Web application classic mode  to claims based ,broken permissions for groups

Posted on 2011-05-04
Last Modified: 2012-05-11
I have a simple web application initially done with classic authentication mode , latter on I went changed to claims based application from central administration. All the sharepoint security groups are broken. Some people do get access denied even though they have contributor rights.
Where  does access denied  user requests be logged. i did not see in 14 hive or
should i check in event viewer or iis 7logs.
I want to see all succesfull logs in SharePoint and access denied or permission denied issues.
Sharepoint 2010 , IISlogs.
Question by:Audi08
    LVL 6

    Accepted Solution

    You can use the fiddler web debugger tool to check where the access denied is coming from.
    LVL 1

    Author Comment

    is there no logging for access denied for users.
    where does successful  logging done as in if a user logs in successfully where is it logged in.
    there is no correlation id , no errors , only access denied. there is nothing in iis logs.  how can i tell if a users logs to sharepoint site or not via logs. i check the wss loggin database view i can find some trafic, but real time how can we see what is happenning.
    LVL 1

    Author Comment

    I downloaded fillder , show i run from my client or install on the server. how can i see how a user x is denied permissions.
    LVL 1

    Author Comment

    Users cannot log on. You may find that users cannot log on to the site.  After entering your credentials, you may be notified that you are the domain\user, but that you do not have access rights. If you see this message, it is likely that you have configured the portalsuperuseraccount property and the portalsuperreaderaccount property of the web application prior to migration. You must update them to use the new claims-based account name. You can get the new claims-based account name by looking at the web application policy for the web application after migration; copy the account name from there.
    what is the meaning of the above sentense.
    i changed claims from classic from central admin . is there some thing else i need to do aditionally.
    why are some users getiing acces denied to some sub sites . but thety are able to see some parts of the portal. so it i snot iis issue. it is sharepoint issue only. what is the correct process of converting classic to claims from central admin?any pointer is appreciated


    Assisted Solution

    If you go into Central Admin and your web app now shows that the Authentication is Claims then you need to run this from powershell to migrate the users and have them updated to claims based

    LVL 1

    Author Closing Comment


    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    I recently came across an issue with a MOSS 2007 deployment where access into some sub-sites were denied, even for the MOSS farm administrators. A bit of background to the setup of this MOSS farm; this was a three server setup, consisting of a fr…
    These days socially coordinated efforts have turned into a critical requirement for enterprises.
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now