Tuesday, August 12, 2008

Disabling MySite option or Restricting it for specific users

Based on our project design, there won't be any personalization features for the users. I was checking with the various options available in Central admin and Shared service provider, here is the settings for doing that.

We need the administrator login to do the below settings changes.

1. Login to the central admin
2. Select the appropriate Shared Service Provider from the Left navigator
3. Click on the "Personalization services permission" link under the "User Profiles and MySites" section
4. Select the Group Name which contains the users to be restricted for "MySite" option, most probably this should be NT AUTHORITY\Authenticated Users and click on "Modify Permissions of Selected Users"
5. UnCheck the "Create Personal Site" Option (For disabling MySite)
6. UnCheck the "User Personal features" Option (For disabling MyLinks)
7. Click on the Save Button.

If you would like to give the MySite option to specific users follow the below steps,

1. Make sure the users need "MySite" option are organized via a active directory group.
2. Select the "Personalization services permission" link under the "User Profiles and MySites" section.
3. Click on the Add Users/Groups
4. Give the active directory group Name

Note:
  • We can also add User Names here but its not going to be scalable and will not be a good design.
  • Usually in a MOSS project the authorization part is done based on SharePoint Security groups, In most of the cases these groups will be mapped with an active directory account group.So we can easily select a share point security group to fit with this requirement and give that group's active directory mapping here.
  • 5. Select the "Create Personal Site" Option (For disabling MySite)
    6. Select the "User Personal features" Option (For disabling MyLinks)
    7. Click on the Save Button.

    No comments: