I have a SharePoint 2010 site that had Domain users in a group with read permissions. I did not want to allow all users in AD to be able to log into this SharePoint site so I removed Domain users from that group but I find all users can still login. I made sure Domain users was not set in any other group. Is there some other place I missing that could have Domain users set?

  • 1
    did you 'check permissions' for 'Domain Users'? site settings - site permissions - check permissions. what does it say?
    – Vamsi K K
    Jan 15, 2016 at 23:15
  • 1
    There are other ways they could be accessing the site. Do you have anonymous access disabled? Are you using authenticated users anywhere? Find an account that you don't want to have access and check permissions to see how they're able to get to the site.
    – jpollar
    Jan 16, 2016 at 0:17

1 Answer 1


If you checked all the SharePoint Groups for your domain group an then there could be at least three additional ways these users could have access:

  • You have the Authenticated Users group in one of your SharePoint Groups
  • You have Anonymous Access configured
  • You have an AD group configured for access in the Web Application's Permission Policies

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.