I have to imagine I'm missing something small here (I'm a newb to WSS)...
I have a new install of WSS on a domain with only three users set up, no
groups. I can log on to a computer with a user on our domain that is not set
up in WSS and that user can still browse the WSS site with full admin
privilages.
Anonymous access is turned of both in IIS and WSS. All authenticated users
are supposed to be granted Reader access, but they seem to have admin
privilages.
Thanks,
Phil