SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This is SP 2010. I have a personal site (i.e. my personal site with My Host Site), and in that site I have created a Team site. In that team site, I have removed all permissions except for myself (full control), SHAREPOINT\system (limited access), and a "Team Contributors" group I created. That group contains only individuals, no SP or AD groups. Inheritance has been turned off for the team site.

When a member of my "Team Contributors" group shows up to the site, they have the desired Contribute permission. But, when a non-member visits the site, they still get in, albeit with "Read" access.

For me, the kicker is, if I use "Check Permissions" for that very same not-"Team Contributor" user, or other similar users, the response is "None". So how are they getting in with Read access?

share|improve this question
up vote 3 down vote accepted

Asked it over at and got the answer:

Turns out that Central Admin "Policy for Web Applications" settings take preference, override inheritance settings, and do not get listed when you use "Check Permissions". Argh. But yeah, that's the answer. May it serve future frustrated admins well.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.