While i have a MOSS 2007 farm in my production environment, and i get a domain account named 'mossmgmt' which is neither OS administrator nor farm administrator. The problem is when i added this account 'mossmgmt' to the 'Policy for Web application' with all zones and full controls in my central administration, the account still don't have permission to do what a site collection administrators can do. It even can not see the 'site actions' menu. Anyone can tell me the possible problem? Where do i need to make any configuration? Thanks!

Web application policy does work. Are you sure that you've selected the correct web application? There's a sort of non-intuitive UI for selecting the web application and there are typically multiple web apps in a farm.--Paul Galvin, Computer Generated Solutions (CGS) Microsoft MVP - SharePoint Blogging @ http://feeds.feedburner.com/PaulGalvinsSharePointSpace Twitter @ http://www.twitter.com/pagalvin

I am not sure and never heard of Policies not working. Please check as Paul suggested above to make sure that your account and web application are correct. Also, please check if there is any Policy above that is not denying you access explicitly. anyways, that would not let you acess the site even. Incase issue persists, you will have to rerun sharepoint technologies wizard on the servers.I LOVE MS..... Thanks and Regards, Kshitiz (Posting is provided "AS IS" with no warranties, and confers no rights.)

I have checked my policy settings for many times and i am sure i have selected the right web application and grant the right account. Is that possible that when i add a policy for web application, there is a job automatically created by MOSS? And if this job failed, then the web application policy dose not work. I installed my central administration in my AP server(for index and crawl), and another web server for users to visit.