we have one issue that AD group(everyone) has been added in SharePoint Central Admin policy for web application level due to that all users have full control to access the all site, though user has read permission.

if it remove the group from policy for web application,user cannot access the site though user has permission in site level .

I would be greatly appreciated it if you help me.

1 Answer 1


Per my test, if a AD group has no policy permission in the central administration, but it has permission for a site collection, it can access the site collection.

  • Group has been added in Web application level.if we remove group from there no one can access the site even though user has site permission Jul 17, 2020 at 1:36
  • You could refer the following articles to configure object cache user accounts in SharePoint Server. References: sharepointdiary.com/2014/12/… docs.microsoft.com/en-us/SharePoint/administration/… Jul 21, 2020 at 1:46
  • Hi Emily thank you for your information ..will let you know once done this activities Jul 22, 2020 at 3:53
  • If there is any problem with this issue, feel free to let me know. Jul 24, 2020 at 1:20
  • Hi Emily i have try to run below command add-pssnapin microsoft.sharepoint.powershell -ea silentlycontinue $was = Get-SPWebApplication foreach ($wa in $was) {Write-host "Web App: " $wa.url Write-host "Super User: " $wa.Properties["portalsuperuseraccount"] Write-host "Super Reader: " $wa.Properties["portalsuperreaderaccount"] Write-host " "} above script run before your step to follow .it shows no value .still have not done your steps to set super user and super reader .since working from home as dont have permission to go office to do this. Jul 28, 2020 at 1:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.