stcheng
Thu Jun 12 05:32:19 CDT 2008
------=_NextPart_0001_5D6E5E6A
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Hi Max,
Have you got any progress on this or does the information help you some?
Sincerely,
Steven Cheng
Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@microsoft.com.
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
From: stcheng@online.microsoft.com (Steven Cheng [MSFT])
Organization: Microsoft
Date: Tue, 10 Jun 2008 03:57:35 GMT
Hi Max,
As Paul mentioned, generally, for sub sites, if it is not configured as
"unique" permission, it will inherit the permission setting from parent
site.
http://technet.microsoft.com/en-us/library/cc287792(TechNet.10).aspx
http://technet.microsoft.com/en-us/library/cc287752(TechNet.10).aspx#section
5
For the site you mentioned, are all those subsites originally created, have
you verified to see whether any of them are using unique security
permission? You can test the access to some new created sub site to see
whether it works.
Also, for testing, you can try temporarly assign a certain user(in the
group) as site collection admin or server farm admin to see whether it can
make the user be able to access all the site. However, site collection
administorators seems doesn't allow an AD group, you will need to assign
site collection admin via individual user account:
#Granting full rights to an AD group to all MOSS 2007 sites in a site
collection
http://msmvps.com/blogs/obts/archive/2007/03/27/716499.aspx
Sincerely,
Steven Cheng
Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
msdnmg@microsoft.com.
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
From: "Max2006" <alanalan1@newsgroup.nospam>
References: <0A8E22D4-41B9-4648-AD27-D30F9ECBD911@microsoft.com>
<12ce6c91-2dd3-4151-a70f-63dc303a4cf3@s50g2000hsb.googlegroups.com>
Subject: Re: How can I grant a user access to all sites in a collection?
Date: Mon, 9 Jun 2008 21:32:19 -0400
Hi Paul,
I like the inheritance option however, it is not working for me.
I've never broken the inheritance. When I go: RootSite->Site Actions->Site
Settings->Advanced Permissions->SitePermissions, I have full permission for
the AD group. BUT the ad group has access to only root, not child sites.
Do
I miss anything?
Thank you for help,
Max
<galvin.paul@gmail.com> wrote in message
news:12ce6c91-2dd3-4151-a70f-63dc303a4cf3@s50g2000hsb.googlegroups.com...
> On Jun 9, 4:04 pm, "Max2006" <alanal...@newsgroup.nospam> wrote:
>> Hi
>>
>> I am using WSS3. How can I grant an AD group access to all sites in a
>> site
>> collection?
>>
>> Any help would be appreciated,
>> Max
>
> What kind of access?
>
> There are a few ways to do it. One way is to create a web appliction
> policy (which may only be available in MOSS, so it may not be
> available for you). A web application policy overrides any and all
> settings for all securable objects in the web application.
>
> More normally, you would give the appropriate access to the AD group
> at the root site of the site collection and rely on inheritence to
> push it through everywhere else (though push isn't quite the right
> word since there's no actual pushing going on).
>
> If you've broken inheritence and assigned permissions at a more
> granular level then you need to go to those sites and give the AD
> group the permission you want.
>
> Finally, you coudl write some code to do it recursively.
>
> --Paul Galvin, Conchango
> RSS @
http://feeds.feedburner.com/PaulGalvinsSharepointSpace
> Web site @
http://paulgalvin.spaces.live.com
> Twitter @
http://twitter.com/pagalvin (I follow anyone who follows
> me)
------=_NextPart_0001_5D6E5E6A
Content-Type: text/x-rtf
Content-Transfer-Encoding: 7bit
{\rtf1\ansi\ansicpg936\deff0\deflang1033\deflangfe2052{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\lang2052\f0\fs20 Hi Max,
\par
\par Have you got any progress on this or does the information help you some?
\par
\par Sincerely,
\par
\par Steven Cheng
\par
\par Microsoft MSDN Online Support Lead
\par
\par
\par Delighting our customers is our #1 priority. We welcome your comments and suggestions about how we can improve the support we provide to you. Please feel free to let my manager know what you think of the level of service provided. You can send feedback directly to my manager at: msdnmg@microsoft.com.
\par
\par ==================================================
\par Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notifications.
\par ==================================================
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par
\par
\par \pard\li720 --------------------
\par From: stcheng@online.microsoft.com (Steven Cheng [MSFT])
\par Organization: Microsoft
\par Date: Tue, 10 Jun 2008 03:57:35 GMT
\par
\par
\par Hi Max,
\par
\par As Paul mentioned, generally, for sub sites, if it is not configured as "unique" permission, it will inherit the permission setting from parent site.
\par
\par
http://technet.microsoft.com/en-us/library/cc287792(TechNet.10).aspx
\par
\par
http://technet.microsoft.com/en-us/library/cc287752(TechNet.10).aspx#section5
\par
\par For the site you mentioned, are all those subsites originally created, have you verified to see whether any of them are using unique security permission? You can test the access to some new created sub site to see whether it works.
\par
\par Also, for testing, you can try temporarly assign a certain user(in the group) as site collection admin or server farm admin to see whether it can make the user be able to access all the site. However, site collection administorators seems doesn't allow an AD group, you will need to assign site collection admin via individual user account:
\par
\par #Granting full rights to an AD group to all MOSS 2007 sites in a site collection
\par
http://msmvps.com/blogs/obts/archive/2007/03/27/716499.aspx
\par
\par Sincerely,
\par
\par Steven Cheng
\par
\par Microsoft MSDN Online Support Lead
\par
\par
\par Delighting our customers is our #1 priority. We welcome your comments and suggestions about how we can improve the support we provide to you. Please feel free to let my manager know what you think of the level of service provided. You can send feedback directly to my manager at: msdnmg@microsoft.com.
\par
\par ==================================================
\par Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notifications.
\par
\par Note: The MSDN Managed Newsgroup support offering is for non-urgent issues where an initial response from the community or a Microsoft Support
\par Engineer within 1 business day is acceptable. Please note that each follow up response may take approximately 2 business days as the support
\par professional working with you may need further investigation to reach the most efficient resolution. The offering is not appropriate for situations
\par that require urgent, real-time or phone-based interactions or complex project analysis and dump analysis issues. Issues of this nature are best handled working with a dedicated Microsoft Support Engineer by contacting Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
\par ==================================================
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par
\par
\par \pard\li1440 --------------------
\par From: "Max2006" <alanalan1@newsgroup.nospam>
\par References: <0A8E22D4-41B9-4648-AD27-D30F9ECBD911@microsoft.com> <12ce6c91-2dd3-4151-a70f-63dc303a4cf3@s50g2000hsb.googlegroups.com>
\par Subject: Re: How can I grant a user access to all sites in a collection?
\par Date: Mon, 9 Jun 2008 21:32:19 -0400
\par
\par
\par
\par Hi Paul,
\par
\par I like the inheritance option however, it is not working for me.
\par
\par I've never broken the inheritance. When I go: RootSite->Site Actions->Site
\par Settings->Advanced Permissions->SitePermissions, I have full permission for
\par the AD group. BUT the ad group has access to only root, not child sites. Do
\par I miss anything?
\par
\par Thank you for help,
\par Max
\par
\par
\par
\par
\par
\par <galvin.paul@gmail.com> wrote in message
\par news:12ce6c91-2dd3-4151-a70f-63dc303a4cf3@s50g2000hsb.googlegroups.com...
\par > On Jun 9, 4:04 pm, "Max2006" <alanal...@newsgroup.nospam> wrote:
\par >> Hi
\par >>
\par >> I am using WSS3. How can I grant an AD group access to all sites in a
\par >> site
\par >> collection?
\par >>
\par >> Any help would be appreciated,
\par >> Max
\par >
\par > What kind of access?
\par >
\par > There are a few ways to do it. One way is to create a web appliction
\par > policy (which may only be available in MOSS, so it may not be
\par > available for you). A web application policy overrides any and all
\par > settings for all securable objects in the web application.
\par >
\par > More normally, you would give the appropriate access to the AD group
\par > at the root site of the site collection and rely on inheritence to
\par > push it through everywhere else (though push isn't quite the right
\par > word since there's no actual pushing going on).
\par >
\par > If you've broken inheritence and assigned permissions at a more
\par > granular level then you need to go to those sites and give the AD
\par > group the permission you want.
\par >
\par > Finally, you coudl write some code to do it recursively.
\par >
\par > --Paul Galvin, Conchango
\par > RSS @
http://feeds.feedburner.com/PaulGalvinsSharepointSpace
\par > Web site @
http://paulgalvin.spaces.live.com
\par > Twitter @
http://twitter.com/pagalvin (I follow anyone who follows
\par > me)
\par
\par \pard\li720
\par
\par \pard
\par
\par }
------=_NextPart_0001_5D6E5E6A--