0

we have one issue that AD group(everyone) has been added in SharePoint Central Admin policy for web application level due to that all users have full control to access the all site, though user has read permission.

if it remove the group from policy for web application,user cannot access the site though user has permission in site level .

I would be greatly appreciated it if you help me.

Improve this question

1 Answer 1

Reset to default
0

Per my test, if a AD group has no policy permission in the central administration, but it has permission for a site collection, it can access the site collection.

Improve this answer
10
  • Group has been added in Web application level.if we remove group from there no one can access the site even though user has site permission
    – sanka jayaram
    Commented Jul 17, 2020 at 1:36
  • You could refer the following articles to configure object cache user accounts in SharePoint Server. References: sharepointdiary.com/2014/12/… docs.microsoft.com/en-us/SharePoint/administration/…
    – Emily Du - MSFT
    Commented Jul 21, 2020 at 1:46
  • Hi Emily thank you for your information ..will let you know once done this activities
    – sanka jayaram
    Commented Jul 22, 2020 at 3:53
  • If there is any problem with this issue, feel free to let me know.
    – Emily Du - MSFT
    Commented Jul 24, 2020 at 1:20
  • Hi Emily i have try to run below command add-pssnapin microsoft.sharepoint.powershell -ea silentlycontinue $was = Get-SPWebApplication foreach ($wa in $was) {Write-host "Web App: " $wa.url Write-host "Super User: " $wa.Properties["portalsuperuseraccount"] Write-host "Super Reader: " $wa.Properties["portalsuperreaderaccount"] Write-host " "} above script run before your step to follow .it shows no value .still have not done your steps to set super user and super reader .since working from home as dont have permission to go office to do this.
    – sanka jayaram
    Commented Jul 28, 2020 at 1:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.