SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I created an intranet site based on Sharepoint Foundation 2010 which is based on mixed authentication (Windows and Form Based).

It has a main site where all logged users have access and there are different subsites. I am trying to set the subsites in a way that, by default, their access is denied to all logged users.

Users can access to the subsite only if an administrator has granted them access to read or read/write.

Unfortunately I cannot reach the desired result. I have tried to delete the automatically created Visitors group from the subsite but all users continue to have access to the subsite too.

Do you have any idea how can I reach the desired behavior?

share|improve this question
you must add user group to the particular subsite as you are breaking the inheritance. – user32550 Aug 18 '14 at 9:19
up vote 7 down vote accepted

You don't need to delete any groups for this, you just have to break the permission inheritance for the website you want secure. After breaking inheritance you can remove all unwanted permissions and give permission to the users/groups you want.

share|improve this answer
@Flo I am not able to find how to break inheritance for a sub site. Can you point me where to do it? – Drake Oct 4 '10 at 7:42
I found how to remove inheritance in the Site Assets of main site. I remove all groups there except the site owner, but users continue to access to sub site even if I didn't give them the access – Drake Oct 4 '10 at 7:57
The problem was that I added read permission to the whole group at Web Management level. I remove that and now I can fine tune permission on main site and sub sites. – Drake Oct 4 '10 at 8:18
I Have another problem. I have a root web which user1 has no permisson at all. I created a sub site with break permission (remove inheritance) and gave user1 permission to this sub site. but user1 gets Access denied when he browses to the subsite. any idea? thanks – Medes Apr 5 '12 at 8:36
Start a new question for your issue. No one will see it here. – Flo Apr 5 '12 at 11:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.