Can you restrict SharePoint Users using AD Groups? Here are my thoughts /
scenario:
I have AD groups ADGroupA, ADGroupB, ADGroupC, ADGroupXYZ on the DC
Server. On the WSS 3.0 SharePoint Server I have a SharePoint sites called
SPSiteA-Root and SPSiteB (inherits permissions from SPSiteA-Root) and a SPGroup
called SPGroupB no permissions anywhere yet.
Q. I want only the DC groups ADGroupA, ADGroupXYZ to have access to SPSiteB, is
it possible?
My thought:
[pre-req I am a Site collection administrator for Root Site [SPSiteA]]
I break inheritance from SPSiteA-Root on SPSiteB and remove all the current
users and groups that I do not need
Then I add the AD Groups ADGroupA, ADGroupXYZ to the SharePoint group SPGroupB
Then I add the SPGroupB to SharePoint SPSiteB with permissionX [i.e. read, full
control, contribute, custom perm, etc.]
End result, everyone that is added and removed from the AD Groups ADGroupA,
ADGroupXYZ can access the with permissionX [i.e. read, full control, contribute,
custom perm, etc.]
Does this sound right? Should those not SC Admin or in SPGroupB get access
denied?