.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Register
 
Win Surprise Gifts!!!
Congratulations!!!


Top 5 Contributors of the Month
david stephan
Fauzul Azmi
Asad Ali
Post New Web Links

Problems with Farm Account magically losing permissions to certain things

Posted By:      Posted Date: September 02, 2010    Points: 0   Category :SharePoint
 
I don't know what's going on, but this has now happened two times in a row during my rebuild from TP to Beta (completely new build from the OS up).  I'm using the same service account (domain account) as my setup and farm account.  While logged in with my farm account, I install the SP2010 pre-reqs, then the bits, then give it dbcreator and securityadmin roles in SQL, then run the SPT wizard.  Within the wizard, I specify the same account as my farm account, and all works fine and dandy.  After it's done, I'm able to get into Central Admin with this same account and see/do everything.After working with things a while and following the MS instructions for getting the User Profile SA working, if I reboot or logout/login, then I suddenly don't have access to some very important things, such as:- System Settings > Manage Services on Server.  It just disappears completely- Security > Configure Service Accounts.  This does not disappear, but clicking on it causes a prompt saying "Error:Access Denied."  Previously, I was able to go in here and set my service accounts for things like search, user code service, etc (I set them to the proper service accounts)- Configuration Wizards > Launch Configuration Wizard.  I used this multiple times when getting my farm setup, but now it's gone.I've gone so far as to make my farm account all of these things:- Member of B


View Complete Post


More Related Resource Links

SQL Agent - service account permissions - SQL Server 2008

  
Hi @ all   I installed two SQL Server 2008 on Server 2008 R2 Std (principal and mirror) and an AD Server 2008, with sperate service accounts, connect as SA, localy all works fine. I created some agent tasks (PowerShell, T-SQL), but I get some Error massages in the history, that service account of SQL Agent didn't have the permission to query a remote machine(access denied for wmi (HRESULT: 0x80070005 (E_ACCESSDENIED)) and linked database(SQLSTATE 42000 Error(7314)). The simple query with SA permissions on the remote machine works and the powershell scripts with the local domain user works too. But not with the SQL Agent. WHY?? Where ist the different between the user account permisions and service account permissions? Which settings are needed? Example: get-wmiobject -class win32_service -computername 192.168.xxx.xxx| where {$_.name -like '*SQL*'} Powershell Console: works                                     SQL Agent Job: access denied I tried some solutions with user rights, group policies and security permissions but nothing works. like: Configuration -Service Accounts, SQL Server or SQL Server Agent service account http://support.microsoft.com/kb/283811/en-us http://msdn2.microsoft.com/

User Profile Service account Write to AD Permissions

  
I followed this guide here (http://www.harbar.net/articles/sp2010ups.aspx) to provision the UPS service in sharepoint 2010. I found the guide very helpful and informative. Everything is working correctly except for the write back to AD I've followed the steps and have assigned the listed permissions to the UPS service account, however I still get permissiong errors in the FIM GUI Our AD is running in a 2008 environment but is in 2003 mode, so I made sure to add the UPS account to Pre Windows 2000 Compatible access built in group and restart the server so that the new group settings would take affect. Do I need to reprovision the UPS service or something? Or am I missing something completely. (Hopefully the latter lol!) Thanks RKB

Central Administration no longer accessible by any account after changing Farm Account in SharePoint

  
I have a problem, that I no longer can access Central Administration Website, only the Sharepoint itself. I was running installation of Sharepoint 2010 Server with administrative account ImTheAdmin, who is a Domain Admin in the MYDOMAIN domain. Using ImTheAdmin I installed Sharepoint 2010 on one of the Windows 2008 R2 member servers. Besides that, I made ImTheAdmin the primary administrator of the Sharepoint. ImTheAdmin became the only user of this Sharepoint 2010 server after installation.  I installed everything on one box with default installation settings. I used builtin SQL server, not Standard or Enterprise. What then happened is: Using ImTheAdmin account, I opened Central Administration Website, and it said, that I need to change the Farm Account, as the account for Farm was the default one (I think it was network service). So I created a regular domain user in AD Users and Computers called MYDOMAIN\SPFarmAccount. Then using IE, I went to the Central Administration Website page, which is meant for changing farm account usernames. I put in MYDOMAIN\SPFarmAccount down in to the form of Central Administration Website, added the check mark, that it would react to password changes, and pressed Change. Browser worked for a while, and after that nothing seemed to work. Neither my Sharepoint, nor Central Administration website. When going to Central Administra

Failed to change Farm Account in Sharepoint 2010 server, now Central Administration is not accessibl

  
Hello, I have a problem, that I no longer can access Central Administration Website, only the Sharepoint itself. I was running installation of Sharepoint 2010 Server with administrative account ImTheAdmin, who is a Domain Admin in the domain on one of the Windows 2008 R2 member servers. Besides that, I made ImTheAdmin the primary administrator of the Sharepoint. ImTheAdmin became the only user of this Sharepoint 2010 server after installation.  I installed everything on one box with default installation settings. I used builtin SQL server, not Standard or Enterprise. What then happened is: Using ImTheAdmin account, I opened Central Administration Website, and it said, that I need to change the Farm Account, for the account for Farm was the default one (I think it was network service). So I created a regular domain user MYDOMAIN\SharepointFarmAccount. The account name was too long to be as a Windows 2000 name, so it showed there without last 't', e.g. MYDOMAIN\SharepointFarmAccoun. I thought, Windows 2000 is long gone, so I didn't pay much attention, I think everywhere the account SID is important. I don't know if that is the real problem with my failure later, but it might be one of the reasons. I put MYDOMAIN\SharepointFarmAccount down in to the form of Central Administration Website, added the check mark, that it would react to password changes, and pre

Same server farm administrator domain account for both Intranet and Internet Sharepoint site?

  
Hello,   We are planning to setup 2 streams of architecture for both Intranet and Internet web sites. Just wondering whether there is any best practices/security concerns if we are using the same domain account as the Server Farm Administrator for both Intranet and Internet platform?   Thanks,

not able to create a new web application with farm account

  

Hi

I installed sharepoint 2010 on windows 2008 R2 machine. I used the farm account to configure the farm as per the documentation. When i logged in to the central admin application using farm account, "New" button (to create a new web application) is disabled under "Manage Web applications".  farm account is not added to the administrator group of sharepoint server.

The "New" buttons gets enabled if i run "Internet explorer" as administrator. Please advise what could be the solution to fix this.

Regards

Sujasree


Farm account has a MySite - should it be deleted?

  

All,

While configuring Form Based User My Sites I discovered that the System and farm accounts have My Sites (in the Shared Service Provider).

This sounds like a bad practice and I should delete these My Sites. I did a few searches on the Web and didn't find any data about this...

Should I delete these My Sites or just leave them alone?

Thanks,

 

Jim


Object Cache: The super reader account utilized by the cache does not have sufficient permissions to

  
Hi Just created a site collection on freshly installed SP2010 server and I get this error in the even log when I created site collection ( timing could be a coincidence) Message is as bellow which does say what needs to be done but need more info on portalsuperreaderaccount account before using the suggested solution. ( Note the stsadm although) Object Cache: The super reader account utilized by the cache does not have sufficient permissions to SharePoint databases. To configure the account use the following command 'stsadm -o setproperty -propertyname portalsuperreaderaccount -propertyvalue account -url webappurl'. It should be configured to be an account that has Read access to the SharePoint databases. Additional Data: Current default super reader account: NT AUTHORITY\LOCAL SERVICE Regards Yogesh

Problems with permissions on custom sitemap

  

 

I have added a custom sitemap to my webconfig:

 

<add name="CustomXmlContentMapProvider" siteMapFile="_app_bin/tmw.sitemap" type="Microsoft.SharePoint.Navigation.SPXmlContentMapProvider, Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" />

 

I then created this map in _app_bin and referred to it within my sitedefinition.  All is well, it works fine.  However unless the file has read/execute permission for all, it will throw an error every morning.  That is the weird part, it doesn't occur throughout the day, just for a few hours in the morning ending before 9:00am.  This makes no sense to me since the webserver can read the file and none of the other files in that directory have special permissions.  Does anyone know why this might occur?  Here is the error thrown (when the file doesnt have r/x for all and only in the morning):

 

Request information:

    Request URL:

Install problems - think I've messed things up!

  

Hi,

I'm trying to install the express 2008 R2 version.  I have successfully installed this programme once but realised my predecessor had already installed a previous version.  When I opened my version, everything was setup already so I thought I'd just uninstall everything and install again.

3 hours later and I'm no closer to finding a solution.  I had issues where I couldn't delete files as they were being used.  I overcame this and thought I'd managed to delete everything but I don't think I have.

When I try to install using setup again, nothing seems to be happening.  Here is a copy of the log - please help!!

Thanks in advance.

 

2010-10-11 12:40:21 Slp: Log provider 'Microsoft.SqlServer.Chainer.Infrastructure.LogProviderFile' has been registered
2010-10-11 12:40:21 Slp: Log provider 'Microsoft.SqlServer.Chainer.Infrastructure.LogProviderStatus' has been registered
2010-10-11 12:40:22 Slp: Reading XML resource 'Microsoft.SQL.Chainer.PackageData.Package.xml'
2010-10-11 12:40:22 Slp: Reading schema resource 'Microsoft.SQL.Chainer.Package.Package.xsd'
2010-10-11 12:40:22 Slp: Document 'Microsoft.SQL.Chainer.PackageData.Package.xml' validated with schema 'Microsoft.SQL.Chainer.Package.Package.xsd' has been successfuly loaded into datastore path '/Datastore/Package'

SharePoint Farm - Claims Based Authentication Problems

  

Hello guys,

I have a SharePoint farm with 2 WFE servers(SH01 and SH02) and 1 Application server(SH03) where there's the Central Admin. When I create a WebApplication with Windows Authentication I can access it normally in both address http://SH01:10000 and http://SH02:10000. When I create a WebApplication with Claims Based Authentication enabling FBA when I try to access it with the address above occurs an error:

The WebApplication at http://SH01:10000/  could not be found. Verify that you have typed the URL correctly. If the URL should be serving existing content, the system administrator may need to add a new request URL mapping to the intended application.

I have noticed that the difference between authentication is that FBA redirect to "_login/" when I can choose what type of authentication I want to login(In this case Windows or Forms).

Are there some extra configuration that I have to do to solve this problem?

Thanks


André Rentes

Change Farm Account?

  

Hello,

SharePoint 2010, I am trying to change the Farm Account. I made the change to a new farm account under Central Admin > Security > Configure Service Accounts. The change seems to have gone through, however, when I delete the old user account that was being used for the Farm Account and I try to backup sharepoint it fails. If I re-create the old farm account in Active Directory (don't change anything in Central Admin) I can backup again. The specific error I get from STSADM is "The specified user or domain group cannot be found". I'm assuming that the old Farm Account still have something it's holding onto in SharePoint 2010 that the new farm account should have and doesn't.

Any help?


Owner, Quilnet Solutions

Rule "User account requirement for Farm administrator " failed

  
Hi guys,

I'm trying to install the PowerPivot for SharePoint (SP 2010) following the instructions in http://msdn.microsoft.com/en-us/library/ee210616(SQL.105).aspx

The problem is the following step:  "In Installation Rules, click Next."

Image of error: http://yfrog.com/0rproblembzlj

I'm administrator of everything. SharePoint, SQL Server, machine...

Any idea?

Need help!

Top .NET Performance Problems and how to avoid them

  
Every time I work with one of our .NET customers to help them with managing their application performance I come across the same problems as seen with other clients before: lots of ADO.NET queries, many hidden exceptions in core or 3rd party .NET libraries, slow 3rd party components, inefficient custom code

SharePoint 2007 Workflows - Things to Consider Before You Start

  
SharePoint 2007 (MOSS) utilizes the Workflow Foundation (WF) to enable workflows on lists and content types. But before you start doing cartwheels there are few things you should know before you get started. The experiences I'll be discussing are not from book smarts but from building real MOSS solutions that are in production today.

Visual Studio 2008 Memory problems

  

My memory in task manager reaches about 900,000K  and I don't know why it does this. Definately slows everything down, especially when I rebuild my tableAdapters, takes about 30 seconds sometimes to rebuild the project.


SqlServer - Windows Account to install Application from Gallery

  

Referring to this tutorial: http://www.asp.net/webmatrix/tutorials/download-and-install-an-asp-net-application

I selected umbraco cms and got this wizard:


I already have Standard Sql Server 2005 on my machine which I wanted to us for above DB and not SqlExpress.

I did not remember "sa" account pwd nor I use explicitly any account to connect to my Sqlserver. I use Windows Authentication account i.e implicit authentication. So I created new account and gave all rights and used it in the above wizard and was able to install the database after some struggle.

My question is: What if I want to use my Windows Account to install the database above? Why the wizard don't have any option to use Windows Integrated Authentication?

Note: I can create the DB with external user I created, just looking specifics for using Windows Authentication for above installation.


Categories: 
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend