Link to home
Start Free TrialLog in
Avatar of jmjstevens
jmjstevens

asked on

Documents Open Read-Only - Office XP & SharePoint 2007

Environment:
Two networks: Client and Internal.  
SharePoint 2007 Server, reachable over the Internet.
Office XP SP3, fully patched, and IE6, fully patched, on all client PCs.  

Symptoms:
When users go to a SharePoint Document Library and click "Edit in Microsoft Excel" or "Edit in Microsoft Word", the document comes up "Read Only".
This only happens on the CLIENT network.  Never happens on the Internal network.
The client network is behind a number of firewalls and at least one proxy between it and the Internet. I have no control nor do I even really have a clear understanding of their network configuration.  No support from the client will be given for this; we have to deal with it as is.
The FQDN of the SharePoint server is entered as a Trusted Site on all systems, on both networks.

In addition:
Users on the client network receive a popup error in Word when they try to Edit in Microsoft Word from SharePoint Document Libraries.  The error is:

Microsoft Visual Basic
Run-time error '1177'
The document name or path is not valid.
Try one or more of the following:
"      check the path to make sure it was typed correctly
"      On the File menu, click Open. Search for the file using this dialog box

This occurs only when Word is the default email editor in Outlook.

We have taken precisely the same computer and moved it from the Client network to the Internal network, and the problem disappears.  The only change to the PC when moved to the other network is that the Client network uses fully routable static IP addresses, even for client PCs, and our Internal network uses DHCP non-routable IP addresses.

One last bit of information: even if the system is upgraded to Office 2003, the Read-Only problem does continue to occur, despite the solutions given in http://support.microsoft.com/kb/870853, which only apply to Office 2003.  The Run-Time 1177 error goes away.  Nevertheless, http://support.microsoft.com/kb/826888, which is the only Microsoft Knowledge Base article I can find which references the Run-Time 1177 error, addresses Office 2003.  Weve tried what is recommended anyway, but to no avail.
Avatar of Ted Bouskill
Ted Bouskill
Flag of Canada image

The reason is that NTLM (Windows Authentication) cannot be relayed.  IE: It all has to be on the some network.  By going through the firewalls, the NTLM authentication cannot be passed through the firewall.

The trust relationship doesn't matter.  It's simply that NTLM cannot relay authentication.

They have to download the document locally, edit it and then upload it again. (I think that is the only way to do it)
Avatar of jmjstevens
jmjstevens

ASKER

Actually, it turned out that there is a setting in IE that resolves the issue.  If you go into the Security Zones, add the site in question to your Trusted Sites, then change the Secuirty settings for that zone, it will work.  The setiing in question must be "Automatic Logon with the current user name and password."

BTW, I don't think you mean "NTLM", but IWA, Integrated Windows Authentication.  And it can be relayed, because the user was able to get onto the site in the first place.  Further, the document in question is on the same site as the sharepoint site itself, so there would be no relaying from one server to another, much less one network to another.
Admin, please close the issue.
I believe I asked above that the Admin close the issue.
ASKER CERTIFIED SOLUTION
Avatar of Computer101
Computer101
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial