ashg_lukasz
asked on
Sharepoint - user logon problems
Hi,
I have the following issue with one of my user account while accessing a Sharepoint.
One of the domain user can access Sharepoint on any PC in our office, however is having a problem accessing Sharepoint on one particular PC. Any other domain users can access Sharepoint on this PC. So lets say if I log in with my account details "A" to PC1 I can access http://sharepoint (our local server) but user "B" can't open http://sharepoint while logged in to PC1.
I have tried to troubleshoot above problem but with no luck. I flushed DNS on this specific computer, I have removed user profile and added it again. I removed this workstation from domain and joined again.
Any idea what could be wrong?
Thanks for help and advice,
Lukasz
I have the following issue with one of my user account while accessing a Sharepoint.
One of the domain user can access Sharepoint on any PC in our office, however is having a problem accessing Sharepoint on one particular PC. Any other domain users can access Sharepoint on this PC. So lets say if I log in with my account details "A" to PC1 I can access http://sharepoint (our local server) but user "B" can't open http://sharepoint while logged in to PC1.
I have tried to troubleshoot above problem but with no luck. I flushed DNS on this specific computer, I have removed user profile and added it again. I removed this workstation from domain and joined again.
Any idea what could be wrong?
Thanks for help and advice,
Lukasz
Are you getting a permission denied message or IE cannot connect to site type message?
ASKER
I can log in to the sharepoint as long as I type in browser http://sharepoint.myservername.local. I have also noticed that system doesn't load logon batch file for this particular user.
I checked user account in AD and everything seems to look ok, all setting and permissions are exactly the same as other users, and they can access sharepoint also logon batch file loads up the network shares.
Lukasz
I checked user account in AD and everything seems to look ok, all setting and permissions are exactly the same as other users, and they can access sharepoint also logon batch file loads up the network shares.
Lukasz
Are the unaffected users in an OU or domain group that the affected user is not? Could be a group policy.
Whatever the problem is, I am sure it has something to do with the user's profile on that particular workstation. Check IE settings (reset to default), make sure the site is loading in the correct IE zone (http://sharepoint should probably be in teh Local Intranet Zone).
I think there's three kinds of connection problems you can have with SharePoint:
1. Site doesn't even load. 404 error in the browser. This can be due to connectivity, routing, server down, etc. Usually pretty obvious what the problem is in this circumstance: check the network properties, static routes, any software running under the user's profile that could be interfering, etc.
2. User can't authenticate. Page loads and IIS prompts user for credentials. If the site has been detected as a Local Intranet Zone site, their credentials are passed automatically and the user never sees a login prompt.
SharePoint does not handle authentication, it passes this task to IIS. IIS gives the user three chances and then displays a 401 error (Unauthorized). There are not many problems of this kind that could just affect one user (on one workstation), but again I'd look on their workstation for any software (esp. spyware) that could be affecting web browsing.
3. User has been authenticated but is not authorized; they receive an Access Denied error. In this case the user hasn't been granted access to see the site, list, library, or document. But this would affect the user no matter which workstation he was logged in to, so that's probably not it.
If worst comes to worst you could delete and recreate the user's profile on that workstation. Make sure to back up any documents / application settings beforehand.
I think there's three kinds of connection problems you can have with SharePoint:
1. Site doesn't even load. 404 error in the browser. This can be due to connectivity, routing, server down, etc. Usually pretty obvious what the problem is in this circumstance: check the network properties, static routes, any software running under the user's profile that could be interfering, etc.
2. User can't authenticate. Page loads and IIS prompts user for credentials. If the site has been detected as a Local Intranet Zone site, their credentials are passed automatically and the user never sees a login prompt.
SharePoint does not handle authentication, it passes this task to IIS. IIS gives the user three chances and then displays a 401 error (Unauthorized). There are not many problems of this kind that could just affect one user (on one workstation), but again I'd look on their workstation for any software (esp. spyware) that could be affecting web browsing.
3. User has been authenticated but is not authorized; they receive an Access Denied error. In this case the user hasn't been granted access to see the site, list, library, or document. But this would affect the user no matter which workstation he was logged in to, so that's probably not it.
If worst comes to worst you could delete and recreate the user's profile on that workstation. Make sure to back up any documents / application settings beforehand.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
As suggested there was an issue with user profile in AD. I have noticed that old objectSID record was listed under Security tab.
Removing the old object i.e. S-1-5-21-1388762127-xxxxxx xxxxx-xxxx xxxxxxx has fixed my problem.
I can now open SharePoint and logon script loads network shares during logon process.
Removing the old object i.e. S-1-5-21-1388762127-xxxxxx
I can now open SharePoint and logon script loads network shares during logon process.