SPGroupDeflector Explicitly deny groups to webs within your Site Collection
Download

SPGroupDeflector Ranking & Summary

SPGroupDeflector Tags

WSS SharePoint deny MOSS Farm Site Collection beam webs deny browser deny USB Deny Process site groups manager deny execution Deny Access Deny Update deny cipher deny hash deny popup MOSS portal WSS Portal SharePoint group deny traffic webs

SPGroupDeflector Description

SPGroupDeflector will allow you to secure webs within your MOSS or WSS Portal by explicitly denying access to specific users in SharePoint groups. We often find ourselves in a situation where we would like to explicitly block a user or group of users from a particular web in a site collection. The problem is, MOSS 2007 doesn’t provide a mechanism for doing this. Say for example, you have a small group named “Canada” and would like to block those users from the “Admin” web in your site collection. You can easily do this by breaking inheritance and removing that group in the advanced permissions for that web. However, if the users in that group also belong to another group, like “mydomain\domain users” that has read permissions on the entire site collection, they can still get in. I have found some 3rd party solutions on the web for doing this but none of them work as advertised. They simply prevent the blocked users by redirecting them from the web’s home page….this does nothing to prevent the blocked users from accessing the web’s content by typing in the url of the list, document library, or whatever they want to access. I found that all of these solutions provide the illusion of security without actually securing anything…and they were selling these solutions! This solution actually adds the required tags in the application's web.config file, using the SPWebConfigModification class. This will prevent the blocked users from accessing any of the web's content, not just the home page.

SPGroupDeflector Related Software