I want to restrict users from having read access to user information lists within my entire farm. Is this even possible? If so, how can I achieve this with powershell?
8
-
1Wouldn't this negatively affect people picker fields? Why do you want to lock down the user information list?– wjervisCommented Jan 22, 2018 at 14:52
-
@wjervis there are plenty of solutions where security over functionality is desired– Michael ACommented Jan 23, 2018 at 0:31
-
I understand that, I just don't understand what security you're gaining by locking this list down.– wjervisCommented Jan 23, 2018 at 19:09
-
1@wjervis the list exposes names and structures of an organization - that's closely guarded information in a lot of applications.– Michael ACommented Jan 23, 2018 at 23:48
-
Information that's gathered from user profile services. Why not simply mark those properties that are confidential as not replicable?– wjervisCommented Jan 24, 2018 at 13:13
|
Show 3 more comments
1 Answer
If your User Information List (single Site Collection) contains information about organizations that you don't want everyone to see, then move that information somewhere else. For example, you could built a Personnel roster that contains everyone in your organization, and limit access to that roster. Then, remove the private information columns from the User Information List.
If this information is in Active Directory, then everyone on your network can see this information anyway, if they know where to look.
If you are using User Profile Service and updating all your site collections from Central Admin, then you can control which fields are shared with the site collections.
answered May 17, 2018 at 10:05
