Acces Denied for administrator
Hi,
Recently i've re-installed SharePoint 2010 and restored an old content-database.
Logging in as servername/Administrator works, but when i want to open "Site settings" i'm getting the error message below.
All other users cannot login to SharePoint, they are getting the same message after the login screen.
Can someone help me with this problem?
Best regards,
Joost Lauwen
-
Edited by
Spike-NL
Monday, January 30, 2012 10:44 AM
update
-
Moved by
Mike Walsh FIN
Monday, January 30, 2012 10:51 AM
SP 2010 questions go only to SP 2010 forums (From:SharePoint - Setup, Upgrade, Administration and Operation (pre-SharePoint 2010))
January 30th, 2012 10:38am
We need more than this.
You can start by saying which SP you have and continue with when this is appearing and what rights the Administrator has - also if you are using default.aspx in the URL.
January 30th, 2012 10:40am
We need more than this.
You can start by saying which SP you have and continue with when this is appearing and what rights the Administrator has - also if you are using default.aspx in th
January 30th, 2012 10:47am
CA->Application Management->Site Collections - > Change Site Collection Administrator.
There choose your account name as it is migrated from other server,you may not be the site administrator there.
January 30th, 2012 1:17pm
CA->Application Management->Site Collections - > Change Site Collection Administrator.
There choose your account name as it is migrated from other server,you may not be the site administrator there.
January 30th, 2012 2:32pm
Please get the details for this correlation ID from ULS log. That will throw s
January 30th, 2012 2:36pm
Its seems to be a migration problem.Please leave the ULS log text to identify the exact problem.
January 30th, 2012 3:16pm
01-30-2012 15:27:13.99 w3wp.exe (0x1570) 0x1068 SharePoint Foundation Logging Correlation Data xmnv Medium Name=Request (POST:http://avia_server:48183/_admin/owners.aspx) 4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:13.99 w3wp.exe (0x1570) 0x1068 SharePoint Foundation Logging Correlation Data xmnv Medium Site=/ 4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:14.00 w3wp.exe (0x1570) 0x1068 SharePoint Foundation Monitoring b4ly High Leaving Monitored Scope (PostAuthenticateRequestHandler). Execution Time=8.05366061519728 4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:14.04 w3wp.exe (0x1570) 0x1068 SharePoint Foundation General g8ga Medium Begin Query the AD to get the user email and display name. 4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:16.31 w3wp.exe (0x1570) 0x1068 SharePoint Foundation General g8gb Medium End Query the AD to get the user email and display name. 4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:16.53 w3wp.exe (0x1570) 0x1068 SharePoint Foundation Runtime tkau Unexpected System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.SharePoint.SPUser.set_IsSiteAdmin(Boolean value) at Microsoft.SharePoint.SPSite.set_SecondaryContact(SPUser value) at Microsoft.SharePoint.Administration.SPSiteAdministration.set_SecondaryContactLoginName(String value) at Microsoft.SharePoint.ApplicationPages.OwnersPage.BtnConfirm_Click(Object sender, EventArgs e) at System.Web.UI.WebControls.Button.OnClick(EventArgs e) at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) 4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:18.99 w3wp.exe (0x1570) 0x1068 SharePoint Foundation Monitoring b4ly Medium Leaving Monitored Scope (Request (POST:http://avia_server:48183/_admin/owners.aspx)). Execution Time=5031.1517167884 4ca6b275-361d-4488-8c03-0968c2b03dd8
-
Edited by
Spike-NL
Monday, January 30, 2012 3:55 PM
January 30th, 2012 3:54pm
Hi,
Can you tell us in what approach you followed for migration?
Just check without secondary administrator user name.
January 30th, 2012 4:02pm
Hi.
Have you tried to replace the Administrator as Primary SIte Collection admin with a working account(joost?), then from a Powershell prompt run as admin:
Set-SPSite -Identity "<SiteCollection>" -SecondaryOwnerAlias "<User>"
Could be worth a try?
Regards
January 30th, 2012 4:11pm
Hi Joost,
access this link from Administrator account.There change the Site Administrator to your account.
Before you changed the SiteCollection Adminstrators from CA now you need to change this in site level also.
http://yourserver/_layouts/settings.aspx
January 31st, 2012 8:22am
Hi, Murugesa, have a look at the initial error...Access denied when accessing the site collections site settings...so we can probably assume that if nothing has changed from the attempts made, that it will still be access denied.
Regards
January 31st, 2012 9:33am
Hi Joost,
access this link from Administrator account.There change the Site Administrator to your account.
Before you changed the SiteCollection Adminstrators from CA now you need to change this in site level also.
http://yourserver/_layouts/setting
January 31st, 2012 9:57am
Go to sharePoint powershell command and type this command
Set-SPSite -Identity "<SiteCollection>" -OwnerAlias "<Userwithdomain>"
Add your name or server administrator.
January 31st, 2012 10:09am
yes that is possible. After changing the Primary Site administrator, i cannot login with any users.
January 31st, 2012 10:16am
any users means ? Just give them permission to access your site.
But administrator rights for your account and server administrator account only.
Add some users in Member,Visitors groups and check them to log in into the site.
January 31st, 2012 10:20am
Go to sharePoint powershell command and type this command
Set-SPSite -Identity "<SiteCollection>" -OwnerAlias "<Userwithdomain>"
Add your name or server administ
January 31st, 2012 10:21am
Hi,
This command throws any error ? or return just blank.
Now open the site and still you got the error change the browser and test the same.
You might be not fully logged out on your previous session.
January 31st, 2012 10:25am
Hi,
This command throws any error ? or return just blank.
Now open the site and still you got the error change the browser and test the same.
You might be not fully logged out on your previous session.
January 31st, 2012 10:31am
Hmmm..Never giveup,
STSADM.EXE -o enumsites -url http://avia_server:26320
this will return the site and its owner name.and check your account and server account on Owner field.
If not Log into Management studio find your application's content database add your name as "db_owner" role.
January 31st, 2012 10:39am
<Site Url="
http://avia_server:26320" Id="65d92861-c63c-404a-9bf2-8f3b09fa3b37"
Owner="AVIA_SERVER\administrator" ContentDatabase="WSS_Content" StorageUsedMB="
8274.2" StorageWarningMB="0" StorageMaxMB="0" />
<Site Url="
http://avia_server:26320/my" Id="af9bd012-4741-40d1-b64d-9eaf991432
c8" Owner="AVIA_SERVER\administrator" ContentDatabase="WSS_Content" StorageUsedM
B="1.5" StorageWarningMB="0" StorageMaxMB="0" />
January 31st, 2012 10:46am
Is the content database set to read only in SQL?
Can you access any MySites with the Administrator account?
Regards
January 31st, 2012 10:48am
Yes You can login as "AVIA_Server\administrator" to your site.
Still if you get "Access Denied error". Close your browser and reopen and hit the URL.
Try with different browser.
After you log in give the access to your users.
I hope In CA also AVIA_Server\administrator is in Site Administrator's group.
January 31st, 2012 10:52am
The WSS_Content database is not set to read-only. I also cannot access MySites, getting an 404-error.
January 31st, 2012 10:56am
Ok.
Go to Central aDministration - Clicl on Manage Application [Header] You will see the Manager Content database under Database subheader.
Click on.Find your site's content db click it to open its properties. Set "Ready".
Now check.It wil work.
January 31st, 2012 11:02am
Perhaps you should start to focus on your IIS settings....check what you have.
This is not normal behaviour...'
(The read-only seting doeas not affect access...only creation of new SiteCollections)
Regards
January 31st, 2012 11:13am
Yes correct not only SiteCollection,It will not allow any update/delete and ofcourse creation of any items in the site.But same time if there is any problem in IIS configuration,He won't see the "Access Denied" messages instead some yellow error
January 31st, 2012 11:17am
Ok.
Go to Central aDministration - Clicl on Manage Application [Header] You will see the Manager Content database under Database subheader.
Click on.Find your site's content db click it to open its properties. Set "Ready".
Now check.It wil
January 31st, 2012 11:31am
Hi Joost,
For this issue,Please don't go reinstall everything.!Lets wait some experts here to answer.
Try to open this site using SPD 2010.Let see its allowing or not.
January 31st, 2012 11:43am
Hi Joost,
For this issue,Please don't go reinstall everything.!Lets wait some experts here to answer.
Try to open this site using SPD 2010.Let see its allowing or not.
February 1st, 2012 11:06am
Yes.Now its confirm,
You would have closed your browser and logged In use different user.some time browser retains the last logged in user detail.
I hope the problem got resolved.
February 1st, 2012 12:40pm
I've tried it already. Even with a computer which never opened SharePoint.
I'm now setting up an test environment with Hyper-V to make a new Sharepoint installation with the recent WSS_Content database.
February 1st, 2012 1:16pm
Are you using claim based or Windows classics as your authentication provider? If you have changed from Windows classics to Claim based, you need to convert all of your users to Claims.
February 1st, 2012 1:40pm
Hi,
This site has been backed up through Powershell using "Lock State" and it has migrated in the same state.
So give this command in sharePoint powershell
Set-SPSite -Identity siteName -LockState Unlock
February 1st, 2012 1:55pm
Are you using claim based or Windows classics as your authentication provider? If you have changed from Windows classics to Claim based, you need to convert all of your users
February 1st, 2012 2:35pm
Try to back up the site without user from source domain while migrating to other domain.
And please look into Henrik's reply also.Its seems to be valid answer for this issue.
February 1st, 2012 7:24pm
<p>Hi guys,</p><p>I solved the problem.</p><p>I have removed en reinstalled Sharepoint and made a new site. Then attached the old database to it.</p><p>Now everyhing is working fine.</p><p>Thanks for
your tips and solutions</p>
February 10th, 2012 8:56am
I had the same problem after moving a site collection to another server in another domain.
I solved the problem by deleting the "incorrect" site collection administrators in the content database:
SELECT * FROM UserInfo
DELETE FROM UserInfo WHERE tp_ID = {ID_to_be_deleted}
After this I added the primary and secundary site collection administrator back through STSADM
stsadm -o setowner -url http://SP2010 -ownerlogin dev\spadmin
stsadm -o setowner -url http://SP2010 -secondarylogin dev\spadmin2
-
Proposed as answer by
Keliud
5 hours 48 minutes ago
February 13th, 2012 4:04pm
I had the same problem after moving a site collection to another server in another domain.
I solved the problem by deleting the "incorrect" site collection administrators in the content database:
SELECT * FROM UserInfo
DELETE FROM UserInfo WHERE tp_ID = {ID_to_be_deleted}
After this I added the primary and secundary site collection administrator back through STSADM
stsadm -o setowner -url http://SP2010 -ownerlogin dev\spadmin
stsadm -o setowner -url http://SP2010 -secondarylogin dev\spadmin2
-
Proposed as answer by
Keliud
Saturday, June 06, 2015 1:50 AM
February 13th, 2012 4:04pm
Hi Steven. Altering the databases directly will render the farm unsupported.
This should never be recommended here.
Better to find any other alternative resolution.
Regards
February 13th, 2012 4:42pm
Hello Gents,
I think i may have a serious problem in this area. Recently I set up a new site, and by mistake deleted all permisions to this site (there was not even a single window with qestion if I am sure to delete all permissions!! (view, contribute, administration)).
Now I get the message below:
What should I do to delete this Site? I need to get rid of this as I need to use this
address for annother Site.
March 1st, 2012 1:56pm
Hi.
As a farm admin, go to Central Admin, then add yourself to the site collection admins, primary or secondary(only two from CA)
Then, go to the site and delete it. As a SIte Collection admin you can do anything :-)
Regards
March 1st, 2012 2:47pm
Hello,
I have changed my privileges to farm admin, and I am still unable to open this site.
Regards,
Macciu
March 2nd, 2012 12:59pm
Hi.
You missed the important part...a farm admin has no access to content, but he can give himself permissions.
'then add yourself to the site collection admins'
As a farm admin, add yourself as a primary or secondary site collection administrator an dthen you can access the site.
Regards
March 2nd, 2012 1:07pm
I have checked my credentials and i am also site
collection admin.
March 2nd, 2012 1:41pm
marking this thread for later.
i have the similar issues going on. added a user as a farm admin and a site collection admin, still gets the Access Denied message. happens too when trying to create a site collection.
i'm going to see about adding dbcreator,sysadmin roles for the user to that content db
March 15th, 2012 4:50pm
sometimes I have run into similar issue with not having rights to a new or upgraded farm. Try adding the account to the web application policy in Central Admin. this has worked for me on many occasions and then I can get into places and reset permissions
for site collection admins. Hopefully it will help. Make sure to remove the account from the policy later.
April 15th, 2012 7:30am
Hi,
I'm having the same problem.
I've managed to get a pattern in this error:
After I execute Mount-SPContentDatabase, I change the Primary Site Collection Administrator with this command:
Set-SPSite -OwnerAlias <User> -Identity <Url>
(also tried Set-SPSiteAdministration, also works)
When i log on in the newly mounted Site Collectionwith this account, it gives me "AccessDenied" when trying for example "<url>/_layouts/settings.aspx". This is weird.
However, by checking "CA > Application Management > Change Site Collection Administration", i have verified that sharepoint indeed accepted the user i provided for Site Collection Administrator. I touch nothing and click OK.
The moment I click OK, the "Access Denied" goes away and I am able to access the "<url>/_layouts/settings.aspx".
Weird? Something wrong with Set-SPSite / Set-SPSiteAdministration ?? Or am I missing something ?
Regards,
Rodrigo
July 19th, 2012 5:45pm
Hi
Apologies if this is no longer current but I thought it maybe useful to someone. I had the exact same issue when I tried to migrate a site. As Henrik suggested I looked at the authentication type and found that to be the issue. Please don't ask
me why it happened as I do not know.
I followed the steps in the following article to resolve:
http://technet.microsoft.com/en-us/library/gg251985.aspx
I hope it helps someone.
Regards
Azam
June 7th, 2013 10:50am
I Deleted the site collection administrator from the UserInfo table as described by StevenD007. I then added the site collection administrator again
as
Set-SPSiteAdministration http://companyweb -OwnerAlias "domain\user"
It now works.
-
Edited by
Keliud
5 hours 43 minutes ago
June 5th, 2015 10:00pm
I Deleted the site collection administrator from the UserInfo table as described by StevenD007. I then added the site collection administrator again
as
Set-SPSiteAdministration http://companyweb -OwnerAlias "domain\user"
It now works.
-
Edited by
Keliud
Saturday, June 06, 2015 1:55 AM
June 6th, 2015 1:53am