Portal Administrator

Similar Threads:

1.Portal Administrators

Hi, and happy new year to all,

I have an urgent question; my client has noticed that members of the "Domain
Admins" group on Active Directory have "Administrator" privileges on the
Sharepoint portal although they are not added to the users list on the
Portal (not even as Readers). My client is not happy about that.

Does anyone know how to stop "Domain Admins" from being "Administrators" on
the portal?

Thanks,

Adnan

2.Restricting Portal Administrator Access

Dear All,
           We have SharePoint Portal Server deployed. I want to
restrict the Portal Administrator access to some of the sites,
documents, document library, etc.
Is there any way I can restrict the access of Portal administrator to
some of the specific sites or document library?

3.How to block local administrators from being Portal administrators?

Easy, don't put the server in the domain with your 'rogue' administrators,
leave it standalone and create the account locally. You might also want to
consider AD account creation mode and creating a separate doamin, that will
make it easier for users to provision their own account.

There will be no other solution, if a user is a local admin of a machine
then they could undo and setting you put on to lock them out. I *think* you
could remove doamin admins from the local admins group on that machine,
although Ive no idea of the consequences.

-- 
Steven Collier

SharePoint Portal Server MVP

Raymond W. Six < XXXX@XXXXX.COM > wrote:
> The environment:
>
> For our evaluation, we're running SharePoint Portal Server
> beta-2 with the "Technical Refresh" on Windows 2003
> Enterprise Server (eval).
>
> The question:
>
> How do I block local administrators on the portal server
> from being administrators within the portal site?
>
> I saw something on one of the screens indicating that
> local administrators are automatically site administrators
> too.  But, I haven't been able to find any way to disable
> this security hole.
>
> The issue:
>
> We're thinking about running Portal server to
> communication with business partners and such.  But, if we
> can't lock-out various domain admin accounts and service
> accounts on our domain from being used in the Portal site,
> then we'll have to dump Portal server and use another
> product.
>
> Please don't give me the "stock" Microsoft answer to
> require SSL on the site.  We're going to do that also.
> However, that doesn't fix (or in anyway address) the issue
> with local administrator's being portal administrators.
>
> The consequences:
>
> This is a very, very, very basic security requirement.
> Until we find a way to block such accounts, It's just way
> too big of a security hole.  The guys at corporate, and
> their outside security auditors will have my head if we
> implement anything with a hole like this in it.

4.local administrators are sharepoint administrators

Now I work for a company as a tier 3 support person.  I have because of this
domain admin rights.  By default domain admins are put in the local
administrators group on each server.  this means that most of my colleagues
for whom I am trying to set up sharepoint portal server are also doing the
same thing and can all administer sharepoint.

I realise that we may be unusual but this does present difficulties.

Is there any way around this at all ??

Thanks
Alastair

5.Site Administrator Vs Site Collection Administrator

Can any one plz clarify the difference between the Site Administrator and the 
Site Collection Administrator in sharepoint portal server environment. I am a 
bit confused in the two. My webpart asks for authentication if the user is 
not the Site Collection Administrator. Else it works fine. Can anyone help me 
in this?

Regards,

Fahad

6. SPS security: Domain administrator is site administrator?

7. Server local administrator vs SharePoint Administrator Group

8. SharePoint administrator - local machine administrator