Environment: - SharePoint 2007. Questions related: - SharePoint permissions. We have a intranet site collection, and the AD group (which has all the users accounts) have been added in the visitor group, we now want to restrict some users from accessing the site, how can that me accomplished. Satyam. Live life king size

SharePoint handles permissions based on what type of access is granted to users, but it doesn't provide you a way (out of the box) to name users or groups that you want to restrict or prevent from accessing a SharePoint site. The only way you'll be able to do what you want without a custom solution is to create a new group in AD or SharePoint that only contains the users you want to be able to access the site and then adding that group to the Visitors group of the target site. I'd think that AD may be easier to accomplish b/c you could probably create that group via a PowerShell script if you want. But there's no way to create a restricted user list or anything in SharePoint 2007. JohnMCITP and MCTS: SharePoint, Virtualization, Project Server 2007 My books on Amazon: The SharePoint 2010 Disaster Recovery Guide and The SharePoint 2007 Disaster Recovery Guide. My blog: My Central Admin.

HI, There is no way to carry out this. However you can follow some alternative ways to fullfill your requirement. The best I suggest is to use Audiences. You can create Audiences and based on some rules that only your desired people will come under that. Once you are done with it you can target your sharepoint content to these users and it will work for them. I hope this will help you out Thanks, Rahul Rashu

Yes i agree that the only way suggested by John Ferringer to create a new group in AD or SharePoint that only contains the users you want to be able to access the site and then adding that group to the Visitors group of the target site

Hi all, The above can be achieved by following the below steps Central administration Application Management Policy for web application In here select the option Add user , select the web application and then click next, type in the account of the user whom you don’t want them to have access, then select the option “Deny All - Has no access” and click finish the user will not be able to access the site. SatyamLive life king size

Although this clearly works, applying such a large hammer is a) temporary - what happens if it is later decided that one of these users can access a limited part of the site? b) makes it difficult for future site support people - this is not a usual scenario and I can well imagine them having problems in identifying why users X and Y can't access the site even though they are in a AD group that has access rights. To my mind the only permanent and clear solution is that suggested by John Ferringer. If you are using AD groups, use them correctly. This means crreating a AD group which will then be the one given access rights to the SP site and where all members of the group are allowed to access.SP 2010 "FAQ" (mainly useful links): http://wssv4faq.mindsharp.com/default.aspx WSS3/MOSS FAQ (FAQ and Links) http://wssv3faq.mindsharp.com/default.aspx Both also have links to extensive book lists and to (free) on-line chapters