Alternating Credentials Passed to SharePoint Server
Hello, I've been living with an extremely frustrating problem that started when my work computers (laptop and desktop) were upgraded recently to Win 7 and IE9. We have a SharePoint 2007 server set up on an intranet and configured to always be accessed securely (https). I'm a developer and they have me set up to use two separate AD accounts on the server. My normal account as an employee, and an administrative account. As far as SharePoint is concerned, these are simply two different accounts set up with different permissions within SharePoint. I'm access SharePoint simply through the browser....I'm not a SharePoint administrator and I don't do any administrative functions. I simply configure subwebs, create document libraries, customize many things using SharePoint Designer, etc. When I first open the browser and access our SharePoint server it passes my normal, default credientials. My normal name appears in the upper right hand corner, and all is well with the world. The fun begins when I click on my name to invoke the context menu, select "Sign in as a Different User", and sign in with my admin account. Subsequent calls to the server will randomly pass either my normal or my administrative account credentials. I could give you many horrifying examples of what this alternate passing will do in real life, but for troubleshooting purposes perhaps the best example I can give is that if I remain on the homepage and simply click the browser refresh button several times, my name as displayed in the upper-right corner of the window will irregularly and randomly switch between my "normal" account name and my "admin" account name. Maybe three clicks it will show my "normal" name, then the next click will show my "admin" name, then the next will be my "normal", then the next three will be my "admin". Eventually...slowly over the course of the next several minutes or so the "admin" name will appear more and more frequently until it almost always appears. This causes huge problems. I will login with my admin account to access (for example) a document library that my normal account only has "read" access to. With my admin account I have full control, so I'll click "settings" and suddenly will get an "Access Denied" message. I'll hit the back key to get to the library and refresh the screen several times until it finally passes my admin credentials again and I'll once again see the settings link. I'll click settings again, and then maybe the screen will return, so I'll click "Advanced Permissions" and I'll get the error message again saying "Access Denied". I'll hit the back key again, refresh the page, try again, etc. Eventually I keep at this long enough (usually accompaned by the loud vocalization of creative expletives about certain software giants) the "admin" account will always get passed and I can go about my business. I'm not sure how to even begin troubleshooting this. Deep browser refreshing (shift + refresh) doesn't seem to work. I've tried clearing the cache, changing the setting that always fetches new content from the server (ignores the cache?). All to no avail. And it seems to be some weird combination of problems/settings because if I use the same browser on a different intranet SharePoint server it doesn't happen (indicating a server problem, right?) but if I use Firefox and not IE9, it doesn't happen on either server (indicating a browser issue, right?). Any thoughts?
April 18th, 2012 2:05pm

An idea I just had is to create an alternative access mapping for the web application and ensure this URL is not in your local intranet or trusted sites zone. When you browse to this URL it will prompt for credentials, to which you would enter your administrative credentials. You would continue accessing the regular intranet URL with your normal account.Jason Warren Infrastructure Specialist Habaero Consulting Group www.habaneros.com/blog
Free Windows Admin Tool Kit Click here and download it now
April 18th, 2012 3:23pm

Thank you for your reply. Unfortunately the web application is SharePoint 2007 which is where my intranet is hosted. I must access various areas of this with both accounts at various times. The domain is in my trusted sites zone (enforced at a corporate level...has been consistent).
April 18th, 2012 5:40pm

Just a thought Jeff, but take a look at your cached accounts to see if there's anything in there you can clear. From "Start" > "Run" type "Control keymgr.dll" and see if there's anything offending in there you can clear out.Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010. Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.
Free Windows Admin Tool Kit Click here and download it now
April 19th, 2012 4:14am

Just a thought Jeff, but take a look at your cached accounts to see if there's anything in there you can clear. From "Start" > "Run" type "Control keymgr.dll" and see if there's anything offending in there you can clear out.Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010. Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.
April 19th, 2012 11:03am

Just a thought Jeff, but take a look at your cached accounts to see if there's anything in there you can clear. From "Start" > "Run" type "Control keymgr.dll" and see if there's anything offending in there you can clear out.Paul Turner http://redmanta.co.uk/blog Twitter: @RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010. Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.
Free Windows Admin Tool Kit Click here and download it now
April 19th, 2012 11:03am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics