Hi Wilson/Paul, I've already run into the issue with SharePoint being unable to get presence, membership and My SharePoint Sites when using AD groups. I'm confident that someone will address this oversight in the next version.
To get around this I was obliged to add users individually for department Team Sites. But there's simply no way I can do this manually at an Intranet level with staff from over 140 schools needing to be categorised. I don't suppose you could automate/update these through scripting? I also encountered the missing toolbar items but only on top-level publishing sites, not with permission groups. I overcame this by setting the creator for all master and layout page files to an existing system account. None of it seems to explain why the timer jobs have stopped running. Regards, Paul Online Developer, ICT CEO Sydney From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Turner Sent: Sunday, 8 February 2009 9:15 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Make sure it is not a permissions corruption issue. This blog details it: http://www.beyondweblogs.com/post/SharePoint-security-access-denied-permission-corruption-problem-Edit-Item-and-Access-Workflows.aspx Basically the "PermMask" field is missing the attribute "RenderXmlUsingPattern". I have had this many times on projects and the code in the blog fixes it. You can create new items but cannot edit them and lots of the standard options/buttons on the toolbars are 'missing' even when you have a 'god' account. Cheers Paul T. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Wampers, Wilson [Talent International] Sent: Friday, 6 February 2009 4:44 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Hi Paul, I've encountered similar issues when using AD Groups combined with SharePoint Groups. (in a Kerberos environment). This appears to cause functionality loss in particular, Presence, Save-As functionality, Site Membership, and My SharePoint Sites and perhaps elsewhere to? When resorting to Individual AD Accounts assigned to SharePoint Groups there doesn't seem to be any functionality loss. Hope this helps. Kind Regards, Wilson From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 14:01 To: ozmoss@ozmoss.com Subject: RE: Permission issues A bit more digging around seems to point to the Profile Import. Firstly, the scheduled imports aren't running. Neither is the compilation schedule for Audiences. They are set. And there are no errors. They're just not running. The timer service is running but the Timer Job status window is showing very large and consistent gaps. Don't know whether any of this is related but it should probably be seen to. Otherwise the boxes are pretty well up-to-date. Users are running IE6 or IE7. I'll just keep digging. No doubt the problem will resolve itself before I find the cause... From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, 6 February 2009 2:06 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues Thanks guys, I'll check out all those avenues first. From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Jeremy Thake Sent: Friday, 6 February 2009 2:03 PM To: ozmoss@ozmoss.com Subject: RE: Permission issues I have seen this before intermittently and it was an issue with the Domain Controller and Kerberos configuration at server level. But also, are you patched up to the latest patches for SharePoint (December 2008 Cumulative Update)? It could possibly be a: * Server caching issue? * Client browser caching issue? * Are you in a farm environment and propagation isn't work properly to web front end servers? From: ozmoss@ozmoss.com [mailto:ozm...@ozmoss.com] On Behalf Of Paul Noone Sent: Friday, February 06, 2009 11:57 AM To: ozmoss@ozmoss.com Subject: Permission issues Hi guys, We're getting permission and authentication issues (again) which I'm hoping someone else has experienced and found a resolution to. Everything was working just fine until very recently. No one knows of (or is willing to admit) any network related changes. Scenario: I grant a user contribute access to a folder in a team site shared library using Mange Permissions. I provide the URL to the folder and when navigating to it they receive an Access Denied screen. If they click "request access" and access is again granted, they continue to get the Access Denied screen. I have checked and rechecked the permissions on the folder and also at the library level (where they have Limited Access). The user exists in all the appropriate AD groups and can happily access all the top-level sites. Does anyone have any idea what could be causing this? It's driving me nuts. Could the mysterious ViewFormPagesLockDown feature be in any way responsible? [Just clutching at straws.] Kind regards, Paul ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists ________________________________ Support procedure: https://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists -------------------------------------------------------------------------------- Support procedure: http://www.codify.com/lists/support List address: ozmoss@ozmoss.com Subscribe: ozmoss-subscr...@ozmoss.com Unsubscribe: ozmoss-unsubscr...@ozmoss.com List FAQ: http://www.codify.com/lists/ozmoss Other lists you might want to join: http://www.codify.com/lists
