Acces Denied for administrator

Hi,

Recently i've re-installed SharePoint 2010 and restored an old content-database.

Logging in as servername/Administrator works, but when i want to open "Site settings" i'm getting the error message below.

All other users cannot login to SharePoint, they are getting the same message after the login screen.

Can someone help me with this problem?

Best regards,

Joost Lauwen

  • Edited by Spike-NL Monday, January 30, 2012 10:44 AM update
  • Moved by Mike Walsh FIN Monday, January 30, 2012 10:51 AM SP 2010 questions go only to SP 2010 forums (From:SharePoint - Setup, Upgrade, Administration and Operation (pre-SharePoint 2010))
January 30th, 2012 10:38am

We need more than this.

You can start by saying which SP you have and continue with when this is appearing and what rights the Administrator has - also if you are using default.aspx in the URL.

Free Windows Admin Tool Kit Click here and download it now
January 30th, 2012 10:40am

We need more than this.

You can start by saying which SP you have and continue with when this is appearing and what rights the Administrator has - also if you are using default.aspx in th

January 30th, 2012 10:47am

CA->Application Management->Site Collections - > Change Site Collection Administrator.

There choose your account name as it is migrated from other server,you may not be the site administrator there.

 

 

Free Windows Admin Tool Kit Click here and download it now
January 30th, 2012 1:17pm

CA->Application Management->Site Collections - > Change Site Collection Administrator.

There choose your account name as it is migrated from other server,you may not be the site administrator there.

 

January 30th, 2012 2:32pm

Please get the details for this correlation ID from ULS log. That will throw s
Free Windows Admin Tool Kit Click here and download it now
January 30th, 2012 2:36pm

Its seems to be a migration problem.Please leave the ULS log text to identify the exact problem.
January 30th, 2012 3:16pm

01-30-2012 15:27:13.99	w3wp.exe (0x1570)	0x1068	SharePoint Foundation	Logging Correlation Data	xmnv	Medium	Name=Request (POST:http://avia_server:48183/_admin/owners.aspx)	4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:13.99	w3wp.exe (0x1570)	0x1068	SharePoint Foundation	Logging Correlation Data	xmnv	Medium	Site=/	4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:14.00	w3wp.exe (0x1570)	0x1068	SharePoint Foundation	Monitoring	b4ly	High	Leaving Monitored Scope (PostAuthenticateRequestHandler). Execution Time=8.05366061519728	4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:14.04	w3wp.exe (0x1570)	0x1068	SharePoint Foundation	General	g8ga	Medium	Begin Query the AD to get the user email and display name.	4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:16.31	w3wp.exe (0x1570)	0x1068	SharePoint Foundation	General	g8gb	Medium	End Query the AD to get the user email and display name.	4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:16.53	w3wp.exe (0x1570)	0x1068	SharePoint Foundation	Runtime	tkau	Unexpected	System.NullReferenceException: Object reference not set to an instance of an object.    at Microsoft.SharePoint.SPUser.set_IsSiteAdmin(Boolean value)     at Microsoft.SharePoint.SPSite.set_SecondaryContact(SPUser value)     at Microsoft.SharePoint.Administration.SPSiteAdministration.set_SecondaryContactLoginName(String value)     at Microsoft.SharePoint.ApplicationPages.OwnersPage.BtnConfirm_Click(Object sender, EventArgs e)     at System.Web.UI.WebControls.Button.OnClick(EventArgs e)     at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)     at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)     at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)	4ca6b275-361d-4488-8c03-0968c2b03dd8
01-30-2012 15:27:18.99	w3wp.exe (0x1570)	0x1068	SharePoint Foundation	Monitoring	b4ly	Medium	Leaving Monitored Scope (Request (POST:http://avia_server:48183/_admin/owners.aspx)). Execution Time=5031.1517167884	4ca6b275-361d-4488-8c03-0968c2b03dd8

  • Edited by Spike-NL Monday, January 30, 2012 3:55 PM
Free Windows Admin Tool Kit Click here and download it now
January 30th, 2012 3:54pm

Hi,

Can you tell us in what approach you followed for migration?

Just check without secondary administrator user name.

January 30th, 2012 4:02pm

Hi.

 

Have you tried to replace the Administrator as Primary SIte Collection admin with a working account(joost?), then from a Powershell prompt run as admin:

Set-SPSite -Identity "<SiteCollection>" -SecondaryOwnerAlias "<User>"

 

Could be worth a try?

 

Regards

Free Windows Admin Tool Kit Click here and download it now
January 30th, 2012 4:11pm

Hi Joost,

access this link from Administrator account.There change the Site Administrator to your account.

Before you changed the SiteCollection Adminstrators from CA now you need to change this in site level also.

http://yourserver/_layouts/settings.aspx

January 31st, 2012 8:22am

Hi, Murugesa, have a look at the initial error...Access denied when accessing the site collections site settings...so we can probably assume that if nothing has changed from the attempts made, that it will still be access denied.

Regards

Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 9:33am

Hi Joost,

access this link from Administrator account.There change the Site Administrator to your account.

Before you changed the SiteCollection Adminstrators from CA now you need to change this in site level also.

http://yourserver/_layouts/setting

January 31st, 2012 9:57am

Hi Joost.

Have you tried to access the sites Site collection Administrators page directly?

http://avia_server:26320/_layouts/mngsiteadmin.aspx

Regards

Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 10:05am

Go to sharePoint powershell command and type this command

Set-SPSite -Identity "<SiteCollection>" -OwnerAlias "<Userwithdomain>"

Add your name or server administrator.

January 31st, 2012 10:09am

yes that is possible. After changing the Primary Site administrator, i cannot login with any users.

Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 10:16am

any users means ? Just give them permission to access your site.

But administrator rights for your account and server administrator account only.

Add some users in Member,Visitors groups and check them to log in into the site.

January 31st, 2012 10:20am

Go to sharePoint powershell command and type this command

Set-SPSite -Identity "<SiteCollection>" -OwnerAlias "<Userwithdomain>"

Add your name or server administ

Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 10:21am

Hi,

This command throws any error ? or return just blank.

Now open the site and still you got the error change the browser and test the same.

You might be not fully logged out on your previous session.

 

January 31st, 2012 10:25am

Hi,

This command throws any error ? or return just blank.

Now open the site and still you got the error change the browser and test the same.

You might be not fully logged out on your previous session.

Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 10:31am

Hmmm..Never giveup,

STSADM.EXE -o enumsites -url http://avia_server:26320

this will return the site and its owner name.and check your account and server account on Owner field.

If not Log into Management studio find your application's content database add your name as "db_owner" role.

January 31st, 2012 10:39am

  <Site Url="http://avia_server:26320" Id="65d92861-c63c-404a-9bf2-8f3b09fa3b37"
 Owner="AVIA_SERVER\administrator" ContentDatabase="WSS_Content" StorageUsedMB="
8274.2" StorageWarningMB="0" StorageMaxMB="0" />
  <Site Url="http://avia_server:26320/my" Id="af9bd012-4741-40d1-b64d-9eaf991432
c8" Owner="AVIA_SERVER\administrator" ContentDatabase="WSS_Content" StorageUsedM
B="1.5" StorageWarningMB="0" StorageMaxMB="0" />
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 10:46am

Is the content database set to read only in SQL?

Can you access any MySites with the Administrator account?

 

Regards

January 31st, 2012 10:48am

Yes You can login as "AVIA_Server\administrator" to your site.

Still if you get "Access Denied error". Close your browser and reopen and hit the URL.

Try with different browser.

After you log in give the access to your users.

I hope In CA also AVIA_Server\administrator is in Site Administrator's group.

Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 10:52am

The WSS_Content database is not set to read-only. I also cannot access MySites, getting an 404-error.
January 31st, 2012 10:56am

Ok.

Go to Central aDministration - Clicl on Manage Application [Header] You will see the Manager Content database under Database subheader.

Click on.Find your site's content db click it to open its properties. Set "Ready".

Now check.It wil work.

Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 11:02am

Perhaps you should start to focus on your IIS settings....check what you have.

This is not normal behaviour...'

 

(The read-only seting doeas not affect access...only creation of new SiteCollections)

Regards

January 31st, 2012 11:13am

Yes correct not only SiteCollection,It will not allow any update/delete and ofcourse creation of any items in the site.But same time if there is any problem in IIS configuration,He won't see the "Access Denied" messages instead some yellow error
Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 11:17am

Ok.

Go to Central aDministration - Clicl on Manage Application [Header] You will see the Manager Content database under Database subheader.

Click on.Find your site's content db click it to open its properties. Set "Ready".

Now check.It wil

January 31st, 2012 11:31am

Hi Joost,

For this issue,Please don't go reinstall everything.!Lets wait some experts here to answer.

Try to open this site using SPD 2010.Let see its allowing or not.

Free Windows Admin Tool Kit Click here and download it now
January 31st, 2012 11:43am

Hi Joost,

For this issue,Please don't go reinstall everything.!Lets wait some experts here to answer.

Try to open this site using SPD 2010.Let see its allowing or not.

February 1st, 2012 11:06am

Yes.Now its confirm,

You would have closed your browser and logged In use different user.some time browser retains the last logged in user detail.

I hope the problem got resolved.

Free Windows Admin Tool Kit Click here and download it now
February 1st, 2012 12:40pm

I've tried it already. Even with a computer which never opened SharePoint.

I'm now setting up an test environment with Hyper-V to make a new Sharepoint installation with the recent WSS_Content database.

February 1st, 2012 1:16pm

Are you using claim based or Windows classics as your authentication provider? If you have changed from Windows classics to Claim based, you need to convert all of your users to Claims.
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2012 1:40pm

Hi,

This site has been backed up through Powershell using "Lock State" and it has migrated in the same state.

So give this command in sharePoint powershell

Set-SPSite -Identity  siteName -LockState Unlock

February 1st, 2012 1:55pm

Are you using claim based or Windows classics as your authentication provider? If you have changed from Windows classics to Claim based, you need to convert all of your users
Free Windows Admin Tool Kit Click here and download it now
February 1st, 2012 2:35pm

Try to back up the site without user from source domain while migrating to other domain.

And please look into Henrik's reply also.Its seems to be valid answer for this issue.

 

February 1st, 2012 7:24pm

<p>Hi guys,</p><p>I solved the problem.</p><p>I have removed en reinstalled Sharepoint and made a new site. Then attached the old database to it.</p><p>Now everyhing is working fine.</p><p>Thanks for your tips and solutions</p>
Free Windows Admin Tool Kit Click here and download it now
February 10th, 2012 8:56am

I had the same problem after moving a site collection to another server in another domain.

I solved the problem by deleting the "incorrect" site collection administrators in the content database:

SELECT * FROM UserInfo

DELETE FROM UserInfo WHERE tp_ID = {ID_to_be_deleted}

After this I added the primary and secundary site collection administrator back through STSADM

stsadm -o setowner -url http://SP2010 -ownerlogin dev\spadmin

stsadm -o setowner -url http://SP2010 -secondarylogin dev\spadmin2

  • Proposed as answer by Keliud 5 hours 48 minutes ago
February 13th, 2012 4:04pm

I had the same problem after moving a site collection to another server in another domain.

I solved the problem by deleting the "incorrect" site collection administrators in the content database:

SELECT * FROM UserInfo

DELETE FROM UserInfo WHERE tp_ID = {ID_to_be_deleted}

After this I added the primary and secundary site collection administrator back through STSADM

stsadm -o setowner -url http://SP2010 -ownerlogin dev\spadmin

stsadm -o setowner -url http://SP2010 -secondarylogin dev\spadmin2

  • Proposed as answer by Keliud Saturday, June 06, 2015 1:50 AM
Free Windows Admin Tool Kit Click here and download it now
February 13th, 2012 4:04pm

Hi Steven. Altering the databases directly will render the farm unsupported.

This should never be recommended here.

Better to find any other alternative resolution.

Regards

February 13th, 2012 4:42pm

Hello Gents,

I think i may have a serious problem in this area. Recently I set up a new site, and by mistake deleted all permisions to this site (there was not even a single window with qestion if I am sure to delete all permissions!! (view, contribute, administration)). Now I get the message below:

 

What should I do to delete this Site? I need to get rid of this as I need to use this address for annother Site.

Free Windows Admin Tool Kit Click here and download it now
March 1st, 2012 1:56pm

Hi.

As a farm admin, go to Central Admin, then add yourself to the site collection admins, primary or secondary(only two from CA)
Then, go to the site and delete it. As a SIte Collection admin you can do anything :-)

Regards

March 1st, 2012 2:47pm

Hello,

I have changed my privileges to farm admin, and I am still unable to open this site.

Regards,

Macciu

Free Windows Admin Tool Kit Click here and download it now
March 2nd, 2012 12:59pm

Hi.

You missed the important part...a farm admin has no access to content, but he can give himself permissions.

'then add yourself to the site collection admins'

As a farm admin, add yourself as a primary or secondary site collection administrator an dthen you can access the site.

Regards

March 2nd, 2012 1:07pm

I have checked my credentials and i am also site collection admin.
Free Windows Admin Tool Kit Click here and download it now
March 2nd, 2012 1:41pm

marking this thread for later.

i have the similar issues going on.  added a user as a farm admin and a site collection admin, still gets the Access Denied message.  happens too when trying to create a site collection.

i'm going to see about adding dbcreator,sysadmin roles for the user to that content db

March 15th, 2012 4:50pm

sometimes I have run into similar issue with not having rights to a new or upgraded farm. Try adding the account to the web application policy in Central Admin. this has worked for me on many occasions and then I can get into places and reset permissions for site collection admins. Hopefully it will help. Make sure to remove the account from the policy later.
Free Windows Admin Tool Kit Click here and download it now
April 15th, 2012 7:30am

Hi,

I'm having the same problem.

I've managed to get a pattern in this error:

After I execute Mount-SPContentDatabase, I change the Primary Site Collection Administrator with this command:

Set-SPSite -OwnerAlias <User> -Identity <Url> 

(also tried Set-SPSiteAdministration, also works)

When i log on in the newly mounted Site Collectionwith this account, it gives me "AccessDenied" when trying for example "<url>/_layouts/settings.aspx". This is weird.

However, by checking "CA > Application Management > Change Site Collection Administration", i have verified that sharepoint indeed accepted the user i provided for Site Collection Administrator. I touch nothing and click OK.

The moment I click OK, the "Access Denied" goes away and I am able to access the "<url>/_layouts/settings.aspx".

Weird? Something wrong with Set-SPSite / Set-SPSiteAdministration ?? Or am I missing something ?

Regards,

Rodrigo

July 19th, 2012 5:45pm

Hi

Apologies if this is no longer current but I thought it maybe useful to someone. I had the exact same issue when I tried to migrate a site. As Henrik suggested I looked at the authentication type and found that to be the issue. Please don't ask me why it happened as I do not know.

I followed the steps in the following article to resolve:

http://technet.microsoft.com/en-us/library/gg251985.aspx

I hope it helps someone.

Regards

Azam

Free Windows Admin Tool Kit Click here and download it now
June 7th, 2013 10:50am

I Deleted the site collection administrator from the UserInfo table as described by StevenD007. I  then added the site collection administrator again 

as 

Set-SPSiteAdministration http://companyweb -OwnerAlias "domain\user"

It now works. 


  • Edited by Keliud 5 hours 43 minutes ago
June 5th, 2015 10:00pm

I Deleted the site collection administrator from the UserInfo table as described by StevenD007. I  then added the site collection administrator again 

as 

Set-SPSiteAdministration http://companyweb -OwnerAlias "domain\user"

It now works. 


  • Edited by Keliud Saturday, June 06, 2015 1:55 AM
Free Windows Admin Tool Kit Click here and download it now
June 6th, 2015 1:53am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics