Solved

User Access Issues SharePoint 2010 Foundations

Posted on 2011-02-12
3
662 Views
Last Modified: 2012-05-11
We have a SharePoint Foundations site running on Windows 2008R2. We have some strange things happening around permissions/access. Users who could access the site before can no longer. If I go into Web Applications Management from the Central Admin and add a user under User Policy they can then access the site, but the entire site, which is not what we want, but at least they can now access the site.

The strange part is that if I add a new user to Active Directory and then add them to a SP group such as "Team Site Members" they can access the site fine. But any existing user in that same group gets access denied, even if I delete and re-add them to the group.

We did have an issue regarding our Active Directory where it had to be restored, so I think this is somehow related but SP sees the users just fine, seems to add the to groups fine, resolves their names when adding users.

I can't seem to find any logs that point to what is happening when a user gets "Error: Access Denied"

So basically the only way a user can access a site that they used to be able to is if I add them under "User Policy" from Central Admin, Web Applications Management.

Any ideas?
0
Comment
Question by:CANLLC
  • 2
3 Comments
 
LVL 9

Accepted Solution

by:
irinuc earned 500 total points
ID: 34885901
Hi,

from what you explained, it looks to me like it is very possible to be caused by the Active Directory restore.
As a test, you could try and delete an existing user at site collection level (from people and groups) and then try to re-add him in the desired groups.
I suspect that the user GUIDs have changed, so this is why only deleting a user from a group and adding him back would not be sufficient - user needs to be deleted from the entire site collection, so that is added with the proper IDs.
If after this test user is able to access the site as expected, then this is definetelly the cause.

Hope this helps
0
 

Author Comment

by:CANLLC
ID: 34903858
Thanks. That did it. I removed them as you said from the site collection level and re-added them and they now have access.
0
 
LVL 9

Expert Comment

by:irinuc
ID: 34904259
Glad to hear this worked.
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Note:  There are two main ways to deploy InfoPath forms:  Server-side and directly through the SharePoint site.  Deploying a server-side InfoPath form means the form is approved by the Administrator, thus allowing greater functionality in the form. …
I recently came across an issue with a MOSS 2007 deployment where access into some sub-sites were denied, even for the MOSS farm administrators. A bit of background to the setup of this MOSS farm; this was a three server setup, consisting of a fr…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now