I have a SharePoint 2010 site that had Domain users in a group with read permissions. I did not want to allow all users in AD to be able to log into this SharePoint site so I removed Domain users from that group but I find all users can still login. I made sure Domain users was not set in any other group. Is there some other place I missing that could have Domain users set?
If you checked all the SharePoint Groups for your domain group an then there could be at least three additional ways these users could have access:
- You have the Authenticated Users group in one of your SharePoint Groups
- You have Anonymous Access configured
- You have an AD group configured for access in the Web Application's Permission Policies