Insufficient rights when configuring SSO
When I'm setting up SSO I get the following error: You do not have the rights to perform this operation. The service is started, the service account is a part of the local administrators group; dbcreator, securityadmin on the database; a member of the sharepoint farm administrators group. I'm loooking at the docs at http://technet2.microsoft.com/Office/en-us/library/841080ca-3e3b-4dbc-a081-43c29c76b3551033.mspx?mfr=true and I noticed the Central Administration site doesn't have a "Reader" group. The event log shows the following: Type: ErrorDate: 1/18/2007Time: 6:40:24 PMEvent: 6517Source: Office SharePoint ServerCategory: SSOUser: N/AComputer: SERVERNAMEDescription:User DOMAIN\myuser failed to configure the single sign-on server. The error returned was 0x80630005. Verify this account has sufficient permissions and try again. Any thoughts on cause/workaround? Thanks,Colin
January 19th, 2007 2:37am

There's several causes to this: - Are you logged on locally on the server? - Is the account logged on locally the account that is specified as the sso admin? Or if that was specified as a group did you add the user that is logged in to that group? - Does the SSO service account have the permission to db creator and securityadmin on the database server? Bit more information about your topology would be nice.
Free Windows Admin Tool Kit Click here and download it now
February 2nd, 2007 6:09pm

It's a single server with a separate database server. I was part of the local SSO Admin and the account had both db creator and securityadmin access on the database server. I ended up granting sysadmin access to the account on the database server, reinputting the service accounts and it seems to have gone away. The version of Sharepoint seems quite challenging as far as installation goes. I have encountereda number of problems that isn't helped by a documentation set that is largely marked as "TBD".
February 2nd, 2007 7:03pm

I was getting this error when trying to enable SSO on our MOSS 2007 dev server: "You do not have the rights to perform this operation." I was signed in as domain admin, and tried setting account to domain admin. Ensuring the service logged on as domain account, then stopping and starting the service didn't fix it. Came across this Chris Johnson blog (http://blogs.msdn.com/cjohnson/archive/2005/07/01/434384.aspx) where he suggested modifying the registry for a another SSO error. Find the ImagePath registry entry at the following location: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ssosrv Remove the quotation strings from around the the ImagePath value ... and away you go. I removed the quotes from the registry as he suggested. Then stopped and started the service again. I entered the same domain admin credentials. And it worked.
Free Windows Admin Tool Kit Click here and download it now
May 6th, 2007 4:44am

Okay, here is how to configure MOS SSO without changing the registry: Create a domain account like SSO_Service_Account In the Windows Services applet: on tab "logon" set the "Microsoft Single Sign On Service" to run as this account Add account to groups "Administrators" (for key server)and " WSS_Admin_WPG" on the MOS server Log off as Administrator Log on locally to you key server with this account (not as Administrator) Run Central Admin 3.0, and click manage SSO Enter the same account for property "SSO Administrator Account" This should work :-) Wim De Groote
July 16th, 2007 3:38pm

THANK YOU!!
Free Windows Admin Tool Kit Click here and download it now
November 1st, 2007 8:08pm

Hi Wim, Thanks for your post. i still have a problem though.When i log on with the SSO_Service_Account, am able to run Central admin successfully but when when i try to access "manage SSO" i get Access denied, even when this account is a member of the Farm administrators. Please help, i've really spent alot of time on this one without getting anywhere.
May 1st, 2008 10:07am

I have same problem. After installation of MOSS SP1, SSO did not worked anymore and needed to set up again. When I try to set up with old setting I get following error: A Single Sign-on error has occurred. Please contact an administrator. Details: The network path was not found
Free Windows Admin Tool Kit Click here and download it now
June 6th, 2008 1:31pm

you guys have any luck - Im in the same boat...bjc
August 5th, 2008 10:12am

I followed this article and everything worked like a charm for me.http://www.thorprojects.com/blog/archive/2008/08/02/moss-single-sign-on-setup-step-by-step.aspx
Free Windows Admin Tool Kit Click here and download it now
September 11th, 2008 2:00am

Hi,Earlier, when I was configuring SSO with domainname\spssoservice account I faced the same kind of error You do not have the rights to perform this operation also Error: Access denied while trying to access _layouts pages like operation tab and application management tab, then I did some R&D and at last found the solution, soon I went to my network administrator and told them to add the domainname\spssoservice account to domain admins groups of active directory.After then I was able to solve the problem and able to access the _layouts pages also configured SSO.Thank you,G Vijai Kumar
October 8th, 2008 5:04pm

Hi,Earlier, when I was configuring SSO with domainname\spssoservice account I faced the same kind of error You do not have the rights to perform this operation also Error: Access denied while trying to access _layouts pages like operation tab and application management tab, then I did some R&D and at last found the solution, soon I went to my network administrator and told them to add the domainname\spssoservice account to domain admins groups of active directory.After then I was able to solve the problem and able to access the _layouts pages also configured SSO.Thank you,G Vijai Kumar
Free Windows Admin Tool Kit Click here and download it now
October 8th, 2008 5:04pm

Oh wow...this was the key for me... Log on locally to you key server with this account (not as Administrator) Thanks.
September 9th, 2010 8:32pm

Perfect - thanks!Jason
Free Windows Admin Tool Kit Click here and download it now
December 22nd, 2010 12:32pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics