【文章內(nèi)容簡介】 位置：216。 Create Web Application界面Central Administration Application Management Create or Extend Web Application Create New Web Application216。 Authentication Providers界面Central Administration Application Management Authentication Providers Edit Authentication3) 實現(xiàn)：216。 開啟匿名訪問 01l Application Management Create or Extend Web Application Create a new Web Applicationl Security Configuration Allow Anonymousl 選中radio：Yesl 此時創(chuàng)建的Web Application 開啟匿名訪問216。 開啟匿名訪問 02l Application Management Authentication providers.l 選中想要設(shè)置的Web Applicationl 選擇一個想要配置匿名訪問的zonel 點擊Zone 超鏈接進(jìn)入Edit Authentication 頁l 在Anonymous Access 部分, 選擇 Enable Anonymous Accessl 點擊button：Save.l 此時該 Web Application zone 被開啟anonymous access. 216。 關(guān)閉匿名訪問l Application Management Authentication providers.l 選中想要設(shè)置的Web Applicationl 選擇一個想要配置匿名訪問的zonel 點擊Zone 超鏈接進(jìn)入Edit Authentication 頁l 在Anonymous Access 部分, 取消選擇 Enable Anonymous Accessl 點擊button：Save.l 此時該 Web Application zone 被取消anonymous access.4) 值得指出的是：216。 Anonymous access enables users to find resources in the public areas of Web sites without having to provide authentication credentials.216。 Internet Information Services (IIS) creates the IUSR_putername account to authenticate anonymous users in response to a request for Web content. The IUSR_putername account, where putername is the name of the server that is running IIS, gives the user access to resources anonymously under the context of the IUSR account. You can reset anonymous user access to use any valid Windows account.216。 In a standalone environment, the IUSR_putername account is on the local server. If the server is a domain controller, the IUSR_putername account is defined for the domain.216。 By default, anonymous access is disabled by Office SharePoint Server 2007 when you create a new Web Application. This provides an additional layer of security because IIS rejects anonymous access requests before they can ever be processed by Office SharePoint Server 2007 if anonymous access is disabled.216。 Use the following procedures to enable anonymous access for a zone of a Web Application. Within each Web Application, you can categorize different classes of users into one of the following five zones:l Internet is the zone used for customers. Typically, the Internet zone is the only zone you would configure for anonymous access.l Intranet is the zone used for internal employees.l Default is the zone used for remote employees.l Custom is the zone used for administrators.l Extranet is the zone used for partners5. Anonymous User Policy1) 功能216。 編輯anonymous users針對不同zone所能具有的權(quán)限2) 位置216。 Central Administration Application Management Policy for Web Application Anonymous User Policy3) 實現(xiàn)：216。 Central Administration Application Management Policy for Web Application Anonymous User Policy216。 選擇Web Application216。 選擇不同的zone216。 指定permissions216。 點擊button：Save4) 值得指出的是：216。 Web application level的設(shè)置會影響到其下各個level，請慎重處理。六、 Content Database LevelContent Database權(quán)限更多涉及SQL的權(quán)限，本文不予討論。七、 Site Collection Level首先，需要說明本Level一般權(quán)限操作可查看本文第二部分SharePoint權(quán)限操作簡單說明其次，針對Site Collection Level較特殊的權(quán)限操作為大家進(jìn)行介紹。1. Site Collection Administrators1) 功能：216。 查看，設(shè)置 Site Collection Administrators2) 位置01：216。 Site Collection Site Settings Permissions Site Collection Administrators3) 位置02：Central Administration Application Management Site Collection administrators4) 實現(xiàn)：216。 Add Site Collection Administrator 01l Site actions Site Settings Site Collection administratorsl 填入符合認(rèn)證方式的User name【多個Users name中用分號隔開】l 點擊button：OK216。 Add Site Collection Administrator 02l Central Administration Application Management Site Collection administratorsl 更改site collectionl 填入primary site collection administrator和Secondary site collection administratorl 點擊button：OK216。 Remove Site Collection Administrator 01l Site actions Site Settings Site Collection administratorsl 直接刪掉User namel 點擊button：OK216。 Remove Site Collection Administrator 02l Central Administration Application Management Site Collection administratorsl 更改site collectionl 更改primary site collection administrator和Secondary site collection administrator或者去掉Secondary site collection administratorl 點擊button：OK5) 值得指出的是：216。 Site Collection administrators組內(nèi)成員不可以是Groups216。 該User會直接被賦予full control的權(quán)限，但不在site permissions中顯示216。 該User會直接添加到all people中，從all people中刪除該User，則直接從site collection administrators組內(nèi)刪除該Users。216。 Site Collection administrators不是system account6) 測試建議：設(shè)置site collection administrator，用該User做數(shù)據(jù)，查看DocAve對該數(shù)據(jù)的支持情況。2. Permission Levels1) 功能： 216。 添加，編輯，刪除Permission Level2) 位置：216。 Site Settings Permissions Permission Levels3) 實現(xiàn)：216。 Add a Permission Levell Site Settings People and groups Site Permissions Settings Permission Leve