Wednesday, May 26, 2010

Everyone can access a SharePoint site collection

I created a SharePoint web application months ago, and set “Allow Anonymous” to true. After weeks, I changed my idea and set “Allow Anonymous” to false. But it didn’t work. Everyone still had access to the whole site collection even though their accounts were not in the list of Advanced Permissions.
After worked with Microsoft support guy, we found the solution. There’s a page setanon.aspx in _layouts. Open that page, choose Nothing for Anonymous users can access. It is that simple!

The question is there’re lots of pages in _layouts, and we can’t find a document to describe all these pages.

Friday, January 8, 2010

A bug in SharePoint User Profiles and Search

The users complain that the persons left our company are still searchable in SharePoint. I configured Source as Custom source in Configure Profile Import in User Profile and Properties. In this custom source, I configured it not load Disabled account from AD. Here is the link to another post about this: http://davidnotions.blogspot.com/2009/06/using-user-filter-to-limit-user-profile.html.

So I did a full import and View user profiles and see there’re lots of profiles (they are disabled accounts) in View Profiles Missing from Import. As per Microsoft (http://office.microsoft.com/en-us/sharepointserver/ha011604221033.aspx ), it seems these accounts should be removed after three-times full import. Unfortunately I did three-times full import and they were not removed. I have to say this is a bug.

So I have one more administration job: monitor Profiles Missing from Import and manually delete profiles in this list.