Go 4 Sharepoint

Search:

Welcome: Guest!

Sharepoint Forum

Home » Forum » Sharepoint

Ask a question

RSS Feeds

SharePoint Security

Asked By: Kiara Horn Date: May 14, 2007 Category: Sharepoint Views: 165

Recently i have noticed the domain admin account has full rights to
each of my site collections. the admin account is not a
primary/secondary owner of the sites, i also went into the central
admin and confirmed it is not a member of the farm administrators
group. actually it was a member previously but i removed it along with
the "BUILTIN\Administrators" account that i found in there. but i
notice it still seems to have full access. is there another place i can
check or another possible cause for this? i am running windows
sharepoint services version 3 with an SQL 2000 database on the same
server. any thoughts on what i can do?

Tagged:sharepoint security

1 Answer Found

Answer #1 Answered By: Omar Arnold Answered On: May 14, 2007

Two accounts that have pervasive access to content across the farm are
the installation account and the Application Pool identity account.

Neither show up in the UI as having permissions.

Our best practice recommendation is to create a special account in AD
that has admin rights on all members of the farm and the SQL database.

This account would only be used for installing SharePoint and running
the configuration wizard and deactivated when not needed.

I do not know how to remove the access permissions to the installation
account once they are given. Perhaps it could be done programmatically
but since it doesn't appear in the UI, it would be hard to remove there.

Didn't find what you were looking for? Find more on SharePoint Security Or get search suggestion and latest updates.