Hi Paul,
I've encountered similar issues when using AD Groups combined with SharePoint Groups. (in a Kerberos environment). This appears to cause functionality loss in particular, Presence, Save-As functionality, Site Membership, and My SharePoint Sites and perhaps elsewhere to? When resorting to Individual AD Accounts assigned to SharePoint Groups there doesn't seem to be any functionality loss. Hope this helps. Kind Regards, Wilson From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 14:01 To: ozmoss@ozmoss.com Subject: RE: Permission issues A bit more digging around seems to point to the Profile Import. Firstly, the scheduled imports aren't running. Neither is the compilation schedule for Audiences. They are set. And there are no errors. They're just not running. The timer service is running but the Timer Job status window is showing very large and consistent gaps. Don't know whether any of this is related but it should probably be seen to. Otherwise the boxes are pretty well up-to-date. Users are running IE6 or IE7. I'll just keep digging. No doubt the problem will resolve itself before I find the cause... From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 2:06 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Thanks guys, I'll check out all those avenues first. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Jeremy Thake Sent: Friday, 6 February 2009 2:03 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues I have seen this before intermittently and it was an issue with the Domain Controller and Kerberos configuration at server level. But also, are you patched up to the latest patches for SharePoint (December 2008 Cumulative Update)? It could possibly be a: * Server caching issue? * Client browser caching issue? * Are you in a farm environment and propagation isn't work properly to web front end servers? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click "request access" and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss <http://www.codify.com/lists/ozmoss> Other lists you might want to join: http://www.codify.com/lists <http://www.codify.com/lists> ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss <http://www.codify.com/lists/ozmoss> Other lists you might want to join: http://www.codify.com/lists <http://www.codify.com/lists> ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss <http://www.codify.com/lists/ozmoss> Other lists you might want to join: http://www.codify.com/lists <http://www.codify.com/lists> ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss <http://www.codify.com/lists/ozmoss> Other lists you might want to join: http://www.codify.com/lists <http://www.codify.com/lists> -------------------------------------------------------------------------------- Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists
