SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using SharePoint 2013

I would to grant acces to a subsite by a specific Active Directory group. And i want to deny all other groups.

So the group that's allowed is able to acces the subsite and other groups don't.

share|improve this question

Assuming your parent site have a group A which shouldn't have permission to your subsite, the first thing you need to do is stop inheriting permissions on your subsite. Site Actions > Site Permissions:

Chose site permission

Then select Stop inheriting permissions:

Stop inheriting button

And you'll get a warning you need to accept:

Stop inheriting permission warning

When these steps are done, you can safely remove the group that should not have permission to your subsite.

share|improve this answer
All my domain users have read rights on "Specify web application user policy" under security in the administrator server farm. – user13513 Dec 10 '12 at 8:46

SharePoint's security model is deny all, allow select. Therefore, you can manage the permissions on the site and specify who you want to have access, and if someone is not listed, they won't have access. There is no specific deny option.

If you need assistance in actually walking through how to add a group. Reply and we'll get you the steps.


share|improve this answer
Thanks, for your reply can u hand me out the steps. That would be very helpful! – bawo Dec 7 '12 at 14:04
Go to the Settings Icon (gear at top right) > Site Settings. Click Site Permissions under Users and Permissions (top left).Click Grant Permissions in the ribbon to add your AD group. Check off existing groups and click Remove User Permissions to remove unwanted access. – David Lozzi Dec 7 '12 at 14:06
It doesn't work. If iI logon with another user i can still acces the subsite. My domain users have read rights on the site collection maybe something you would like to know – bawo Dec 7 '12 at 14:43
How do the domain users have read rights? Where is that specified? – David Lozzi Dec 7 '12 at 14:45
Yes i would like to see the steps. Very kind of you! – user13513 Dec 10 '12 at 10:09

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.