I need to reset the permission granted to a user in a Sharepoint 2013 farm. That is: revoking any permissions ever granted to this user (Read, Collaboration, etc...) for any sites, lists, folders, etc. He/She should not be able to access any resources of the farm anymore.
I wonder what is the best way to accomplish this task given that:
- the user profile is imported from Active Directory via User Profile Synchronization,
- it is member of some AD groups that are granted specific permissions in Sharepoint
Can I simply delete the user in Sharepoint?
If I delete the user, will it be imported again the next time the User Profile Synchronization runs? (that would render my deletion useless, wouldn't it?)
If I also remove the user from any AD groups it belongs to, would it be enough?
Finally, the long solution: do I have to retrieve every permission the user has (with
Get-PermissionInfo or something) and then go after each of them and delete them (and also remove the AD user from the AD groups)?