1

In our SP2013 on-premise farm, we have two web applications. One for standard team sites and one for MySiteHost. These 2 web application are running under two different IIS app pool with two different identity.

Users followed some sites. The users can post newsfeed directly from their Mysite to those team site's newsfeed. However, they encountered error. After investigation, (refer to this site) I ran follow scripts:

$wa= Get-SPWebApplication $WebApp_MySite
$wa.GrantAccessToProcessIdentity($ID_WebApp)
$wa= Get-SPWebApplication $WebApp
$wa.GrantAccessToProcessIdentity($ID_WebApp_Mysite)

It seems fix the problem. However someone told me I don't need to run last 2 lines. It grants unncessary permission to users.

My question is, how can I reverse what I have done?

1

In Central Administration, on page /_admin/WebApplicationList.aspx select your WebApp and click on User Policy in ribbon. You can see in a dialogbox your account ID_WebApp_MySite with full control. Select it and click Delete selected users.

  • Thanks for your answer. After I ran a few tests, I found GrantAccessToProcessIdentity command will grant the user to all content databases under that web application, too. – Mark L Mar 11 '15 at 7:57
  • Hi using powershell how to remove these permissions? – adilahmed Feb 10 '16 at 15:21
0

To remove a permission from the Web Application:

$wa = Get-SPWebApplication $WebApp_MySite

$wa.policies.remove("Policy Name")

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.