How to set up a restricted-access Web site in SharePoint Designer 2007

This article describes how to set up a restricted-access Web site in Microsoft Office SharePoint Designer 2007.

A restricted-access Web site is a Web site that can be viewed by specific users only. You can use SharePoint Designer to restrict a whole Web site. However, you cannot use SharePoint Designer to restrict separate pages, sections, or folders in a Web site.

To set up a restricted-access Web site in SharePoint Designer, you must configure the subsite to use unique permissions. Then, you must grant access permissions to the users who you want to be able to access the subsite. You can restrict access to a root Web site. However, restricted access is typically set up on a subsite that has unique permissions.

A subsite is a Web site that is nested inside another Web site. By default, all subsites inherit the same permissions as their parent Web sites. However, you can set unique permissions for subsites. Each subsite can have its own set of permissions. These permissions specify who can browse, author, or administer the subsite. You can also set up individual subsites that have different levels of permissions and different groups of users.

How to use SharePoint Designer to create a new subsite

Use one of the following methods to create a new subsite in SharePoint Designer.

Method 1: Create a new subsite by using a wizard or a template

1. On the File menu, point to New, and then click Web Site.
2. In the New task pane, click the type of Web site that you want to create.
3. In the Specify the location of the new Web site box, type a new Web location. For example, type http://server_name in the Root Web box. And, type http://server name/subsite name in the Subsite box. Or, select a location from the list of available choices. Then, click OK.

Method 2: Use SharePoint Designer to convert a folder to a subsite

1. Start SharePoint Designer.
2. On the File menu, click Open Site.
3. In the Look In list, locate the Web site that you want to open, and then click Open.
4. In the Folder List, right-click the folder that you want to convert to a subsite, and then click Convert to Web. If you are prompted to confirm the conversion, click Yes.

Method 3: Use SharePoint Designer to import a Web site into a folder, and then convert the folder into a subsite

1. Start SharePoint Designer.
2. On the File menu, click Open Web.
3. In the Look In list, click the Web site into which you want to import the subsite, and then click Open.
4. On the File menu, point to Import, and then click File.
5. In the Import dialog box, click either Add File, Add Folder, or From Site.
6. In the Look In box, click the folder or the Web site that you want to import, and then click Open.
7. Convert the folder to a subsite by using the steps that are described in the "Method 2: Use SharePoint Designer to convert a folder to a subsite" section.

For more information about how to create a subsite, click the following article number to view the article in the Microsoft Knowledge Base:

How to use IIS Manager to create a subsite

You can use the Internet Information Services (IIS) Manager snap-in in Microsoft Management Console (MMC) to create a subsite. To do this, use one of the following methods.

Method 1: Use IIS Manager to create a new restricted-access subsite

1. Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. Expand Your_Server_Name/Web Sites, and then expand the Web site that you want to use.
3. Right-click the Web site that you want to make a subsite, point to New, and then click Server Extensions 2002 Web.
4. On the Create a Subweb page, type a name for the subsite in the Name box, and then click Submit.
5. On the Web site Administration for "Your_Web_Site" page, click Change subweb permissions in the Users and Roles area.
6. Click Use unique permissions for this Web site, and then click Submit.
7. Click Administration to return to the Administration page, and then click Manage Users.
8. Grant users permissions to access the subsite. To do this, follow these steps:
   1. Click Add a User.
   2. In the User area, create a new account. Or, add an existing user account.
   3. In the User Role area, select a role for the user who you are adding, and then click Add User.
   4. Repeat steps 8a through 8c for each user to whom you want to grant permissions to access the restricted-access subsite.
9. Click Administration to return to the Administration page, and then click Change anonymous access settings.
10. On the Change anonymous access settings page, click Off, and then click Submit.

Method 2: Use IIS Manager to convert a folder in a Web site to a restricted-access subsite

1. Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. Expand Your_Server_Name/Web Sites, and then expand the Web site that you want to use.
3. Right-click the folder that you want to convert to a SharePoint Designer-extended subsite, point to All Tasks, and then click Configure Server Extensions 2002.
4. On the Create a Subweb page, type a name for the subsite in the Name box, and then click Submit.
5. On the Web site Administration for "Your_Web_Site" page, click Change subweb permissions in the Users and Roles area.
6. Click Use unique permissions for this Web site, and then click Submit.
7. Click Administration to return to the Administration page, and then click Manage Users.
8. Grant users permissions to access the subsite. To do this, follow these steps:
   1. Click Add a User.
   2. In the User area, create a new account. Or, add an existing user account.
   3. In the User Role area, select a role for the user who you are adding, and then click Add User.
   4. Repeat steps 8a through 8c for each user to whom you want to grant permissions to access the restricted-access subsite.
9. Click Administration to return to the Administration page, and then click Change anonymous access settings.
10. On the Change anonymous access settings page, click Off, and then click Submit.

