.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

Access Denied for site collection administrator

Posted By:      Posted Date: October 28, 2010    Points: 0   Category :SharePoint

When i click 'check permissions' within the site permissions menu and type my user (who is ONLY a site collection admin) im loaded correclty and have listed my permissions - GREAT.


However, every List (including default lists created with the application), when i click on 'List permissions' and see the list IS INHERITING permissions from Home, i then try to check permissions for the same user id as in first test, the small window changes to to 'Access denied'


What is wrong with SP2010 permissions, im really getting fed up with it now.


Can someone please help


View Complete Post

More Related Resource Links

All Users (Including Site Collection Admins) receiving Access Denied from one Site Collection

I usually spend my time in the forums answering questions.  But this time I need the help. I’ve got a client who somehow has succeeded in locking EVERYONE out of one of their Site Collections.  Users can authenticate to the site, but get an accessdenied page when you try to access anything in the site collection, including pages served from the _Layouts virtual directory.  The AccessDenied page shows that they are authenticated, but not authorized.  This is true for Site Collection admins and user’s who have been given Grant Full Control via a Web Application Permission Policy.  Central Admin and one other site collection are behaving normally.  I've already checked for database permissions - the service account can access the database fine. I've also checked for a locked database or overextended quota.  It's not that either. The accessdenied page url references the users list in the root of the site collection as the offending list denying access.   Does anyone have any ideas?Paul Stork SharePoint Server MVP

Help needed! Access denied for the root site for all users except Site Collection Administrators?!


We had implemented an intranet for a customer. Last week on friday we completed the project and they were allowed access to it. Next monday they had done some changes while trying to learn SharePoint (among others the Site Members groups had been deleted) and since then they have been unable to access the root site (e.g. http://intradev/default.aspx) and get a SharePoint Access Denied message. While the root site fails, users can browse to the subsites (e.g. http://intradev/subsite/default.aspx) and view them just fine.

We've noticed that users that are in the Site Collection Administrators group can view the root site just fine. Due to this, we made an educated guess that users had no permissions on the root web. But explicitly adding permissions to the root web does not work. The logon still fails. While it doesn't work in the root web, the permissions are inherited to all subsites, and users can log on and browse those pages just fine.

I've checked pretty much everything. I've tried giving permissions to users in the root site. I've ensured in Central Admin that 'Full Control' does actually give full control of everything. Only thing I've not yet tried is restoring the content database to an earlier backup, where the site was working nicely. 

I'm totally confused by this problem. If you've got any ideas or have encountered a similar

How to customize Access denied page for single Site Collection?


Hi All,

I want to customize Access denied page and that is for only a single Site Collection on my server.

I have tried to custozied content placeholder of AccessDenied.aspx under LAYOUT folder which applicable to all site collection on that server.

Please, guide me.

Thanks in Advance.

Regards, Kaushal

Sharepoint site client access denied


I have an sharepoint application which was working fine.

I encountered a license expired message in sql server enterprise evaluation 2008 version after which i changed the date to 2 months earlier date, I have also changed HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft SQL Server\100\ConfigurationState to 3 after which sql server started working but the issue is that the clients are unable to access the sharepoint site completely. On providing the url the web site requests for logon information and then access is denied. The same url with the same authentication credentials is accessible from the server and the entire application works fine from the server. 

From the  client the below error page appears.

You are not authorized to view this page

You do not have permission to view this directory or page using the credentials that you supplied.

Please try the following:

  • Contact the Web site administrator if you believe you should be able to view this directory or page.
  • Click the Refresh button to try again with different credentials.

HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials.
Internet Information Services (IIS)


SharePoint 2007 Expiration Policy Not working : Access denied for the site


I have a SharePoint 2007 List with Expiration Enabled in Information and Policy Management. I have a datatime column ExpiryDate which i used in Expiration. On Expiration I have chose to delete the item. Through Central Admin I run the expiration by clicking "Process Expired Items now" button. I got the following error in the Windows event viewer.

Expiration Service for site http://md-rmanimaran failed.

Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

EventID: 5016

Category: Information Policy Management 

Where I need to specify the login details to get rid of this error? Anybody Please help..




Object Cache set with Portal Super User accounts. Access denied to site.

I have the same issue on multiple farms. In this example i'll outline this problem for a three tier farm. SharePoint web server SharePoint Application server (hosts central admin) Sql server After installation and configuration i have created two web applications (claims based auth with NTLM). https://portal.contoso.com https://mysite.contoso.com The client connects on the URLs to the web server (1st tier). All is working correctly and they can access the portal and their mysite. The log file keeps reporting that i need to configure the user accounts for the Object Chache. So, i looked up the required steps and executed these conform mcrosoft guidelines (http://technet.microsoft.com/en-us/library/ff758656.aspx) All the steps run seccesfully. But when i connect to the URL i now get an access denied (even with the administrator who is site collection administrator) In the log file i get the following to lines when i connect to the site. Unknown SPRequest error occurred. More information: 0x80070002 Unknown SPRequest error occurred. More information: 0x80070005 I have exact the same issue on two other farms. Marc

Sharepoint 2010 Multi-Tenancy Access Denied on Tenant Administration Site

Hi, I am currently implementing a Sharepoint 2010 Multi-Tenancy solution. Multi-tenancy is the partitioning of service applications in 2010 to allow data to be separated between web applications or site collections. I am using multi-tenancy to separate data and user profiles between site collections hosted on a single web application. I have partitioned the User Profile Service Application and Proxy using Windows Powershell. The paritioned Proxy Application is then associated with the single web application. I am also using the Sharepoint Foundation Subscription Service Application to subscribe to different site collections within the web application. In this way data and user profiles can be separated. However, the tenant administration site, used to manage each collection, does not allow administrator access to manage the User Profile Service. I receive a standard Sharepoint 'Access Denied' error message. No other errors or details are provided. I have tried assigning different accounts to the tenant administration site but the error still appears. The issue arises when I issue the following SPSite Powershell cmdlet: NEW-SPSite -Owneralias DOMAIN\Username -Secondaryowneralias DOMAIN\Username. The attributes provided in the Cmdlet above are used to assign tenant site administrators however, the accounts cannot access the User Profile Service. Any ideas or recommendati

No Site Collection Administrator selection in Site Settings

Just inherited a Sharepoint Site and noticed in the Site Settings in the Central Administration page doesn't have the Site Collection Administrator under Users and Permissions. The version is Standard not Enterprise. I would like to create more than 2 Site Collection Administators.

CAML query to access List data across multiple site collection.

Hi   Is there any way to get the Task List data across multiple site collection using CAML query. Currently, I have the code which will retrieve the data from a single site collection. Below is the code.                           /***************************************************I am using Moss2007.Thanks!Ravi             SPSiteDataQuery q = new SPSiteDataQuery();             q.ViewFields = "<FieldRef Name=\"Title\" />" "<FieldRef Name=\"Status\" Nullable=\"TRUE\"/>";             q.Lists = "<Lists ServerTemplate=\"107\"/>";             q.Webs = "<Webs Scope=\"SiteCollection\"/>";             q.Query = "<Where>" +                                "<Eq>" +                                     "<FieldRef Name=\"Status\" />" + "<Value Type=\"Choice\">Not  Started</Value>" +                                     "</Eq>" +                         "</Where>";             DataTable dt=null;             using (SPSite s = new SPSite("http://banglabguest1:31000/"))             {                 SPWeb w = s.OpenWeb();                 dt = w.GetSiteData(q);                 w = null;             }                              *************************

Users (even site collection administrator) unable to see minor versions in document libraries


I have document libraries with the following settings: major & minor versioning enabled, checkout required & 'only users who can edit items' can see draft (minor) items. The problem is when a user uploads a document (the first document), the library appears empty. However, looking at the summary in 'view all site content' we see that the number of items in the list has incremented by 1. Typically, if the user selects explorer view they can also see the document they just uploaded.

Similar behaviour occurs using the 'New document' option. Before checking in the document for this first time it is visible in the library. If it is checked in as v 0.1 it 'disappears' if it is checked in as v 1.0 it is visible.

I have noticed that if I toggle the Draft Item Security setting by setting it to 'any user who can read items' then set it back immediately to 'only users who can edit items' that the previously hidden items become visible. And any new minor versions created subsequently are also displayed correctly. I can of course do this for existing libraries, but if new libraries are created based on my template this behaviour reoccurs.

Has anyone seen this before?

Organization in Site Collection Administrator



when assign Site Collection Administrator for new Site Collection,can i assign the user that define formerly in Organization Chart?

in other words when you click on notebook beside "username" in "primary site collection administrator" , how work or what include  "organization" part?


Site owner getting Access Denied error on subsite pages.



I am site collection owner.I have created subsites with number of pages(140 pages) with inherit permission form parent site.After creation of subsite I want to edit subsite pages but I am getting Error Message "Access Denied" on some pages.

Anyone please help me...

I am using WSS 3.0



Organization in Site Collection Administrator



when assign Site Collection Administrator for new Site Collection,can i assign the user that define formerly in Organization Chart?

in other words when you click on notebook beside "username" in "primary site collection administrator" , how work or what include "organization" part?


Site Collection Administrator and Recycle Bin


Hey everyone,

I would like to know if it iwas possible to block the site collection administrator from accessing the site collection recycle bin.



Access Denied when trying to give read only access to team site.


I am using a Team Site template with a custom master page for my SharePoint site.  I am now trying to setup a group of users that only have read access to the site.  The site is not inheriting permissions from the parent site and the users are setup with Site Visitor access on both the site and the customer master page.  The problem I am running into is that when I try to access the site with one of the read only accounts, I receive an error that the current user's access is denied.

Am I missing some other areas where I should have changed permissions?
Is there a different way I should have done this?

WSS 3.0 Site Collection Owner Access Only?


Is there any way via CA in WSS 3.0 to limit access to a top level site and all subsites to just the Site Collection Owner and no one else? I am not going to be able to go to all 543 subsites throughout and change their permissions and all settings I have tried in CA takes away all access, even to the Site Collection Admin.

Thank you in advance for your assistance.

- Thank you. Respectfully, Janette M. Ricker

Edit access denied on publishing site - content db upgrade


There was a problem a while back in MOSS that caused users with proper rights to get access denied messages when attempting to edit or create items... something to do with the PermMask field needing the RenderXMLUsingPattern attribute to be set to true.

In a publishing site that was content db upgraded to 2010, I'm seeing the same issue, but PermMask is fine.  The problem seems to be with the "Publishing Site with Workflow" site template, because if I create a new subsite in this collection and give a content management user group any level of rights to it, including full control, the error persists in the new subsite.  However, if I create a vanilla team site in the collection, there's no issue.  The site collection has also been backed up and restored in a test environment to isolate any farm- or server-related issues.  Edit: both environments are also patched to August CU.

Anyone find a way around this without resorting to demolition?

In the logs, I'm seeing the following lines (user actually has 0x7FFFFFFFFFFFFFFF):


PermissionMask check failed. asking for 0x00010000, have 0x00000000
PermissionMask check failed. asking for 0x4000000000000000, have 0xB008431061
PermissionMask check failed. asking for 0x00000005, have 0xB008431061
PermissionMask check failed. asking for 0x000000
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend