Admin right porblem

[tvimolnit]

Why domain admin have a right on every subarea in Sharepoint? There are some sensitive area that I dont want an admin to view them. Anyone have an idea?

 

[Bedpan]

I am having the same issue.

Is there anyway to remove Domain Admins from browsing all Sharepoint sites? I am a domain admin in my company but apparently I am not suppose to be browsing out payroll files ;-)

Anyways if anyone know of a way to remove Domain admins from Sharepoint admin it would be greatly apprecaited!

Mike

 

[Bedpan]

Ok.... To answer my own question..

Who ever is part of the Local Administrators Group on the server hosting Sharepoint has Admin access for Sharepoint. By default when you join a domain, domain admin is added to the local admin group. Hence Domain Admin is part of the Sharepoint admin.

The only way to remove this is to remove domain admin from the local admin on the server hosting sharepoint. I am not sure what type of negative impact this might have on the server however. I am testing it soon

Mike