Wednesday, May 26, 2010

Everyone can access a SharePoint site collection

I created a SharePoint web application months ago, and set “Allow Anonymous” to true. After weeks, I changed my idea and set “Allow Anonymous” to false. But it didn’t work. Everyone still had access to the whole site collection even though their accounts were not in the list of Advanced Permissions.
After worked with Microsoft support guy, we found the solution. There’s a page setanon.aspx in _layouts. Open that page, choose Nothing for Anonymous users can access. It is that simple!

The question is there’re lots of pages in _layouts, and we can’t find a document to describe all these pages.