.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
david stephan
Gaurav Pal
Post New Web Links

All Users (Including Site Collection Admins) receiving Access Denied from one Site Collection

Posted By:      Posted Date: August 31, 2010    Points: 0   Category :SharePoint
I usually spend my time in the forums answering questions.  But this time I need the help. I’ve got a client who somehow has succeeded in locking EVERYONE out of one of their Site Collections.  Users can authenticate to the site, but get an accessdenied page when you try to access anything in the site collection, including pages served from the _Layouts virtual directory.  The AccessDenied page shows that they are authenticated, but not authorized.  This is true for Site Collection admins and user’s who have been given Grant Full Control via a Web Application Permission Policy.  Central Admin and one other site collection are behaving normally.  I've already checked for database permissions - the service account can access the database fine. I've also checked for a locked database or overextended quota.  It's not that either. The accessdenied page url references the users list in the root of the site collection as the offending list denying access.   Does anyone have any ideas?Paul Stork SharePoint Server MVP

View Complete Post

More Related Resource Links

Help needed! Access denied for the root site for all users except Site Collection Administrators?!


We had implemented an intranet for a customer. Last week on friday we completed the project and they were allowed access to it. Next monday they had done some changes while trying to learn SharePoint (among others the Site Members groups had been deleted) and since then they have been unable to access the root site (e.g. http://intradev/default.aspx) and get a SharePoint Access Denied message. While the root site fails, users can browse to the subsites (e.g. http://intradev/subsite/default.aspx) and view them just fine.

We've noticed that users that are in the Site Collection Administrators group can view the root site just fine. Due to this, we made an educated guess that users had no permissions on the root web. But explicitly adding permissions to the root web does not work. The logon still fails. While it doesn't work in the root web, the permissions are inherited to all subsites, and users can log on and browse those pages just fine.

I've checked pretty much everything. I've tried giving permissions to users in the root site. I've ensured in Central Admin that 'Full Control' does actually give full control of everything. Only thing I've not yet tried is restoring the content database to an earlier backup, where the site was working nicely. 

I'm totally confused by this problem. If you've got any ideas or have encountered a similar

Access Denied for site collection administrator


When i click 'check permissions' within the site permissions menu and type my user (who is ONLY a site collection admin) im loaded correclty and have listed my permissions - GREAT.


However, every List (including default lists created with the application), when i click on 'List permissions' and see the list IS INHERITING permissions from Home, i then try to check permissions for the same user id as in first test, the small window changes to to 'Access denied'


What is wrong with SP2010 permissions, im really getting fed up with it now.


Can someone please help


How to customize Access denied page for single Site Collection?


Hi All,

I want to customize Access denied page and that is for only a single Site Collection on my server.

I have tried to custozied content placeholder of AccessDenied.aspx under LAYOUT folder which applicable to all site collection on that server.

Please, guide me.

Thanks in Advance.

Regards, Kaushal

Hide other AD users in Seperate Site collection.

I a am new to sharepoint as you can tell this is my first post. I have several site collections and each of them has its own OU's with users in them. What  I want to know is that is it possible to create a site collection and have users that logs in only see users within their own OU's and not other users in active directory.

CAML query to access List data across multiple site collection.

Hi   Is there any way to get the Task List data across multiple site collection using CAML query. Currently, I have the code which will retrieve the data from a single site collection. Below is the code.                           /***************************************************I am using Moss2007.Thanks!Ravi             SPSiteDataQuery q = new SPSiteDataQuery();             q.ViewFields = "<FieldRef Name=\"Title\" />" "<FieldRef Name=\"Status\" Nullable=\"TRUE\"/>";             q.Lists = "<Lists ServerTemplate=\"107\"/>";             q.Webs = "<Webs Scope=\"SiteCollection\"/>";             q.Query = "<Where>" +                                "<Eq>" +                                     "<FieldRef Name=\"Status\" />" + "<Value Type=\"Choice\">Not  Started</Value>" +                                     "</Eq>" +                         "</Where>";             DataTable dt=null;             using (SPSite s = new SPSite("http://banglabguest1:31000/"))             {                 SPWeb w = s.OpenWeb();                 dt = w.GetSiteData(q);                 w = null;             }                              *************************

All users have "Limited access" to MOSS Site even Site Admins


hi All.

We are running MOSS 2007 Stand-alone server on server 2003 SP2.

We had perfectly running MOSS site with Document Libraries and Custom Lists with almost 10 subsites. 

Suddenly today no one can edit or upload any new items or documents.

Under "Site Permissions", all the users have "Limited Access" permission level including Site Admins as well.

I have logged in as Site Admin and "Edit user Permission" under "Site Permissions" is not available anymore.

I know its a security issue but is there any way I can reset the security settings on Parenet Site.

(All the the subsites inherit security from the parent site)

STSADM command to add 'Site Collection Admins'?


Can someone help me with stsadm command to add user as site collection admin?

