I am new to sharepoint services and have installed it on a server. We have Active Directory and even when I create users from within sharepoint it doesn't make a difference what security group I assign them - all users have administrator rights. How can I restrict the user rights to what I have assigned when the users are created i.e. if I assign someone as a Reader they can still add tasks/announcements etc but surely they should only be allowed to read them.