Sharepoint Forum

Ask Question   UnAnswered
Home » Forum » Sharepoint       RSS Feeds

SharePoint Security

  Asked By: Kiara    Date: May 14    Category: Sharepoint    Views: 1083

Recently i have noticed the domain admin account has full rights to
each of my site collections. the admin account is not a
primary/secondary owner of the sites, i also went into the central
admin and confirmed it is not a member of the farm administrators
group. actually it was a member previously but i removed it along with
the "BUILTIN\Administrators" account that i found in there. but i
notice it still seems to have full access. is there another place i can
check or another possible cause for this? i am running windows
sharepoint services version 3 with an SQL 2000 database on the same
server. any thoughts on what i can do?



1 Answer Found

Answer #1    Answered By: Omar Arnold     Answered On: May 14

Two accounts that have pervasive access  to content across the farm  are
the installation account  and the Application Pool identity account.

Neither show up in the UI as having permissions.

Our best practice recommendation is to create a special account in AD
that has admin  rights on all members of the farm and the SQL database.

This account would only be used for installing SharePoint and running
the configuration wizard and deactivated when not needed.

I do not know how to remove the access permissions to the installation
account once they are given. Perhaps it could be done programmatically
but since it doesn't appear in the UI, it would be hard to remove there.

Didn't find what you were looking for? Find more on SharePoint Security Or get search suggestion and latest updates.