Hello all.It's been reported to me that users are regularly being deleted from a SharePoint site. As in, they're granted Contribute on Friday, and on Monday their access is revoked!Usually I blame user error or custom permissions on a list in the site, but today I've already checked the "common issues," and it doesn't seem to be any of them!Here's a list of what I've tried:Checked the SharePoint security audit/log to find out if anyone is deleting his access. They're not. Unless I'm misinterpreting how the log is read. I've found the user's "secret User ID number" and searched for it, does not occur. The only hits I get in the security audit is when the site admin adds them back to the site :)Checked the user profile import logs, to see if they got deleted. Was not there. This was an unlikely scenario anyway, because the user is not losing his permissions on any other site. Just this one out of the many sites.I'm out of places to look. The only weird thing on this site is that the user is part of an AD group, and that group is directly granted Contribute permissions on the site.Again, I'd usually attribute this to "user error", but ...Any suggestions?

Weird. What if you create a site that only you have access to change the permissions on and add some users? Then keep an eye one it. Definitely odd behavior though.JohnSharePoint911: SharePoint Consultinghttp://www.rossonmoss.com

I'm just guessing that it's the AD group causing problems, so I did the traditional thing: removed permissions completely/re-added permissions. We'll see...I would make a new site to try and isolate the problem, maybe if this problem recurs I'll try testing by duplicating permissions on a dummy site.UPDATE: The problem has recurred. Lionel, please don't mark this as an answer again, it isn't an answer, it's closer to a cry for help than an answer.I should clarify: this time, one of our users is removed from several sites all at once. I've looked in the site collection under People And Groups->User Information, to look at her account, and it says that "System Account" edited her account at 1/26/2009 at 10:00PM. So I'm deeply suspicious an automated job is updating her account and (somehow) silently killing her access.I'm going to delete her account from the site collection then re-add her account. It's ugly, but I'm at the "let's try things, even if we're not sure why" stage now.

PSeale,Have you found any solutions to this problem? I am experiencing the exact same problem. We thought it was "user error", but logs did not show any user events. We are now positive users are not changing the permissions. There were very old and brand new libraries which have had their permissions changed.

I am also having the same issue, began by blaming the site owner for poor permissions management... But as mentioned, it happens on several different "webs" all at the same time, and the webs are managed by different people, so I doubt they are that coordinated... I did recently see a mysite creation error in the event log, for the very same user that keeps getting removed. The error was that a the name "User" already existed. (during mysite creation) Anyone have any ideas? I am on MOSS 2007 SP1 x64 (SP2 coming soon) Thanks for any assistance. Joshua Fuente Farm Administrator SharePoint Products & Technologies

I have experienced the same thing with two different farms at two different jobs. The first one, we had just merged networks with a company that was acquiring us so I thought it may have had to do with users migrating from one domain to the next, but we were told by our AD group that wasn't the case. This behavior has been reported at the farm at my new project site also. Not really sure why it's happening here, but there's definitely an explanation beyond blaming the users. This thread has been idle for a while, anyone have any idea?

I have had this happen intermittently too. Most recently this morning. We applied a patch that stopped the UPS service. I started it back up and then started the UPS synching service. After this the site menu was correct and it seemed as if all the users had correct access. However some users were missing from their groups. The weird thing is it seems (at least for us) to happen on recently added users and/or groups. I also wanted to add that we used Claims based authentication. Its almost like it is not saving the last month or so of any users added to groups?? At first I was guilty of blaming the end users of inadvertently deleting users but this is just not the case here. Hope there is a solution found soon.

Yes I am having this too with no obvious sign of an answer. I am a little disturbed that Microsof are not taking it more seriously. I am in the position of having to explain to my internal clients why users cannot see important information that they need to see urgently. Not a pleasant conversation. We have found it happening in particular when we remove users from a user group and then add them back on. Not all users have problems but about 50% do (of those who report back rather than give up!). Our back end servers are split for load bearing and I we are investigating if caching is out of sequence between the two. So far have found it impossible to reproduce. We have created new sites, added new dummy users, removed them, added them back and all is fine. To get more information we are tracking when users are created, getting them all to confirm they can get access and have out reporting on various servers. If we find something I shall add it here.

Our support group is also getting reports of AD groups automatically getting removed from SharePoint groups. Very irritating issue.

We are having a very similar issue. I have found that the users who lost rights had their account's tp_isActive flag set to false in the content database userinfo table.