I have Sharepoint 3.0 deployed on a Windows 2008 server platform. My issue is quite simple for now but I still can't figure it out.

I have added the domain admin group from AD. So all of us can access any site that I've created. My issue is that I created a Sharepoint test user in AD and this one can also access every sites on sharepoint. The only AD group linked to this user is Domain Users.

Is anybody has a tutorial or knows how to prevent or block some groups/users to access our IT and Dev sites?

Regards, David.


I'm not a Sharepoint expert, it's been awhile since I've worked on Sharepoint, and I don't have a Sharepoint server handy but I think I'm on track with this:

As far as the test user having access to all the Sharepoint sites, If I'm not mistaken, Sharepoint sites inherit permissions from the parent so you have to go to each site and set specific permissions for those sites that you don't want the test user to access.

So all of your users except for the test user are domain admins? If so, that's not good.

| improve this answer | |
  • Thanks Joe! I finally figured out with the persmissions on each specific site. Thanks a bunch! David. – r0ca Oct 20 '09 at 20:31
  • Happy to help and glad you got it sorted out. – joeqwerty Oct 20 '09 at 20:48
  • +1 for mentioning the fact that every user seems to be domain admin, that strikes me as not good at all :-D. – Colin Dekker Oct 25 '09 at 2:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.