| |||||
| |||||
Every Web site has users, and part of your job as administrator is to make sure that the users of a Web site have the appropriate rights to use the site. To grant access to a site, users must be added to the site (either individually or as part of a cross-site group) and assigned to a site group. In Microsoft Windows SharePoint Services, users and cross-site groups can be added by using one of two modes:
You determine which mode to use when you first install and configure Windows SharePoint Services, and you cannot switch between modes later. Whichever mode you use, you can add users and cross-site groups to your site by using either the command-line tool or HTML Administration pages for your Web site.
If you are using Windows SharePoint Services inside an organization that uses Microsoft Windows domain accounts, you can use domain account mode for user and cross-site group accounts. With domain account mode, you add users and cross-site groups to your site by using their existing domain account information, including their user names and e-mail addresses. Domain account mode is the standard mode for Windows SharePoint Services. Note that you can use the Active Directory directory service to manage domain accounts — the difference between the modes is the type of account that you use, not the tool that you use to manage them.
If you host Web sites based on Windows SharePoint Services for customers on the World Wide Web, you can configure Windows SharePoint Services to automatically create Active Directory directory service accounts for new users and cross-site groups. You must enable Active Directory account mode when you first configure Windows SharePoint Services. When you use Active Directory account mode, you cannot use domain accounts.
Creating users and cross-site groups with Active Directory account mode is the same as creating users with domain account mode, except that you enter only the e-mail address, not a domain account, when adding the user or cross-site group to a site. Windows SharePoint Services checks Active Directory to see if an account with that e-mail address already exists. If the user or cross-site group already has an account in Active Directory, the account is used. If the user or cross-site group is new, an account is created for the user or group in Active Directory, using the Windows SharePoint Services credentials; the users are then notified of their account name and password through e-mail.
Notes