Solved

Sharepoint 2010 Permissions Issue: Site Owners cannot edit site group permissions

Posted on 2011-03-21
11
1,558 Views
Last Modified: 2012-05-11
Hello,

We are experinencing an issue in our new Sharepoint 2010 Production environment.

In our environment we use a very simple security hierarchy, with each site consisting of an Owners (full control), Members (contribute), and Visitors (read) group. Everything has been moving along smoothly with site owners administering their various site group memberships until late last week some of our site admins reported that they have lost the ability to get into any of their site permissions groups to add or remove members.

Using their credentials I was able to re-create the error on my PC (see SP2010-Permission-error.jpg). The site owners permissions are configured correctly, and when I run a verify permission against the site it correctly recognizes that the user has full control delegated through the site Owners Group. Also the  groups themselves are owned by the Site Owners Group and just to be sure I gave ownership of these groups to a named site admin but still no luck.

As a site collection admin I can still access these groups without issue.

At this point I am a bit stumped and am curious if anyone has seen a similar issue in the past. Any help would be much appreciated.

  SP2010-Permission-error
0
Comment
Question by:dkirchhefer
  • 5
  • 3
  • 2
11 Comments
 
LVL 14

Expert Comment

by:KoenVosters
ID: 35186686
Have you checked if the rights of "Full Control" are correctly set? I once had a situation where the user could edit while having Read Rights, and we found out they added base permissions to the read right.
0
 
LVL 4

Expert Comment

by:G-Brain
ID: 35187160
Hi,
maybe there are some problems with the user profile sync.
Are your admins synchronized ?
Do you recieve the same error if you delete the profiles from the owners group and after that to reinstate them ?

0
 

Author Comment

by:dkirchhefer
ID: 35191781
Thanks for the help guys.

To KoenVosters: Yes I did check the "Full control" permissions, and it really does have every permission possible on that site.

To G-brain: I to looked at user profile sync, and actually forced a full sync with AD thinking this might resolve the issue, unfortunately it still persists. Also the issue persists after deleting and re-adding the users to the Site Owners Group.

Thanks for your help so far!
0
 
LVL 14

Expert Comment

by:KoenVosters
ID: 35196444
Have you checked the web application policies in Central Administration?
0
 
LVL 4

Expert Comment

by:G-Brain
ID: 35196498
Hi,
which authentication method do you have on your farm ?
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 

Author Comment

by:dkirchhefer
ID: 35222974
We use Kerberos authentication.
0
 
LVL 14

Expert Comment

by:KoenVosters
ID: 35223053
Did u check the policies?
0
 

Author Comment

by:dkirchhefer
ID: 35245576
Hello KoenVosters,

Sorry for the belated response, I really appreciate your help on this issue.

Just to make sure I understand what your asking, are you referring to "User Permissions for Web Applications" located under Web Applications-User Permissions? If so then yes I did check there and have included a screencast, everything is enabled as I would expect.

Thanks again for taking a look at this, I'm as stumped as ever.

 dkirchhefer-438273.flv
0
 

Accepted Solution

by:
dkirchhefer earned 0 total points
ID: 35316982
Ticket closed. I finally was able to resolv this issue and suprize suprize it was user error. One of our site collection admins installed a list permissions add-on for testing, and when it expired it blocked all permissions managment at the site level. It has now been removed and everything is functioning normally.

Thanks for your help.
0
 

Author Closing Comment

by:dkirchhefer
ID: 35356973
Solved my own issue.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Work Over Net is a new and very powerful collaboration product. With its new easy interface it is becoming very competitive to other similar products like webex and office interactive. WON 2010 have the standard business tools needed for multi-offic…
I thought I'd write this up for anyone who has a request to create an anonymous whistle-blower-type submission form created using SharePoint 2010 (this would probably work the same for 2013). It's not 100% fool-proof but it's as close as you can get…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now