Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

PWA Access denied

Posted on 2010-11-23
14
Medium Priority
?
1,265 Views
Last Modified: 2012-05-10
Hello Experts,

I created new user (AD account)  in Project server 2007 using server setting -> Manager user. I have selected windows authetication option & added to administrator group. When i try to login to windows box using that new user account and access the PWA from IE i get following error message "Error: Access Denied "

Please help.
err2.jpg
0
Comment
Question by:sudhirgoogle
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
14 Comments
 
LVL 4

Expert Comment

by:Kimmyel
ID: 34195868
Verify that the user exists in AD and is enabled
0
 
LVL 1

Author Comment

by:sudhirgoogle
ID: 34195919
yes the user exist in ad and i am able to login to windows using that id.
0
 
LVL 35

Expert Comment

by:Bembi
ID: 34225256
Can you login on the same machine with a different account?
If you cannot logon in general, it may be just a browser (authentication) setting. Dependend from your settings in MSPS, you may try to disable "Integrated windows authentification" (what means Kerberos) in IE.

If you cannot login only with your new account, but can login with an older account, make sure, the user is at least team member and the windows user name in Resource center is set correctly (i.e. MyDomain\MyUser) and that the account setting there is correct.

That you can logon into windows does not mean, that the account is set correctly in project server.

See if you have errors in the queue, especially if you create such a user.
0
NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

 
LVL 1

Author Comment

by:sudhirgoogle
ID: 34230908
Yes I am able to login on the same machine with different account.

I am not able to login only with new account and i am able to login with older account.
Yes the user has at least team member and the windows user name set correctly in resource center.
0
 
LVL 15

Expert Comment

by:Greg Besso
ID: 34234559
Which groups did you add the user to? In Project Server 2007 there are more than one type of admin. There are the built-in WSS/MOSS security groups, and then there are the Project Server 2007 roles.

Log back in as the other user and verify where this user has access. Do this in both Server Settings, and Site Actions > Site Settings.
0
 
LVL 1

Author Comment

by:sudhirgoogle
ID: 34248635
I have add him to "Project Managers" group and i can see that "My organization" category is linked.
0
 
LVL 35

Assisted Solution

by:Bembi
Bembi earned 2000 total points
ID: 34275764
Can you sign in with an account, which belongs to the same user group?

a.) There is a global permission under "General" --> "Log on", which is necessary to logon in general, set by default for all groups.  

b.) There is a global permission under "General" --> "Log on to Project Server from Project Professional", which is set by default for Project Managers group.

These settings should not denied in any other group, the user is member in.

c.) Within the user properties on Project Server Web-Access, there is an additional checkbox "Ressource can logon to project server"

Categories has nothing to do with logon permissions, and users should not be directly associated with a category. The categories are associated to user groups.
0
 
LVL 1

Author Comment

by:sudhirgoogle
ID: 34292823
Sorry for delay in response. The answer is yes to all your above questions.
I believe the problem is due to failed tasks in the queue. Please take a look at attached snapshot.

How do i clear this queue. I have around 142 tasks in the queue. I tried restarting the queue service and restarting the EPM server several times but it didn't work. Most of the task were in "Failed and Blocking correlation" state.

Please help.
queue.JPG
0
 
LVL 1

Accepted Solution

by:
sudhirgoogle earned 0 total points
ID: 34300582
I followed below steps to clear the queue. Now the queue is empty but still facing same problem. Please help.

1. Launch Services.msc
2. Stop the Project Queue Service
3. Stop the SharePoint Timer Service
4. Start the SharePoint Timer Service
5. Start the Project Queue Service
0
 
LVL 35

Assisted Solution

by:Bembi
Bembi earned 2000 total points
ID: 34304537
The point is not to clear the queue, the question is, why the queue fails in a blocking state, which stops all subsequent actions.

At the end of the line of the queue, there is a link to an error description. This is a little bit cryptic, but gives hints to the reason. Usually one of the last actions has something to do with this.

A common mistake is the fact, that (not only) user names are used within SQL queries. This means in fact, that all kinds of special characters (including commas etc.)  in object names (like resource names, field names etc. are a source of failure. All these names shoudl only contain regular characters.  If such special characters get part of a sql query, the query text may get invalid and results into a blocking situation, what means, that all subsequent query jobs are stopped.
0
 
LVL 1

Author Comment

by:sudhirgoogle
ID: 34447597
Hello Bembi,

Thank you very much for your solution. It helped me to understand different causes for the issue.
Answer is here..
After clearing all the tasks in queue that were in blocked state resolved my problem.

Thanks for your support experts.
0
 
LVL 1

Author Closing Comment

by:sudhirgoogle
ID: 34470555
I followed below steps to clear the queue. Now the queue is empty but still facing same problem. Please help.

1. Launch Services.msc
2. Stop the Project Queue Service
3. Stop the SharePoint Timer Service
4. Start the SharePoint Timer Service
5. Start the Project Queue Service
0

Featured Post

[Webinar] Lessons on Recovering from Petya

Skyport is working hard to help customers recover from recent attacks, like the Petya worm. This work has brought to light some important lessons. New malware attacks like this can take down your entire environment. Learn from others mistakes on how to prevent Petya like worms.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

"Disruption" is the most feared word for C-level executives these days. They agonize over their industry being disturbed by another player - most likely by startups.
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
Viewers will learn the different options available in the Backstage view in Excel 2013.
The viewer will learn how to create a normally distributed random variable in Excel, use a normal distribution to simulate the return on an investment over a period of years, Create a Monte Carlo simulation using a normal random variable, and calcul…

661 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question