Hi,
We have SBS 2003 standard SP2 with SharePoint 3.0.
We have published a certain SharePoint website externally and we want to
create user accounts for outside consultants, which we want to restrict to
using that specific website and nothing else.
What's your advice to accomplish that? I am obviously worried about
inadvertently opening doors to the server.
Here is what I did:
- I created a specific security group called, say, "SharePoint"
- I have used that group to deny access to all shared folders on the server.
That's tested, it works.
- The problem is with our public folders in Exchange: I have trouble denying
access to that security group, either directly through Outlook (after logging
in as Administrator: the folders themselves in Outlook appear to access only
users, not groups) or in Exchange Management itself (I was able to add denial
of access under folders/public folders, but then a simple test showed that
SharePoint security group members are able to access our public folders ! --
this I clearly don't undertand
- I am also worried about VPN or other loopholes I might be forgetting.
Thanks for your help
Charles