MOSS 2007 site permissions

Published on
11,114 Points
3 Endorsements
Last Modified:
Community Pick
Adrian McGarry
Information is at the heart of my experience in IT, with over 20 years as a Data Protection Officer.
I recently came across an issue with a MOSS 2007 deployment where access into some sub-sites were denied, even for the MOSS farm administrators.

A bit of background to the setup of this MOSS farm; this was a three server setup, consisting of a front-end MOSS web server, back-end SQL 2005 server and server system containing search, indexing, single sign-on, amongst other back-end MOSS services.

The farm administrator had attempted to access one of the sites in question, receiving an "Access Denied" page, then attempted to change permissons to the site by accessing the site with a farm administrator account, still receiving an "Access Denied" message.  The predicament was further exacerbated as the primary administrator of the site, had left the organisation and account had been deleted many months prior.  The administrator had attempted to visit "/_layouts/mngsiteadmin.aspx" for the site, which will show the admins for a site. If only one admin has access they can add more admins and save, but in this instance was still receiving an "Access Denied" page.

The tip to solving this issue is to alter the site collection administration, from the MOSS Central Administration website.  This can be achieved as follows:

1.       Go to MOSS Central Administration as a farm administrator

2.      Navigate to Application Management

3.       Under “SharePoint Site Management”, you will find “Site Collection Administrators”

 Site Management
4.       The important point to remember here is to change the site collection by clicking on the “Site Collection:” drop-down field

 Site Collection drop downWhich will display a URL search, where you must follow this search rule; Append either “/personal/” or “/Sites/” before entering the username or department name you are denied access from, and press “OK”

 Sites URL search
5.       This will place you back in the “Site Collection Administrators” screen, where you can now change the primary and secondary administrator;
 Site Collection Administrators screen6.      Next you can now navigate to the site in question
7.       Go to the “Site Actions” and select “Site Settings"
 Site Settings8.       From this page you will be able to control the function, permissions and everything for this site and its’ sub-sites, so in this example you will now be able to add more site collection administrators, then select OK.
 Add more site collection administrators9.       You can and should also alter the “viewers” for this site in the permissions, as appropriate to the site.

Problem solved!


Featured Post

Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

Join & Write a Comment

When you have multiple client accounts to manage, it often feels like there aren’t enough hours in the day. With too many applications to juggle, you can’t focus on your clients, much less your growing to-do list. But that doesn’t have to be the cas…
From store locators to asset tracking and route optimization, learn how leading companies are using Google Maps APIs throughout the customer journey to increase checkout conversions, boost user engagement, and optimize order fulfillment. Powered …

Keep in touch with Experts Exchange

Tech news and trends delivered to your inbox every month