locked
How to Exclude AD OU from Site. RRS feed

  • Question

  • All,

    I've several sites that I need to exclude an OU from being about to access/see. By default NT
    AUTHORITY\authenticated users get added to a new site  This group contains at least one OU that I don't want accessing a certain site.

    I can easily audience target lists, web parts etc. But what about a whole site?

    I've seen that you can block entire OUs from a complete web applications using a policy.

    http://social.technet.microsoft.com/forums/en-US/sharepointadminprevious/thread/cc6949e4-3a87-48d0-9b90-b8c998576596/

    However that seems an all or nothing approach. If you 've sites within that web application you can't use that approach.

    i.e. top level - Cars

    then sub sites Cars/Make A Cars/MakeB

    I don't want a certain OU to access the MakeB site.

    Or do I have to exclude NT AUTHORITY\authenticated users manually from a site, and then add only those OUs that I want in the first place?

    I can't believe it's so convoluted to exclude groups from a site.

    Thanks

    W

     

    Monday, April 15, 2013 9:31 AM