Access Denied when accessing Central Admin functions on SharePoint Server
Hi, this is a weird problem that is really bugging me out. When I log into the Central Admin site from my local PC, I can access all of the features/modules/functions without any problems. I am trying to configure single sign-on and I received a message stating that the configuration can only be done from the server itself. So I remote desktop into the server and go to the central admin site. I login without any problems but then I get an Access Denied Error message when I click on the "Manage settings for single sign-on" from Operations. I also find that I cannot access the services on the server.I am using the Admin account I used to install SharePoint and have SharePoint running on a Win 2008 R2 server.Any suggestions? Thanks!Med
November 17th, 2009 3:31pm

It sounds like Group Policy or permissions issue... Is your NT account local admin on the SharePoint Server's and is that ID a farm ID in the Farm Admin group on the Central Admin Page? Also are you using a remote management gateway (formally term server) to connect to the server or just your normal RDC from your PC?Are you also sure the account your logging with with for Manage Settings is in the Admin group for that section?Kris Kris Wagner, MCITP, MCTS Twitter @sharepointkris Blog: http://sharepointkris.com
Free Windows Admin Tool Kit Click here and download it now
November 17th, 2009 4:29pm

Hi, Note that you must be logged into the SharePoint Central Administration Web site on a farm server to configure single sign-on (SSO) for Office SharePoint Server 2007. If you attempt to configure SSO on a workstation or any computer that is not a farm server, you will see an error message that reads "Single sign-on cannot be configured from this server. From your post, it seems that you were configuring SSO on a workstation. Please go to the computer running the single sign-on service and configure these settings locally, then check the effect. For more information about configure single sign-on, please refer to the following article: Configure single sign-on (Office SharePoint Server) http://technet.microsoft.com/en-us/library/cc262932.aspx Rock Wang Rock Wang MSFT
November 18th, 2009 10:32pm

Gents, thanks for your input, but I am discovering that the problem seems to be with the way the zones are configured for the webparts.I found that the SharePoint Admin site loads differently if I have the URL in my Trusted Sites list on Internet Explorer. If I have it on trusted sites list, I can access everything without any problems. If I don't have it on the trusted sites list, then the page loads as an Intranet page and that's when I have the access denied problems.I am starting to investigate this and will post my findings once I have some.
Free Windows Admin Tool Kit Click here and download it now
November 19th, 2009 5:10pm

It sounds like Group Policy or permissions issue... Is your NT account local admin on the SharePoint Server's and is that ID a farm ID in the Farm Admin group on the Central Admin Page? Also are you using a remote management gateway (formally term server) to connect to the server or just your normal RDC from your PC?Are you also sure the account your logging with with for Manage Settings is in the Admin group for that section?Kris Kris Wagner, MCITP, MCTS Twitter @sharepointkris Blog: http://sharepointkris.com Answers to your questions:1) Yes. The account is local admin on the SharePoint server (it is a one servers farm) and the account is in the Farm Admin Group in the Central Admin site.2) I am connecting via RDC from my PC.3) What do mean by the account being in the admin group for that section? Once you are Farm Admin, you have access to central admin. Besides, from my PC, I have access to everyting with this account. So I would think the answer is yes.
November 23rd, 2009 9:22am

I figured it out!!!!!!!!!!!!!!!!!All you have to do is run IE on Windows Server 2008 as administrator to get access to all of the features.Microsoft: If I am an admin of the server and am part of the admin group, why would you make me take extra steps to run IE as admin? Am I not admin already? Are there different levels of admin? ADMIN is ADMIN. Once logged in as admin, I should not have to take extra actions to run IE or any other program with admin priveleges.Just my two cents.
Free Windows Admin Tool Kit Click here and download it now
January 8th, 2010 11:49am

Admin is not admin. It hasn't been since Windows XP. Just because you are logged in as admin doesn't mean that you have super-powers. You still need to right-click the icon and "run as admin". This applies to things like IIS Manager, Powershell, the Management Console, and even cmd.exe. You'll soon get used to it. You could always turn off UAC to reduce the warnings. And you could re-enable the "real" admin account, that still exists if you know where. Google will tell you how. But this really isn't advisable on a server, or on a PC that's used for administering one. Rob Schifreen SharePoint 2010 Admin University of Brighton, UK
September 1st, 2012 1:24pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics