Restrict AD users from login sharepoint?

Dear all,
I have setup User Profile Sync with my AD for particular AD group "Sharepoint Users" only. After the sync timer job run, I can see the user profiles built up. However, there is a user "outsider" not in "Sharepoint Users"
group is able to login Sharepoint. After he login his user profile is auto built in Sharepoint.
May I know is it default setting? If so how can I restrict only "Sharepoint Users" can login Sharepoint? Thanks.
Mark

Hi Mark,
This is by design. When a user logs in to SharePoint, SharePoint checks to see if this user has permissions in the current site (or list/item). If the user has permissions, he can log in to SharePoint, it doesn't matter if he has a user profile or not.
I think the user has permissions on the site he is trying to access. These can be permissions given to him directly, or he is member of a AD security group that allows him to access the site.
You can check this by going to Site Actions -> Site Settings -> Site Permissions. In the ribbon, click "Check Permissions". Enter the username for that user and you can see how the user is given permissions to the site.
Nico Martens - MCTS, MCITP
SharePoint 2010 Infrastructure Consultant / Trainer

Similar Messages

Restricting the Oracle user from Login

Hi,
I want to restrict the users from login depending on two parameters usind Database logon trigger,
i.e
1. MODULE (like SQL*Plus...)
2. USERNAME
I can get USERNAME from
select SYS_CONTEXT('USERENV','CURRENT_USER') from dual
But, select SYS_CONTEXT('USERENV','MODULE') from dual says invalid parameter.
Can anybody help me?
Ronald.

Both are working fine i saw
SQL> select SYS_CONTEXT('USERENV','CURRENT_USER') from dual
2 ;
SYS_CONTEXT('USERENV','CURRENT_USER')
APPS
SQL> select SYS_CONTEXT('USERENV','MODULE') from dual ;
SYS_CONTEXT('USERENV','MODULE')
SQL*Plus

How to restrict a user to login twice

hei evryone!
Here's my prob... I need to restrict a user to login more than once meaning, if a certain user account is currently login , that account cannot be used concurrently using another window or machine... If another user attempts to login, using that same account an error message will be displayed saying "this user account is already logged in".. i tried to do this in javascript but the code that i've got only works for IE and its kinda hard to capture the event for closing window.. plus using onunload is not advisable with my situation since my webpage can be redirected to other codes meaning the cause of unloading the page could either be closing the browser or redirecting the window to another page such as window.location="anothercode.jsp";... I was wondering if there's a way to do this in jsp...
Any suggestions, ideas, or sample codes would be deeply appreciated. Thanks in advance!
btw, i need to generate a code that is cross browser.. What i really need to accomplish is to be able to determine when the browser is closed either by clicking the X button on the window, alt f4 or my own close button and not when the page is unloaded.
Here's a sample code : This only works in IE =(
---------- default.jsp-------------------------
<html>
<head>
<script language="Javascript">
     onunload=function(e) {
     winX = navigator.appName=="Microsoft Internet Explorer" ? window.event.clientX : e.screenX;
     winY =navigator.appName=="Microsoft Internet Explorer" ? window.event.clientY :e.screenY;
if (winX<0 && winY<0)
          // redirect to logout.jsp n do some stuff
</script>
</head>
<body>
Logout
List
View Schedules
</body>
</html>
the default screen would be the code above: "default.jsp" wherein there are many ways that the page
can be unloaded such as :
- clicking the logout link
- click the View Schedules
- click the x button the left side of the window
- alt f4
- if the window is minimized , right click then select close option
Now, what i needed to do is to determined when the browser is closed so i reset the login flag of the account and can be used later on.

hei everyone!
im tryin to resolve this prob by adding a session id field on the users table. Everytime a user logs in i will update the session id field so that if anyone attempts to use the same account i will redirect the later into the login page with a warning msg. I'll do this by comparing the session id that u got from the dbase and the session id from request.getSessionId() of the browser. However, my prolem now is how to cleanup my database.. i need the cleanup coz i have a user tracking screen wherein i cud show who's account are login n who's not. I have created an applet and embed it in all of jsp files so that i cud catch the event for closing window whether by using the x button of the window or a power intrerruption. However, i need to find a way where i cud determine whether the event was really a close window or just a redirection from another page. I mean , you could leave the page either by viewing another screen or by actually closing the window.. For instance, my main page has main menu which are (1) View Users and (2) View Schedule .By default, im in the "View Users" screen . These two menus have their corresponding jsp n both jsp files have an embeded applet. So if the user click the "View Schedules " screen or if the user chooses to click the logout button or window's x button to exit the browser, then the applet will call the stop method. This what i meant by how will i determine if the user really exits on my application or not.. Coz if the user clicks from one screen to another then, user actually does not leave my application the user only exit on my application if the user logs out or close the window..
Please help me out on this matter... Thanks in advance!

Is it possible to restrict the user from creating a sibling and allow him to ONLY create child nodes in DRM?

When in a hierarchy, a user right clicks on a node to crate a new node, he has two options
-Child
-Sibling
Is it possible to restrict the user from creating a sibling and allow him to ONLY create child nodes?
Business cases:
1. different level nodes need to have different prefixes.
- Thus, the default prefix property definition uses the level number to assign a prefix
- Also, a validation, to ensure the correct prefix, uses the level number
But if the user can create a child and a sibling then the default prefix will only be right for a single case and not both.
Thanks

If the images are exactly the same size then make sure the layer with the mask
is the active layer and in the other documents go to Select>Load Selection and choose
your document with the layer mask under Source document and under channel choose the layer mask.
After the selection loads press the layer mask icon at the bottom of the layers panel.
MTSTUNER

Restrict A User From Changing A Payment Term While Adding A/R Invoice

Dear Experts,
We want to restrict our users from changing payment terms while adding A/R Invoice.
We use SAP B1 2007 b.
Thanking you
Pradnya

Hi,
try below code in transaction notification procedure:
if (@object_type = '13') and (@transaction_type IN ('A', 'U'))
BEGIN
IF exists (select T0.DocEntry FROM OINV T0 Inner Join OCRD T1 on T0.CardCode=T1.CardCode Where T0.GroupNum !=T1.GroupNum and T0.DocEntry =@list_of_cols_val_tab_del)
          Begin
               SET @error = 30
               SET @error_message =N'You are not authorized to change payment terms'
          end
END
for how the transaction notification works or how to use :
check How to use Transaction Notification
Thanks,
Neetu

Adding and removing current user from one SharePoint group to another with event receiver

hi friends
i need to change current user from one SharePoint group to another with list item adding event receiver.
please help me

Hi Malli,
Greetings. Its nt possible
http://sharepoint.stackexchange.com/questions/42286/event-receivers-on-add-remove-users
Please remember to click 'Mark as Answer' on the answer if it helps you

How to restrict the user from making any changes in Sales order- item level

Hi to all
How to restrict the users from making any changes in sales order at item level if the same sales order is released by senior user through status profile.
Regards
Anish Parikh
Edited by: anish parikh on Jan 24, 2008 5:16 AM

Hi Anish,
This can be achieved through the roles and authorization.
This can be done through the basis team. they can create user profiles and roles.
For the roles they assign some transaction codes so that they can view the only assigned tr. codes.
Like that ur requirement can be done.
Also u can prevent the user to change any fields in the sales order screen (VA02). for that please modify the authorisations.
Hope i answers.
Reward points if useful.
Edited by: kaleeswaran bhoopathy on Jan 24, 2008 9:57 AM

How to redirect user from login page to "Set Challenge question" page

How to redirect user from login page to "Set Challenge question" page (NOT custom page) after 3 un successful password attempts?
Meaning when user types wrong password 3 times they will be redirected to set Challenge question page. If user answers the challenge question then password reset page should be appeared other wise (after remaining 3 un successeful challenge question answers) account should be locked out.
thanks for your help.

hi sandeep
Thanks for your answer. Let me ellaborate more on the requirement here.
- Password Policy and Lost Password management are set up in the identity system
- Configure login tries allowed= 5. Verify accout is lock out after 5 unsucessful login.
This is what need to achieve.
1) If a user attempts to login 3(not 5) times using an incorrect login credential he/she should be redirected to set challenge question (security question) page.
2) Then if the user attempts (remaining) 2 times incorrect challenge answer then his/her account should be locked out.
3) If he/she answers the challenge answer correctly then he/she should be redirected to password reset page.
Is this possible?

Restricting the user from deleting a personel number

Hi All,
Can anyone help me in restricting the user from deleting a personel number.
Thanks & regards,
Venkat

Hi Venkat,
The utility menu will ultimately calls to PU00 so it doesnt matter , system wont allow him to delet.
You can try it out in quality if you want.
Award points if useful
Regards,
Bhupesh Wankar

Priventing WLS user from login into OBIEE 11g

I have 100+ users in Weblogic. Only some users say 60 are allowed to access OBIEE 11g.
How do I prevent other users from login into OBIEE (When they have OBIEE url :) ).
Thanks,
Mod

Hello,
You can put those 60 users in a group say OBIEE_Users and use this group in All Users Filter in WLS.
User Base DN : DC=CORP,DC=NET
All user Filter : (&(memberof=CN=OBIEE_Users,OU=BIUsers,DC=CORP,DC=NET)(cn=*)(objectclass=user))
User from name filter : (&(cn=%u)(objectclass=user))
Refer to this example on how its configured : http://paulcannon-bi.blogspot.com/2012/07/configuring-ldap-authentication-for.html
Hope this helps. Please mark if it does.
Thanks,
SVS

Restrict Standard User from not removing the COM-Addins registered under HKLM with Admin rights.

Hello,
I have developed a COM-Addin for word 2013 by VS 2013 and installed it under the HKLM with Admin rights. Now from an non-admin account, ie Standard User I'm able to uncheck that addin from the COM-Addins dialog and remove it also. Previously I have done the
same thing for word 2007 addins and if a non-admin user tries to uncheck it the warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" pops
up. But this is not happening for office 2013 apps(basically word, excel and powerpoint).
This is happening for all Add-Ins installed under HKLM.
How can a Standard User be restricted from unchecking and removing the Office Addins registered under HKEY_LOCAL_MACHINE with same warning "The
connected state of Office Add-ins registered in HKEY_LOCAL_MACHINE cannot be changed" in
a pop-up box?
Regards, Sayan

Hi,
The behavior is changed since Office 2010. Office 2010 and Office 2013 allows a standard user to turn a per-machine add-in off by unchecking the add-in in the COM Add-ins dialog.
To restrict Standard User from not removing the COM Add-ins, we can try to add the add-in to
the Group Policy option: List of managed add-ins in the Office Group Policy template.
Word for example, the policy is under:
User Configuration\Administrative Templates\Microsoft Word 2013\Miscellaneous
To enable this policy setting, provide the following information for each add-in:
In "Value name", specify the programmatic identifier (ProgID) for COM add-ins, or specify the file name of Word add-ins.
To obtain the ProgID for an add-in, use Registry Editor on the client computer where the add-in is installed to locate key names under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins.
To obtain the file name of an add-in, click the File menu in the application where the add-in is installed. Click Options, click Add-ins, and then use the Location column to determine the file name of the add-in.
In "Value," specify the value as follows:
To specify that an add-in is always enabled, type 1.
Hope this helps.
Regards,
Steve Fan
TechNet Community Support

How to restrict the user from accessing other screens before submittingdata

Hi All,
I have some screens developed in Webdynpro ABAP and all these have been linked to Portal as pages. In Portal If i click on the link in detailed navigation i can see the corresponding screen on the right side. Now in one screen i have to input some data and submit the data, Now my problem is if i enter some data and before submitting the data if i click on any other link in the detailed navigation, that corresponding screen is opening and all the data of the previous screen is lost.
Can any one suggest me, how can i restrict the user from accessing other screens before submitting the data of that screen from portal perspective.

Hi Prasanna,
The pages can be restricted from the user access by using the ACL permission or you can restrict the page by making invisible in navigation area which you do not want to show to the user . Open the page properties and select navigation category in the drop down and select the Invisible in navigation area property to yes.By default this property is No.Change the property for all pcd pages which want to hide from user access.
Hope this helps you...
Regards,
Rudradev Devulapalli
Reward the points if helpful....

How to restrict a user from deleting a PO

Dear All,
I have to restrict some users from deleting a line item in PO. They will be authorised to create & change the PO but they must not be able to delete the line item.
Further it would be more helpful if it is possible to restrict them from deleting one perticular type of PO(ex-Capex PO). They can change a capex PO but can not delete it.
Any of the answars will be highly appreaciated.
Regards
Rutabhadra Panda

Hello,
Speak to your basis guy, put if you have created Capex PO as a particular document type, then maintain authorisation object M_BEST_BSA (Document Type in Purchase Order) and activity 06 delete.
You may find that delete is still possible through activity 02 change, so you might need to maintain different roles depending on what you need.
Thanks.

Is it possible to restrict certain users from printing from Adobe Reader?

Is it possible to restrict certain users from printing from Adobe Reader?

First of all, with Reader you can't change any security settings.
If you have Acrobat, then you could place a password on changing the document (which includes printing), and then give it to only some users.

What profile option need to be set to deny user from login to diff Machine

Hello all,
What profile option do i need to be set to deny user access from login on to different machine. I mean a user that logon to Machine A if he/she tries to logon to machine B. Machine A must be disconnected telling him/her that he/she had already logon to a machine before.

Please see these threads.
Is It Possible To Block Multiple oracle application logging??? (11.5.10.2)
Is It Possible To Block Multiple oracle application logging??? (11.5.10.2)
restricting session in Oracle application
restricting session in Oracle application
Is it possible to limit the user to one session?
Is it possible to limit the user to one session?
Thanks,
Hussein

Restrict AD users from login sharepoint?

Similar Messages

Maybe you are looking for