Users (even site collection administrator) unable to see minor versions in document libraries


I have document libraries with the following settings: major & minor versioning enabled, checkout required & 'only users who can edit items' can see draft (minor) items. The problem is when a user uploads a document (the first document), the library appears empty. However, looking at the summary in 'view all site content' we see that the number of items in the list has incremented by 1. Typically, if the user selects explorer view they can also see the document they just uploaded.

Similar behaviour occurs using the 'New document' option. Before checking in the document for this first time it is visible in the library. If it is checked in as v 0.1 it 'disappears' if it is checked in as v 1.0 it is visible.

I have noticed that if I toggle the Draft Item Security setting by setting it to 'any user who can read items' then set it back immediately to 'only users who can edit items' that the previously hidden items become visible. And any new minor versions created subsequently are also displayed correctly. I can of course do this for existing libraries, but if new libraries are created based on my template this behaviour reoccurs.

Has anyone seen this before?

Not able to add all users from other trusted Domain to site collection


The environment consists of a one-way trust relationship, I have no problems adding users from the local domain, however I can only add a few select users from the domain that the trust is setup for. This appears to be the case for only one site collection, as a previous site collection can authenticate to and add users from this other trusted domain. 

I have checked the following article in order to authenticate objects in the other trusted domain, but it appears to have not helped.


What steps should I verify so that I can add users to given stie collections?

locking down site collection to users


I have a site collection with many custom SharePoint security groups. As a result I have many different users in these groups.

I need to take this site 'offline' for maintenance but many people would still have shortcuts, etc to lists, etc. and can still access the site.

Other than backing up the site collection (stsadm -o backup) and deleting the site collection, is there any way to make the site unavailable.

Redirecting users on the home page is not an option as they can still access the content.

WSS 3.0 Site Collection Owner Access Only?


Is there any way via CA in WSS 3.0 to limit access to a top level site and all subsites to just the Site Collection Owner and no one else? I am not going to be able to go to all 543 subsites throughout and change their permissions and all settings I have tried in CA takes away all access, even to the Site Collection Admin.

Thank you in advance for your assistance.

- Thank you. Respectfully, Janette M. Ricker

Site collection access



I have a site collection that I can't access the root page getting the error below. I don't have issues accessing sites or sub-sites under that site collection by using the direct URL for those sites. Also I don't have issues accessing other site collections' root page.

Any help is greatly appreciated.


Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: System.Runtime.InteropServices.COMException: Exception from HRESULT: 0x80041054

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

Stack Trace:

MOSS 2007 - Only site Collection Administrators can access Default.aspx



I have MOSS 2007, and there is a strange problem: on Default.aspx page can access only site Collection Administrators. Other users take this access denied message:

Error: Access Denied 

Current User 

You are currently signed in as: domain**\user**

Sign in as a different user 

Request access

On other pages they can access, by example on http://portal/_layouts/settings.aspx other users can access(if they have these rights).

Other users are members of Owners Group(Root site > People and Groups > Home Owners(in "Group Settings" there is Full Control checkbox).
They are also added to Site Settings > Permissions directly with Full Control. no effect.

I think it is very strange, it looks like some permissions for root page are broken..

Extend site collection Users reporting

Is there a way that the Unique Users found in "

Portal > Site Settings > Site Collection Usage Summary > Site collection users

  report can be extended 30/60/90 days as a way to look at actual unique users over a given period?  My fear is that users that login in a given period are being recounted the following month as unique for that period.  Anyone know of a way that this can be accomplished easily?  LOL

Adding users to a site collection with onlysearchwithinsitecollection enabled


We recently enabled  peoplepicker-onlysearchwithinsitecollection  and peoplepicker-Peopleeditoronlyresolvewithinsitecollection for one of our site collections.  Unfortunately it seems that once these properties are enabled no users from outside of the site collection can be added to the site collection, even by the site collection administrator. 

We did find that users can still be added to the site via power shell and other means but this is a less desirable solution for us.  Does anyone know if it is possible to only enable the resolve within site collection functionality for users other than SCAs or is it pretty much all or nothing?




Site Collection Usage Summary: No Data Available


Usage analysis processing is enable for my farm in both Central Administration and in the SSP.

I've checked TImer Job Status and the three timer jobs responsible for doing the log analsis are all running.

I've also checked the log file locations and the log files are being generated.

Yet when I browse the "Site collection usage summary" report (SpUsageSite.aspx) I get the following:

No data is available for this report. Usage analysis might have been enabled only recently, or there might have been insufficient usage to result in any values for the report.

My farm is running 2007 Enterprise SP2 (

Can someone confirm if this issue was fixed with one of the CU's that were issues post-SP2?

Site Collection Usage Report Include Outlook?


Hi all,

Does anyone know if the Site Collection Usage Report includes activity that occurs from Outlook? For example, if a user contributes to a discussion board without ever physically touching the site or if the user just reads list content from Outlook, is this included?

ANY help at all is greatly appreciated.


ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend