Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have Sharepoint 3.0 deployed on a Windows 2008 server platform. My issue is quite simple for now but I still can't figure it out.

I have added the domain admin group from AD. So all of us can access any site that I've created. My issue is that I created a Sharepoint test user in AD and this one can also access every sites on sharepoint. The only AD group linked to this user is Domain Users.

Is anybody has a tutorial or knows how to prevent or block some groups/users to access our IT and Dev sites?

Regards, David.

share|improve this question
up vote 3 down vote accepted

I'm not a Sharepoint expert, it's been awhile since I've worked on Sharepoint, and I don't have a Sharepoint server handy but I think I'm on track with this:

As far as the test user having access to all the Sharepoint sites, If I'm not mistaken, Sharepoint sites inherit permissions from the parent so you have to go to each site and set specific permissions for those sites that you don't want the test user to access.

So all of your users except for the test user are domain admins? If so, that's not good.

share|improve this answer
Thanks Joe! I finally figured out with the persmissions on each specific site. Thanks a bunch! David. – r0ca Oct 20 '09 at 20:31
Happy to help and glad you got it sorted out. – joeqwerty Oct 20 '09 at 20:48
+1 for mentioning the fact that every user seems to be domain admin, that strikes me as not good at all :-D. – Colin Dekker Oct 25 '09 at 2:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.