How to use SharePoint Designer to configure unique permissions for the subsite

If the Web server is running Microsoft FrontPage 2002 Server Extensions, use one of the following methods.

Method 1: Use SharePoint Designer to configure unique permissions for the subsite

1. Start SharePoint Designer, and then open the subsite.
2. Click Site, point to Administration, and then click Permissions.
3. On the Permissions Administration page, click Change permissions.
4. Click Use unique permissions for this Web site, and then click Submit.
5. Click Administration.
6. On the Web site Administration for "Your_Web_Site" page, click Manage Users in the Users and Roles area.
7. Grant users permissions to access the subsite. To do this, follow these steps:
   1. Click Add a User.
   2. In the User area, create a new account. Or, add an existing user account.
   3. In the User Role area, select a role for the user who you are adding, and then click Add User.
   4. Repeat steps 7a through 7c for each user to whom you want to grant permissions to access the restricted-access subsite.
8. Click Administration to return to the Administration page, and then click Change anonymous access settings.
9. On the Change anonymous access settings page, click Off, and then click Submit.

Method 2: Use SharePoint Designer to configure unique permissions for the root Web site

1. Start SharePoint Designer, and then open the root Web site that contains the subsite.
2. Click Site, point to Administration, and then click Administration Home.
3. On the Web site Administration for "Your_Web_Site" page, click the name of the subsite in the Subwebs area.
4. In the Users and Roles area, click Change subweb permissions.
5. Click Use unique permissions for this Web site, and then click Submit.
6. Click Administration to return to the Administration page, and then click Manage Users.
7. Click to select the check box next to any user name that you want to remove, and then click Remove selected user(s) from all roles.
8. Grant users permissions to access the subsite. To do this, follow these steps:
   1. Click Add a User.
   2. In the User area, create a new account. Or, add an existing user account.
   3. In the User Role area, select a role for the user who you are adding, and then click Add User.
   4. Repeat steps 8a through 8c for each user to whom you want to grant permissions to access the restricted-access subsite.
9. Click Administration to return to the Administration page, and then click Change anonymous access settings.
10. On the Change anonymous access settings page, click Off, and then click Submit.

How to use SharePoint Designer to create a restricted-access subsite on a Microsoft Windows SharePoint Services Web site

To create a Windows SharePoint Services subsite, use SharePoint Designer to create the subsite. Then, publish the subsite on a server that is running Windows SharePoint Services. To do this, follow these steps.

Step 1: Create a Windows SharePoint Services subsite

1. Start SharePoint Designer.
2. On the File menu, point to New, and then click Web Site.
3. In the New task pane, click SharePoint Templates, and then click a template.
4. In the Specify the location of the new Web site box, type the location of the Windows SharePoint Services server. Make sure that you include the subsite folder.
   
   Alternatively, click Browse, locate the Windows SharePoint Services server, and then add a subsite folder. For example, the location of the subsite may resemble the following site:
   http://Your_Server/sites/Your_Windows_SharePoint_Services_server/Your_New_Subsite
5. Click OK.

Step 2: Restrict access to the Windows SharePoint Services subsite

1. Start SharePoint Designer, and then open the Windows SharePoint Services subsite.
2. Click Site, point to Administration, and then click Administration Home.
3. On the Site Settings page, click Manage permission inheritance.
4. Click Use unique permissions, and then click OK.
5. On the Site Settings page, click Manage Users.
6. Click to select the check box next to any user name that you want to remove, and then click Remove selected user(s) from all roles.
7. Grant users permissions to access the subsite. To do this, follow these steps:
   1. Click Add a User.
   2. In the Step 1: Choose Users area, type the e-mail address or the user name of the users who you want to add. Or, type the name of one or more cross-site group names.
   3. In the Step 2: Choose Site Group area, select a role for the user or the users who you are adding, and then click Next.
   4. In the Step 3: Confirm Users area, type the requested confirmation information in each box.
   5. In the Step 4: Send E-mail area, click to select the Send the following e-mail to let these users know they've been added check box if you want to send an e-mail message to inform the users that they can access the site.
   6. Click Finish.

For more information about how to set up a restricted-access Web site in Microsoft FrontPage 2002, click the following article number to view the article in the Microsoft Knowledge Base: