASKER
Thanks Jeff.
ASKER