title: Denying permissions by default in WSS 3.0
body: <p>Windows 2003-32bit
  IIS6
  WSS 3.0 (No MOSS Installation)</p>
  
  <ol>
  <li>WSS is installed on the Domain Controller (Active Directory). (Not something I did or would do!)</li>
  <li>WSS is set to NOT allow anoymous access BUT it was at some other time in the past.</li>
  <li>SSL has been installed and the Web Site on a different website than the original WSS Site when the application was created.</li>
  </ol>
  
  <p>ISSUE:
  1. I create a user in AD on the machine.
  2. I DO NOT added that user to SharePoint.
  3. I can log into SharePoint with that user and see the Top Site and 1 of the sub-sites, but none of the other sub-sites.  </p>
  
  <p>QUESTION:
  How do I make it so that no user can log on and see anything unless they have been added to the web application?</p>