How to allow only part of users in AD login sharepoint?

We have a SP2013 farm using windows authentication. On the AD there are 10,000 user accounts and we have no edit permission on AD. (Hence, I cannot setup any group there) As the Sharepoint admin I only have a list of 1,000 users allowed to access. There
is no existing group setup to indicate these 1,000 users.
My question is, how can I allow these 1,000 user login Sharepoint while blocking the other 9,000?
My concern is these 9,000 users will get their My Site self-created when he browse the My Site web application. Another concern is when they access some page without authorization, they will get a form allow them asking for access. The site owner may grant
access to them by mistake which I need to avoid.
Thanks.

Hello Mark,
Regarding the second part of your question. You can uncheck the option 'Allow requests for Access', it is described how in the following thread:
http://social.msdn.microsoft.com/Forums/sharepoint/en-US/d1e948cf-6289-48f9-9f25-81b57b292c40/how-to-hide-request-access
- Dennis | Netherlands | Blog |
Twitter

Similar Messages

How to allow only the specified users/groups to open my pdf files...

Hi there,
I'm looking for resources/documents describing how to allow only the specified users/groups to open my pdf files by the Java API...
I've found a sample code creating a policy in the following document.
http://livedocs.adobe.com/livecycle/es/sdkHelp/programmer/sdkHelp/wwhelp/wwhimpl/js/html/w whelp.htm?context=sdkHelp&topic=learn_lc_sdk_invokeremoting
( API Quick Starts (Code Examples) > Rights Management Service API Quick Starts > Quick Start: Creating a new policy using the Java API )
But the sample code doesn't set recepients( users/groups ) who can open the pdf file.
How can I make it ?
Any samples ? or Does anybody can tell me which Java classes/methods I should use ??
Policy#addPolicyEntry(PolicyEntry policyEntry) ??
PolicyEntry#setPrincipal(Principal principal) ??
or none of them ?
Any hints are appreciated !
Thanks.

I'm not exactly sure what you are tying to do here, but typical approach when issuing one PDF par user/groups scenario goes like:
1. Create policy for specific purpose and add principal (user/group)
2. Apply policy on server side
3. Deliver the file (via email etc...)
If you are looking for sample codes, try quick start.
http://livedocs.adobe.com/livecycle/8.2/programLC/programmer/help/wwhelp/wwhimpl/js/html/w whelp.htm?&accessible=true
If you go "API Quick Start/Rights Management Service API Quick Starts", you might find something useful. I think you need "Creating Policies" or "Modifying Policies" for step 1 above, and "Applying Policies to PDF Documents" for step 2.
Hope this helps.

How to send only part of a sequence to Encore?

Hi
I'm new to CS5.5 and I've been trying to figure out how to send only part of a sequence to Encore from PPro. I see in the Help file that it says this can be done but it doesn't explain how to do this (or I haven't been able to find where it's explained). When I use "send to Encore" with dynamic link it sends the whole sequence even though I've tried marking in/out or marking the section I want with the work area bar. Is it not possible to do this using dynamic link?
Thanks!
Steve

Playing around with this a bit I found another method in addition to the one you described. I found I can mark part of the sequence with the work area bar and then use Export. The Export screen has an option to send the entire sequence or only the part under the work bar. Then I imported it into Encore and since it was exported with final disc settings Encore didn't have to encode it.
But I think I will send in a feature request. Hopefully a lot of other people will also ask for this.
Thanks
Steve

How to make only part of a PDF document editable?

I'm looking to see if there is a way to make only part of a PDF document editable. My problem is, I have pieces of collateral that some of our channel partners need to be able to add their logo to and then edit the contact information on them, but we don't want them to be able to change any of the main copy on these documents. The only thing I've been able to come up with as a solution is to create outlines of the text that I don't want editable, but I need the copy to be able to be read by computer systems for disability purposes. Does anyone have any ideas on something I could do for this? Or has anyone dealt with anything like this? Any help would be greatly appreciated!

Hi vward26,
You can use Acrobat to make only part of a PDF document editable.
Kindly refer this FAQ:http://tv.adobe.com/watch/acrobat-x-tips-tricks/how-to-convert-just-part-of-a-pdf-file/
Regards,
Florence

How to copy only part of the music media folder and library to another Mac

Dear friends,
I run iTunes in Mac OS. The iTunes music media folder is now located in an external HD because it´s quite large (2T). The problem is that I´got a second Mac and I´d like to copy -in this second Mac, only part of my music using only its internal HD (300 Mb) . How can I do this copy while preserving art and play-lists?
Thanks in advance

tcynk00 wrote:
how I can transfer only selected pieces of music (all library will not fit anyway)
that's what playlists are for.
and how to maintain transfer process in future when I want to change the music on my nano.
add/delete track to/from the playlist you sync to your device.
JGG

How to delete only part of a iMessage conversation

How do I delete only part of a conversation in iMessage?

Just press and hold the part of the conversation you want to delete. A black box will appear then press More... A circle will appear to the left then select delete.

How to export only part of animation?

In the case of a big animation (tens of thousands of frames), is there a way to render (using Export Movie) only part of the animation, e.g. frames 100-500 and nothing more? That way, loss of time would be reduced.

Playing around with this a bit I found another method in addition to the one you described. I found I can mark part of the sequence with the work area bar and then use Export. The Export screen has an option to send the entire sequence or only the part under the work bar. Then I imported it into Encore and since it was exported with final disc settings Encore didn't have to encode it.
But I think I will send in a feature request. Hopefully a lot of other people will also ask for this.
Thanks
Steve

Mail: How to print only part of a message

I often want to print (on paper) only part of a message. I have tried:
1. Select the part to be printed, but the whole message is printed;
2. Do Print > PDF (button) > Open PDF in Preview (button) >Select and delete the part that I don't want > "Message": The original document can't be changed, so a duplicate with your changes has been created" appears at top pointing to an active down arrow and link labelled "Edited" > I click on that link > Dialogue box :" Header text of message", "Where:" (Documents etc. offered).
But I want to print the part of it without the fuss of saving, searching and then printing, then deleting. My task does not seem unusual. Is there a way? Thanks.

OOPS! I just remembered before going on holiday that on advice from somewhere that for security reasons it was a good idea to prevent Java from being used (Safari Preferences). So I did. I have just re-enabled Java and all is well. Whew!
But is enabling Java a security risk (malware)?

How to authenticate only specific AD users in ACS 5.1

Hi All,
Is it possible for ACS 5.1 to only allow specific AD users to authenticate the switches and routers?
Currently What I have configured is onlyfor all AD users. I can't seem to find a way to be selective.
Thanks
Regards

Hi Ryan,
The way to control Active Directory access is via the Directory Groups tab under
Users and Identity Stores --> External Identity Stores --> Active Directory.
The way to permit TACACS+ mgmt access to your infrastructure devices is as follows:
1. Make your network admins part of a specific AD group
2. Add that AD group to the list of Directory Groups
3. In the Access Policy, click the Customize button as Mauricio suggested, and add "AD1:External Groups" to the selected critieria
4. In the policy rule, you will now be able to select your specific AD group to match against.
Additionally, you may want to verify that the identity selection is set to only check AD for the authentication portion, by default I think (if I'm not mistaken) the identity check should be AD1 (Active Directory only), but it's best to confirm that part as well.

How to allow Window Azure AD users to login to my On Prem SharePoint 2013

Hi guys,
A bit new to this technology, would like to check for my above (Subjcet) scenario. How can i achieve by doing that?
Assuming i have a local AD and SP Farm built (NOT in Azure Platform) and now all my users accounts are with Azure AD cloud.
Any "Correct" articles demonstrating how to configure that?
Also, is there connectivity required for my Local AD to talk to the Azure AD?
Cheng

Greeetings.
Pls check it below.Hope it helps you
http://blogs.technet.com/b/speschka/archive/2013/05/10/integrating-sharepoint-2013-with-azure-active-directory-part-1-configuration.aspx
Please remember to click 'Mark as Answer' on the answer if it helps you

How to reference only part of Image element in Site Studio 11g

I have defined a Static List and one of the elements is set as an Image. I have the need to only use the src part of the image element and not actually the entire img tag that is created. How can I do this?
Example:
<wcm:element name="LargeImage"><img alt="photo01" src="[!--$wcmUrl('resource','steldev5015106')--]" /></wcm:element>
I'd like to only use the src= piece. My javascript looks like this and the image is breaking because the entire tag is going within the ""
src=''
Edited by: 848038 on Sep 1, 2011 8:32 AM
Edited by: 848038 on Sep 1, 2011 8:33 AM

Here is what I put in my code and it works beautifully.



<img style="position: absolute; top: 0px; left: 0px; display: block; z-index: 6; opacity: 1;" src='' alt='' title='' longdesc='' height="313" width="520">

How to allow only new combinations when adding lines in manual planning?

Hello Xperts.
in manual planning (input ready query called over web-template) the user wishes to plan (change the key figure values) for already existing combinations and to add new lines (which has been enabled in the web-template through a button group).
The crux of the matter is that the user is supposed to be able to enter only new unique combinations of data. Hence the user may not enter already existing characteristic combinations as a new line.
I have noticed that the system default is that if the user enters an already existing combination when "adding a new line", the value entered for the key figures is simply added to the existing value (summation) of that characteristic combination. This is unacceptable to the business requirements!
I thought about solving with a check combination exit (CL_RSPLS_CR_EXIT_BASE), but the problem is that all already existing combinations would be invalid, hence it would not work I think.
I would appreciate any suggestions out there how this could be accomplished. Thank you.

Hi,
The best option that satisfies your requirement is to create a custom planning function to accept only new combinations.
For this check the following link,
http://help.sap.com/saphelp_nw70/helpdata/en/43/0c033316cd2bc4e10000000a114cbd/frameset.htm
In the above go to BI Integrated Planning -> BI Integrated Planning -> Implementing Planning Function Types
After this, in your "Save" button on the workbook insert this custom function also before the "Save".
So once you click "Save" button first check is performed and error is thrown if the records entered by the user are not as per your requirement.
Regards,
Balajee

Allow only locally defined users to logon on a AD Domain

Hello All,
I have a domain controller on my company. I do not want users to logon the PCs whatever they want. So I am trying to find a right way to configure "allow logon locally" group policy.
So I want only the users that I define in the control panel -> users, can logon locally.
Let's say there is a engineer in my company and his name is John Doe. And also he has a PC. So I do not want to any user to logon this computer except John Doe. So I am adding his AD account to Control Panel -> User Accounts section with Power User Group.
I need to configure my "allow logon locally" Group Policy so that only Locally defined Power Users can login.
I have Windows Server 2012 Standard edition. And Windows 7 on th workstations
Is that possible?
(Sorry for my bad english)

Hi,
By default, every user in AD automatically gets added to Domain Users. Domain Users are by default included in the local Users group on workstations when the workstations get added to AD. That means that unless you take action on either the user account or
the computer configuration, any user account in your AD environment can log into any computer whether you want them to or not.
Checkout the below link on deny or allow specific users or groups to logon locally to the workstation using Group Policy,
http://4sysops.com/archives/deny-and-allow-workstation-logons-with-group-policy/#allow-log-on-locally
Checkout below thread on similar discussion,
http://social.technet.microsoft.com/Forums/en-US/6bceec6a-1db3-4084-a397-68a13a8a5459/only-allow-certain-ad-users-onto-a-pc?forum=winservergen
Regards
Gopi
JiJi Technologies

How to delete only part of an event clip

In Imovie 09 I reject part of a clip in an event and when I send it to trash it takes all the clip. So all my event is in the trash. All my projects are useless and I have to record all from the camera again.
What I want its just to eliminate part of the clip and stay with the rest. Can anyone tell me how?
Thanks a lot

Don't "Move rejected to trash" You shouldn't trash part of clip or all of clip from imove(even anywhere), when "Project" is NOT finished/finalized. You can right click and "Reject Selection"(Yellow highlighted portion), of clip, but don't throw in trash. If you did Not Empty,you might be able to drag back out to desktop.
The Video that is in Event Library, does not all have to go into Project.(Edit in Event pane, and drag highlighted portion (you want) into Project.
http://support.apple.com/kb/PH2116 This might help with importing to project.
http://support.apple.com/kb/PH2322
http://support.apple.com/kb/PH2320
There are also quite a few very helpful guides that might help with the rest of your project here
Hope this helps. Cheers.

How to set only part of the document as "read-only"?

Hi,
I am using SharePoint 2010. I would like to set some of the columns as "read-only" while some of them are still editable. If I use Advanced Settigns>Item-Level Permissions, I can only set the whole document as "read-only".
Is there a way I can do what I wannt?
Thanks a lot!

Hi,
There is no OOTB way to set a column as read-only. I think you want to make some of the fields as Read-Only in the EditForm.aspx. If so, then you can use the Javascript to do.
Add a Content editor webpart to the Editform.aspx page and place the javascript method to make a field read-only.
You can use the _spBodyOnLoadFunctionNames.push("MakeReadOnly()") method to assocaite your method to the EditForm.
Here are the links which will help you.
http://dishasharepointworld.blogspot.in/2011/08/read-only-field-in-sharepoint.html
http://nishantrana.wordpress.com/2009/01/30/read-only-field-in-sharepoint-editformaspx/
http://www.jbmurphy.com/2010/06/01/how-to-make-a-field-in-a-sharepoint-edit-form-readonly/
*******Don't forgot to MARK AS ANSWER / VOTE AS HELPFUL if it really helps************
R.Mani http://rmanimaran.wordpress.com

How to allow only part of users in AD login sharepoint?

Similar Messages

Maybe you are looking for