locked
Deny access to Web Application for all users, exept for one group RRS feed

  • Question

  • Hello everyone,

    In our organisation we would give access to a web application, only for one specific group of users. When I understand correctly, default everyone got access and I only can deny access.
    When I deny "everyone", and only give read access to the specific group, the deny access overrules.

    Is it possible to deny access to everyone and only give a specific group the rights to read?

    (I do not understand why everyone can read by default)

    Thanks. 

    SP2010

    • Modifié CreatoX jeudi 27 octobre 2011 14:12
    jeudi 27 octobre 2011 14:11

Réponses

  • Only permitted users have access to applications/site colletions/sites ..

    This is of course depended on your settings. Site settings / Peope and Permissions and on the level of webApp User Policy in CentralAdmin, but default behaviour is noone has an access, until you configure the permissions (only site collection admins by default do have access).


    Marek Chmel, WBI Systems (MCTS, MCITP, MCT, CCNA)
    • Marqué comme réponse CreatoX vendredi 28 octobre 2011 13:34
    jeudi 27 octobre 2011 14:20

Toutes les réponses

  • Only permitted users have access to applications/site colletions/sites ..

    This is of course depended on your settings. Site settings / Peope and Permissions and on the level of webApp User Policy in CentralAdmin, but default behaviour is noone has an access, until you configure the permissions (only site collection admins by default do have access).


    Marek Chmel, WBI Systems (MCTS, MCITP, MCT, CCNA)
    • Marqué comme réponse CreatoX vendredi 28 octobre 2011 13:34
    jeudi 27 octobre 2011 14:20
  • Everyone does not get read rights automatically.

    To provide access to just one group for the entire web application, in CA select the web application in "Manage Web application" page and select the "User Policy" from the ribbon and add the group with appropriate permission.

    jeudi 27 octobre 2011 14:24
  • Hello Marek,

    Thank you for the quick reply.

    The group "NT AUTHORITY\authenticated users" was indeed added to the top level sitecollection.

    And, now I understand, not to give rights to users at the WebApp level (much to high!).

    Thanks again!

     

    jeudi 27 octobre 2011 15:02