Sharepoint Forum

Ask Question   UnAnswered
Home » Forum » Sharepoint       RSS Feeds

Restric Server Administrator to Access a Site Collection

  Asked By: Hiral    Date: Mar 06    Category: Sharepoint    Views: 1565

Is it possible create a site or site collection that only specified
users, not even system account or user with full control of web
application be able to open it?



5 Answers Found

Answer #1    Answered By: Abhinivesh Suvarna     Answered On: Mar 06

No - the system  account has to be able to access  all sites to back them

Answer #2    Answered By: Micheal Knight     Answered On: Mar 06

That's what I thought but need experts

Answer #3    Answered By: Yvonne Rodriquez     Answered On: Mar 06

I'm not quite sure you're going to find more of an expert's information than
from folks and others that frequent this forum on a
regular basis...

Answer #4    Answered By: Elisha Abbott     Answered On: Mar 06

Yes. By default, an administrator  will create  a site  that he/she cannot
access if not explicitly defined as a Site Collection administrator.
However, this can be overridden by a farm administrator taking
ownership. This action is audited, however.

But, a farm administrator can create a Web application policy, assigning
Full Control to a given Zone. When you apply a Web application Full
Control policy to a zone, you also have the ability to NOT audit/log the
event, in addition to NOT adding the user  to the Site Collection users
list when visited. Since Web application policies trump all Site
Collection permissions, an educated farm administrator can access
everything without being audited.

So, to answer your question yes, kind of... but you can't really isolate
an administrator that has farm-level access. You simply cannot protect
against a rogue/uneducated administrator/developer.

Answer #5    Answered By: Naimish Ranganekar     Answered On: Mar 06

The system  Account will always have access, but you can restrict a site
so the SharePoint admins don't have rights. Of course since they are
Admins they can always take ownership of the site  so then they would
have rights. There is no way to totally lock an administrator  out of
their system.

Didn't find what you were looking for? Find more on Restric Server Administrator to Access a Site Collection Or get search suggestion and latest updates.

Related Topics:



Related Post