We have a web application which is setup with policies to deny access to create/manage sites or manage permissions to all users in our company(using an AD group). But during an audit we found that some users had this access(they were part of the group for which the permission was denied).
Apparently an admin (not with us anymore) gave them access somehow. I'm trying to figure out how he was able to give them this access. I don't see the users (who have access) directly or as part of any other group in the user policy.
This is for sharepoint 2010, and I'm using central admin primarily. Anyway I can find out where these users are getting the access from?