Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What's the easiest way to grant access to all the employees of our company to sharepoint portal. There are some general sites which all employees have read access. So Do I have to create an AD group for all employees and add to the site or is there some better way to manage this?

share|improve this question
as an update, you can now share with "Everyone except external users" – Jon B Dec 2 '15 at 22:35
up vote 3 down vote accepted

Permissions are set on the site level, so I don't think there is a good way to do this. However, by default new sites created with unique permissions will use the " Visitors" group as the default read-only group on on the new site.

Assuming that the Vistors group does have read-only permissions on each site, then you can edit that group from the root portal site (Site Actions > Site Settings > People and Groups) and add "Domain Users" do the " Visitors" group.

If, for some reason, all domain members are not part of the "Domain Users" group, then you can add "authenticated users" instead. I don't like using "authenticated users" because they could be authenticated to any trusted domain or a local authority.

share|improve this answer
I don't like using "Domain Users" because there are some Domain Users who shouldn't get access to the Sharepoint site. – David Mackintosh Mar 25 '10 at 16:16
I agree with that too, but if your requirement is "all employees" and only employees have domain accounts. I guess in an ideal world, you would create a new group in AD called "SharePoint Users". :) – Doug Luxem Mar 25 '10 at 16:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.