SharePoint: Howto disable editing sites with SharePoint Designer

I just saw this Microsoft KB here. This is very interesting – prevent users from using SharePoint Designer to modify your site!

To quote the exact article, it details steps you can undertake to prevent users from changing a Windows SharePoint Services 3.0 site or a SharePoint Server 2007 site by disabling the authoring feature in SharePoint Designer 2007.

All you have do is edit the Onet.xml file.

By default, the Onet.xml file for Windows SharePoint Services 3.0 and for SharePoint Server 2007 is in the following folder:

\Program Files\Common Files\Microsoft Shared\Web Server Extensions\12\TEMPLATE\SiteTemplates\<Service>\xml

Note Replace the <Service> placeholder with the name of the Windows SharePoint Service that is installed on the server.

On the server that is running Windows SharePoint Services 3.0 or SharePoint Server 2007, locate the site template that you want to modify. Site templates are located in the following folders on the server:

•SharePoint Team Site: Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extentsions\12\Template\LangID\STS\XML.

•Meeting Workspaces: Drive:\Program Files\Common Files\Microsoft Shared\Web Server Extentsions\12\Template\LangID\MWS\XML

Note Replace the Drive placeholder with the drive where Windows is installed. Replace the LangID placeholder with the language version of Windows SharePoint Services 3.0 that is installed on the server.

2.Right-click the Onet.xml file, click Open With, and then click Notepad.

3.Locate the Project Title tag, and then add the following line:

DisableWebDesignFeatures=wdfopensite

Then, click Save.
The complete Project Title tag is as follows:

<Project Title=”Team Web Site” ListDir=”Lists” xmlns:ows=”Microsoft SharePoint” DisableWebDesignFeatures=wdfopensite>

4.Restart Internet Information Services (IIS). To do this, follow these steps:

a.Click Start, click Run, type cmd, and then click OK.

b.At the command prompt, type iisreset computer_name /restart, and then press ENTER.
Note Replace the computer_name placeholder with the name of the computer that is running IIS.

After you follow these steps, users who try to open a site that is based on the site template that has the DisableWebDesignFeatures=wdfopensite attribute will receive the following message:

This web site has been configured to disallow editing with FrontPage. Contact your web site administrator for more information

By default, if you try to change a Windows SharePoint Services 3.0 site or a SharePoint Server 2007 site by using Microsoft Office FrontPage 2003, you receive the following error message:

Web Site Editing is Disabled. This web site has been configured to disallow editing with FrontPage. Contact your web site administrator for more information.

Source | Microsoft KB

6 Replies to “SharePoint: Howto disable editing sites with SharePoint Designer”

  1. Thanks for the link and explanation, Alpesh. While we can disable SharePoint Designer access for ALL users, we find ourselves in the interesting spot of wanting to grant it to SOME. Put another way, we want to control, possibly through an Active Directory group, who can use SharePoint Designer to edit a site. We want to lock out most people but allow some people that extra level of authority. I’m posting this comment here to see if you or your readers have any tips. Cheers!

  2. This is great. However, does anyone know how to disable use for a group of people while allowing access to a few?

    I would like to disable access to all users with the exception of 2 administrators. Is this possible?

    thanks!

    Bryan

Comments are closed.