I've done this before - create a user permission template for setting up the
user in the AD that only has access to the SharePoint site.

In the past, I've created a new user permission template and make the user
only a member of STS_WPG security group. Then built them as a user in the
SharePoint site. It works great.

However, I have a system I cannot find the STS_WPG group under Security
Groups in Server Management. The group STS_WPG does show up under ADUC in the
Users folder.

How do I bring it up to the Security Groups in order to build a new
permissions template?

Hope this makes sense.

Thanks,
Melinda

Hi Melinda,

Thank you for posting in SBS newsgroup.

I am sorry for the delayed response due to weekend. Please understand that
the newsgroups are staffed weekdays by Microsoft Support professionals to
answer your systems and applications questions. Your understanding is
greatly appreciated!

From the description, I understand the issue to be: you can not find the
STS_WPG group under Security Groups in Server Management and it does show
up under ADUC. If I have misunderstood your concerns, please do not
hesitate to let me know.

I have checked on SBS and find STS_WPG group does not show up under
Security Groups but only show up under Users of ADUC actually.

You said "I've created a new user template and make the user only a member
of STS_WPG security group", do you mean you have done as following:

1. Open Server Management and then click User Templates.
2. Click Add a template and then click Next.
3. Type the name and then click Next.
4. The STS_WPG security group will list in the All security groups.

If so, I also can not find the option based on many tests.

As I know, if you only want to let some users access companyweb and get
nothing else, you can do as following:

1. Open Active directory Users and Computers from Administrative Tools.
2. Expand Server name and then right click Users.
3. New a User and do not create mailbox for him.
4. Right click the user and select Properties.
5. In Remote control tab deselect Enable remote control.
6. In Dial-in tab, select Deny access.
7. Click OK.
8. Open companyweb and click Site Settings.
9. Click Manage Users on Administration column.
10. You can add the user and assign permission to him.
11. You need to publish companyweb and then these users can access
companyweb using [url down] in IE.

If you have any questions or concerns related to this issue, please do let
me know.

I appreciate your time and look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - [url down]

================================================== ===
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
[url down]

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check [url down] for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

================================================== ===

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Create SharePoint AD Template for External Users
|| From: =?Utf-8?B?TWVsaW5kYQ==?= <Melinda>
| Subject: Create SharePoint AD Template for External Users
| Date: Fri, 10 Mar 2006 10:56:29 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
||
| I've done this before - create a user permission template for setting up
the
| user in the AD that only has access to the SharePoint site.
|
| In the past, I've created a new user permission template and make the
user
| only a member of STS_WPG security group. Then built them as a user in the
| SharePoint site. It works great.
|
| However, I have a system I cannot find the STS_WPG group under Security
| Groups in Server Management. The group STS_WPG does show up under ADUC in
the
| Users folder.
|
| How do I bring it up to the Security Groups in order to build a new
| permissions template?
|
| Hope this makes sense.
|
| Thanks,
| Melinda
|