SharePoint® automatically creates Limited Access permissions on a parent object when a new permission is created on a child item. For example, if you create a new Full Control permission on a subobject for AccountX, then SharePoint®, if necessary, automatically creates a Limited Access permission for AccountX on the parent object. If you delete the Full Control permission, the parent Limited Access permission is not automatically deleted. The Repair Limited Access Permissions function cleans up all orphaned Limited Access permissions that should no longer exist.
NOTE: Applies to parent SharePoint sites only. The Repair task opens the Repair Limited Access Permissions dialog box.
|
1 |
Open the SharePoint Security module. |
2 |
Open the Browse tab. |
4 |
Select an item in the Objects pane, and select Security | Repair Limited Access Permissions. |
Select to create a report that lists changed items. Type a file path or browse to locate a path. | |
If you remove an Active Directory® account, the permissions are still retained on the SharePoint® server. Use this feature to remove all permissions associated with deleted Active Directory accounts on a SharePoint site.
NOTE: Applies to parent SharePoint sites only. The Revoke Unknown task opens the Remove Permissions for Deleted Accounts dialog box. Add at least one path, and click OK.
|
1 |
Open the SharePoint Security module. |
2 |
Open the Browse tab. |
4 |
Select an item in the Objects pane, and select Security | Remove Permissions for Deleted Accounts. |
Removes all permissions associated with disabled Active Directory® accounts on a SharePoint® site.
NOTE: Applies to parent SharePoint sites only. The Revoke Disabled task opens the Remove Permissions for Disabled Accounts dialog box. Add at least one path, and click OK.
|
1 |
3 |
Select an item in the Objects pane, and select Security | Remove Permissions for Disabled Accounts. |
Select to remove permissions for disabled accounts from SharePoint groups. | |
Remove disabled accounts from AD groups (except primary groups) |
|
Select to create a report that lists changed items. Type a file path or browse to locate a path. NOTE: If you select the Create Report check box, only the parent container is examined and appears on the report because the child objects are included in the revoke process automatically. | |
You can manage group membership for SharePoint® groups, including the Site Collection Administrators group for each site collection.
NOTE: Applies to parent SharePoint sites only. The SharePoint Groups advanced task opens the SharePoint Groups dialog box. Add a path, and click OK. |
1 |
Open the SharePoint Security module. |
2 |
Open the Browse tab. |
4 |
Click Groups. |
Look up the Active Directory® account for the selected member. |
© 2024 Quest Software Inc. ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center