Microsoft KB Archive/906171

= Members of a local administrators group can access all portals and pages of a SharePoint Portal Server 2003 site, even if they do not have permissions for the portal areas =

Article ID: 906171

Article Last Modified on 9/26/2007

-

APPLIES TO


 * Microsoft Office SharePoint Portal Server 2003

-





SYMPTOMS
Members of the local administrators group on a computer that is running Microsoft Office SharePoint Portal Server 2003 can access all portals and pages of a SharePoint Portal Server site, even if they do not have permissions for the SharePoint Portal Server portal areas.



RESOLUTION
This problem was first fixed in a hotfix that is now contained in a service pack. If you installed the latest SharePoint Portal Server 2003 service pack, you do not have to install the hotfix.

Service pack information
This problem is corrected in SharePoint Portal Server 2003 Service Pack 3. To resolve this problem, obtain the latest service pack for SharePoint Portal Server 2003. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

889380 How to obtain the latest service pack for SharePoint Portal Server 2003

How to obtain the hotfix
This issue is fixed in the SharePoint Portal Server 2003 hotfix packages 919175 and 898547. For more information about the English version of this hotfix package, click the following article number to view the article in the Microsoft Knowledge Base:

919175 Description of the SharePoint Portal Server 2003 post-Service Pack 2 hotfix package: June 16, 2006

For more information about the German and the Spanish versions of this hotfix package, click the following article number to view the article in the Microsoft Knowledge Base:

898547 Description of the SharePoint Portal Server 2003 post-Service Pack 2 hotfix package: October 24, 2005

To enable the hotfix, follow these steps:  Click Start, click Run, type cmd in the Open box, and then click OK. At the command prompt, type the following command, and then press ENTER:

stsadm -o setproperty -propertyname denymachineadminaccess -propertyvalue 1

 At the command prompt, type iisreset, and then press ENTER. At the command prompt, type exit, and then press ENTER.

To disable the hotfix and return to the original behavior, follow these steps:  Click Start, click Run, type cmd in the Open box, and then click OK. At the command prompt, type the following command, and then press ENTER:

stsadm -o setproperty -propertyname denymachineadminaccess -propertyvalue 0

</li> At the command prompt, type iisreset, and then press ENTER.</li> At the command prompt, type exit and then press ENTER.</li></ol>

<div class="status_section">

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

This problem was first corrected in SharePoint Portal Server 2003 Service Pack 3.

Additional query words: sharepointportalserver2003 sharepointportalserver2k3 sps2003 sps2k3 SPS

Keywords: kbshareptportalsvr2003sp3fix kbhotfixserver kbqfe kbshareptportalsvr2003presp3fix kbbug kbfix kbpubtypekc KB906171

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.