I just installed SharePoint 2013 and have issue that ALL users have by defult FULL CONTROL permissons and adding them to read-only group just ignoring. So they have access to sites settings etc. I checked all groups and there is nothing which can dilegate this kind of permissions. When I trying to perform permission check on user which is not exist on any SP site security group checker saying me that this user have full control...

Any suggestions?

  • is permission checker showing any group at bottom ! – cjs Aug 14 '17 at 20:00

Central-Admin -> Application Management -> Manage WebApplications -> Mark your WebApplication and click on User Policy. The rights granted there bypass every permissions granted on Sites or SiteCollections.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.