Solved

Sharepoint 2007 in a newly merged organization

Posted on 2013-10-22
7
400 Views
Last Modified: 2013-10-23
We have just merged with another company. We have a Two-Way Forest trust established successfully between us, Domain A and them, Domain B. We are trying to give users in Domain B access to Sharepoint.  

The issue is that users from Domain B are being challenged for a username and password when connecting to a site on Sharepoint at Domain A.     Once they login, there are little anomalies  that have to do with permission (see description below).   We, Domain A, are a Windows 2003 domain with Sharepoint 2007 running.  Domain B, is a Windows 2008R2 domain running at Windows 2003 functional level.

 In Sharepoint we have gone into Shared Services Administration> User Profiles and Properties>View Import Connections and created a new connection to Domain B's Active Directory.  The Domain B's users now appear in View User Profiles.

Besides being challenged for the un/pw, when they get to the site, the little attachement paperclip icon does not appear, replaced with a generic red X as if the folder permissions in IIS are not correct (the clip is in _images folder).

Any advice on what we have done wrong or left out would be appreciated.  Talk slowly, we aren't Sharepoint people.
0
Comment
Question by:Dgreenbaum
  • 5
  • 2
7 Comments
 
LVL 44

Expert Comment

by:Rainer Jeschor
ID: 39593391
Hi,
for the username/password prompt. Can you verify if the SharePoint url is added to the "Local Intranet Zone" of the users of domain B?
You could verify this by letting a user of domain B just open the SharePoint site. IE should show in the bottom status bar its zone (for IE>=8 - for IE>8 its under menu "File" -> "Properties").
By default IE sends the current credentials only to sites listed in the local intranet zone - not in the Trusted sites zone. But please remember - depending on the IT configurations it might be that they are using Group Policies to push IE configurations and can even block changes on the client side.

For the image issue - you should never directly change anything in IIS manager because this can cause issues afterwards as SharePoints internal config could now be out of sync.

The question is, why does it show the red X: due to a 404 not found or due to a 401 permission denied. To track that you might use either a proxy tool like Fiddler or use IE built-in dev tools (shortcut is F12). You will find a tab "Network", then "Start capturing" and now open the page. Images are normally stored under "_layouts/images" (but thats my local SP2010 - I would have to verify this afternoon when I have access to a running MOSS 2007 instance).

HTH
Rainer
0
 

Author Comment

by:Dgreenbaum
ID: 39594443
Hi Rainier... I wil pursue your suggestions and report back.   Thanks so much.

David
0
 

Author Comment

by:Dgreenbaum
ID: 39594879
Hi.

I'm excited to say adding the site to the Intranet worked!

regarding the apparent broken link, on the iIE Dev tools page I found no Network tab.  We are still on IE8.  Is that only available in later versions?
0
Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

 

Author Comment

by:Dgreenbaum
ID: 39594883
I neglected to say that our domains are connected through a point to point IpSec tunnel.
0
 
LVL 44

Accepted Solution

by:
Rainer Jeschor earned 500 total points
ID: 39595473
Hi,
OK so logon issue solved.
I have no IE8 at hand to verify but it could be that this tab was introduced in a newer version of IE.

When you right click on the image and then properties - what address/url is shown?
What happens if you copy this url and paste it to a new browser tab/window?
Could you perhaps post this url here?

Thanks.
Rainer
0
 

Author Comment

by:Dgreenbaum
ID: 39596420
Hi Rainier.  I got it to work!   Your suggestion to copy the url was exactly the clue I needed.

When I saw it I knew the problem.   In our two way forest trust we have not yet created a forward lookup zone in dns in each other's domains.  The Sharepoint site was being accessed from Domain B with the FQDN:  http://sharepointserver.domainA.local/website/default.aspx.  

That worked for the Sharepoint site but the .gif in question, once they got to the site, was just  http://sharepointserver/website/_layouts/images/attach.gif; no FQDN.

I created a A record in DNS on Domain B to point to Sharepointserver.   The little attachment paper clip .gif could then be found with just the Sharepointserver name.

Thanks for the guidance,
David
0
 

Author Closing Comment

by:Dgreenbaum
ID: 39596421
Once Rainier heard the whole story he knew just where to look for the answer.  With his help it was clear as a bell.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Sharepoint workflow on list 6 44
Sharepoint List View 6 38
Sharepoint nonfunctional - Emergency 6 35
Updating a SharePoint list from an Excel spreadsheet 7 48
Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

827 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question