简体繁体 English

在Sharepoint中管理用户

[英]Managing users in Sharepoint

原文 2009-12-07 11:58:23 4 4 sharepoint

Is the best (or only) way for managing users in MS Sharepoint Active Directory? 是在MS Sharepoint Active Directory中管理用户的最佳（或唯一）方法吗？

I'm studying, and i have been buiding a little project to learn, and i'm using active directory to manage my dummy users, but it doesn't seem like a very practical way for doing so. 我正在学习，并且我一直在建立一个小项目来学习，并且我正在使用活动目录来管理我的虚拟用户，但这似乎不是一种非常实用的方法。

4 个解决方案

However, in organizations with thousands of users, it's more realistic to add Active Directory security groups to a SharePoint site group. 但是，在具有数千个用户的组织中，将Active Directory安全组添加到SharePoint网站组更为现实。 This not only reduces administrative overhead when you first set up a site, but also means the site's membership stays up-to-date as new users join or leave the organization. 这不仅减少了您首次建立网站时的管理开销，而且还意味着当新用户加入或离开组织时，该网站的成员资格保持最新。 As you add users to the Active Directory security group, they are automatically assigned to the SharePoint site group that has been associated with the security group 当您将用户添加到Active Directory安全组时，它们会自动分配给已与该安全组关联的SharePoint网站组。

You can provide authentication to SharePoint via something other than Active Directory if you're willing to write an authentication provider. 如果愿意编写身份验证提供程序，则可以通过Active Directory以外的其他方式向SharePoint提供身份验证。

Given that you're learning, and writing a provider is an exercise in itself, I think the built in solution using the domain is your best bet. 考虑到您正在学习，编写提供程序本身就是一种练习，我认为使用该域的内置解决方案是您的最佳选择。 Until you are comfortable with the rest of SharePoint, I wouldn't attempt to craft an auth provider for it. 在您对SharePoint的其余部分感到满意之前，我不会尝试为其设计身份验证提供程序。

SharePoint does allow Forms Based authentication so you can use SQL groups ... this isn't very practical in terms of Enterprise usage though. SharePoint确实允许基于表单的身份验证，因此您可以使用SQL组...不过就企业使用而言，这不是很实际。 SharePoint is an Enterprise Collaboration Platform. SharePoint是一个企业协作平台。 It is not very good nor does it provide a registration type mechanism. 它不是很好，也不提供注册类型机制。 But for sample purposes you can change it to use forms based auth and manage users using the built in ASP.NET management tools. 但是出于示例目的，您可以将其更改为使用基于表单的身份验证，并使用内置的ASP.NET管理工具来管理用户。

FYI ... Active Directory groups and SharePoint groups are different things. 仅供参考... Active Directory组和SharePoint组是不同的东西。

SharePoint Groups vs. Active Directory Groups SharePoint组与Active Directory组

I think you have to use both SharePoint groups and Active Directory groups. 我认为您必须同时使用SharePoint组和Active Directory组。

Active directory groups work well in instances where you want to give access to a large number of users (like Authenicated Users) or to groups that already exist, such as the Marketing group. 在要授予大量用户（例如Authenicated Users）或现有组（例如Marketing组）访问权限的实例中，Active Directory组效果很好。

SharePoint groups work well for granting access to a small group of users who don't share a common Active Directory group. SharePoint组可以很好地为不共享公共Active Directory组的一小群用户授予访问权限。

In either case, it's a best practice to add users to groups first, then apply the group permissions to the resources on your site. 无论哪种情况，最佳做法都是先将用户添加到组中，然后将组权限应用于站点上的资源。