Our site is set up so that beside the spsadmin admin account, there are spsadmin2 and spsadmin3 accounts that are assigned to additional users. These accounts are listed as farm administrator and site collection administrators. These accounts are to be used by only one person each. That way, if an action takes place, it is more likely that an audit trail some place will be found to show the action. Recently, however, one of the people with one of these accounts reported being unable to access one of the sharepoint sites under the farm. It was our understanding that someone listed as the farm and site collection administrator should be able to access all sites. Is there something additionally that must be granted so that the person using an account such as this does have the same privleges as spsadmin? Thank you.

Can you provide more details on the followings 1. Access denied is coming for a particluar a/c on a specific site or all a/c's on a specific site? If it is on list/library then confirm if the access denied is coming for all a/c's or not. 2. If you are using a webpart page then check and confirm that the page is published or has a published version. 3. what version of sharepoint are you using? 4. Can you check if the masterpage is in published version or not? 5. Are all these a/c added as site collection admins or have full control given via Central admin on the web applications?

Can you provide more details on the followings > 1. Access denied is coming for a particluar a/c on a specific site or all a/c's on a specific site? If it is on list/library then confirm if the access denied is coming for all a/c's or not. It appears that the access denied is just for the one person. > 2. If you are using a webpart page then check and confirm that the page is published or has a published version. I don't know what that means - how do I check for this? > 3. what version of sharepoint are you using? MOSS SharePoint 2007 SP1 > 4. Can you check if the masterpage is in published version or not? I would if I knew how to do this. Is there a pointer to how? > 5. Are all these a/c added as site collection admins or have full control given via Central admin on the web applications? Is there a way that I can verify this? In Central Admin, they are listed as site collection admin. I don't know what "have full control given: means.

Hi, > 2. If you are using a webpart page then check and confirm that the page is published or has a published version. I don't know what that means - how do I check for this? Go to the pages library at your site and for a page go to the dropdown and see if the option of check out or check in is available. If check in is available then it is checked out by someone else. A symbol will also show the same over there. If it is checked out to someone else and no checked in version exists then even with farm account you will not be abale to access it. > 4. Can you check if the masterpage is in published version or not? I would if I knew how to do this. Is there a pointer to how? Go to the site settings page. There you will see master page settings and also master page gallery. First in the master page settings check wich master page you are using for your site. Then go to master page gallery and check whether that page is published or not. These pages have the extension of .master. I hope this will help. Thanks, Rahul Rashu

Farm administrators do not have access to all site collections created. If they need admin permissions they need to be added when the site collection is created or after that. The easiest way to grant specific users permission on a web application (which would automatically grant permission to all site collections beneath) is by using Central Admin -> Application Management -> Policy for Web Application -> Select all zones -> Add user (If user should be a Admin use "Full control" and set account as 'System Account'). Hope this helps.Here to help.

When I did this, the admin account could access the site as desired. Thank you so much