Access Denied to Site Collection for Everyone Including Site Collection Administrator

I have a site collection with several subsites which I can no longer access. I am listed as both a farm administrator and site collection administrator in this installation. I can access a separate site collection on the same web application,
and I can access the Central Administration site. All accounts including mine, get an access denied error when navigating to any site on the aformentioned site collection.
I was not having any access issues until this morning when I was doing some housekeeping and changing group membership at the root site level, and also deleting a few custom sharepoint groups that were no longer needed. At some point after deleting
one of these custom groups, I began getting the access denied errors.
I found the error below in the uls viewer, but haven't seen anything that looks related in the windows application log. I had some similar issues yesterday, but was able to resolve them by toggling Inherit Permissions, Stop Inheriting permissions from
a subsite using SharePoint Designer. I've had no such luck with SharePoint Designer today. I've scoured this forum and the web for a solution, but have not found any issue that looked the same as mine. Any help would be appreciated.
PortalSiteMapProvider was unable to fetch children for node
at URL: /, message: Thread was being aborted., stack trace:
at System.Threading.Thread.AbortInternal()
at System.Threading.Thread.Abort(Object stateInfo)
at System.Web.HttpResponse.End()
at Microsoft.SharePoint.Utilities.SPUtility.Redirect(String url, SPRedirectFlags flags, HttpContext context, String queryString)
at Microsoft.SharePoint.Utilities.SPUtility.RedirectToAccessDeniedPage(HttpContext context)
at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(HttpContext context)
at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex)
at Microsoft.SharePoint.Library.SPRequest.GetSubwebsFiltered(String bstrParentWebUrl, UInt64 iPermMaskForUnique, UInt64 iPermMaskForInherited, Int32 nWebTemplate, Int16 nProvisionConfig, Int32 lToLinkRecurringMeeting, Object& pvarSubwebs, Object&
pvarSubwebIds, Object& pvarLangs, Object& pvarTitles, Object& pvarDescriptions, Object& pvarCreationTimes, Object& pvarModifiedTimes, Object& pvarUserIsWebAdmins, Object& pvarWebTemplates, Object& pvarProvisionConfigs, Object&
pvarMeetingCounts)
at Microsoft.SharePoint.SPWeb.SPWebCollectionProvider.GetWebsData(String[]& strNames, String[]& strServiceRelUrls, Guid[]& guidWebIds, Int32[]& nLanguages, String[]& strTitles, String[]& strDescriptions, String[]& strCreationTimes,
String[]& strModifiedTimes, Boolean[]& bUserIsWebAdmins, Int32[]& nWebTemplates, Int16[]& nProvisionConfigs, Int16[]& nMeetingCounts, Int32[]& nUIVersions, Int32[]& nFlags, String[]& strMasterUrls, String[]& strCustomMasterUrls)
at Microsoft.SharePoint.SPWebCollection.EnsureWebsData()
at Microsoft.SharePoint.SPWebCollection.get_WebsInfo()
at Microsoft.SharePoint.Publishing.Navigation.PortalWebSiteMapNode.FetchDynamicItems(PublishingWeb pubWeb, NodeTypes includedTypes, Boolean& websFetched, Boolean& pagesFetched)
at Microsoft.SharePoint.Publishing.Navigation.PortalWebSiteMapNode.PopulateNavigationChildrenInner(NodeTypes includedTypes)
at Microsoft.SharePoint.Publishing.Navigation.PortalWebSiteMapNode.PopulateNavigationChildren(NodeTypes includedTypes)
at Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapNode.GetNavigationChildren(NodeTypes includedTypes, NodeTypes includedHiddenTypes, Boolean trimmingEnabled, OrderingMethod ordering, AutomaticSortingMethod method, Boolean ascending, Int32 lcid)
at Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapNode.GetNavigationChildren(NodeTypes includedTypes, NodeTypes includedHiddenTypes, OrderingMethod ordering, AutomaticSortingMethod method, Boolean ascending, Int32 lcid)
at Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapNode.GetNavigationChildren(NodeTypes includedHiddenTypes)

Make sure you give supper user account with following format.
Moral of the story: if
you are in claims mode, you will need to use the claims user name (i:0#.w|domain\user).
some one point out that.
http://blogs.msdn.com/b/andrasg/archive/2010/09/30/setting-the-super-user-account-on-sharepoint-2010-and-getting-access-denied-errors-afterwards.aspx
Sutha Thavaratnarajah

Similar Messages

ExceptionMessage: 'Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition

Hi,
I am getting error "Access Denied" when my code tries to get "SPWebService.JobDefinition" with an AppPool account of content site. The same core runs correctly for the AppPool of CentralAdmin site.
Lemme provide some background of the servers
- We have multi-server FARM
- WFE and APP servers are in different domains, there is one-way trust between the domains.
- We have UAC (User Access Control) set as high on each server
- My site is internet site
Lines of Code are following
SPWebServiceservice =
SPWebService.ContentService
varsyncTimerJob =
fromSPJobDefinitionjob
inservice.JobDefinitions
                   wherejob.Name
== "MyJob"
selectjob;
I am running the above code with in SPSecurity.RunWithElevatedPrivileges so the above code is running with APP POOL account. I m getting
the error in the 2nd line where I have a LINQ query. And I m assuming this is because of "service.JobDefinition" line. Can anyone help me?
Detailed Error:
An exception has occurred.   ExceptionType: 'TargetInvocationException'   ExceptionMessage: 'Exception has been thrown by the target of an invocation.'   StackTrace: '
at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)
at System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
at Microsoft.SharePoint.Administration.SPAutoSerializingObject.GetInstanceFromType(Type type, String typename)
at Microsoft.SharePoint.Administration.SPPersistedObject.GetInstance(XmlNode xml, Guid classId, Boolean bResolveMissingTypes)
at Microsoft.SharePoint.Administration.SPFileSystemCache.FetchObjectFromFileSystem(Guid id)
at Microsoft.SharePoint.Administration.SPFileSystemCache.GetValue(Guid id)
at Microsoft.SharePoint.Administration.SPCache`2.get_Item(K key)
at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid id, Boolean checkInMemoryCache, Boolean checkFileSystemCache)
at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid id)
at Microsoft.SharePoint.Administration.SPConfigurationDatabase.Microsoft.SharePoint.Administration.ISPPersistedStoreProvider.GetObject(Guid id)
at Microsoft.SharePoint.Administration.SPPersistedObjectCollection`1.get_Item(Guid objId)
at Microsoft.SharePoint.Administration.SPPersistedObjectCollection`1.<GetEnumeratorImpl>d__0.MoveNext()
at System.Linq.Enumerable.WhereEnumerableIterator`1.MoveNext()
at System.Linq.Enumerable.Count[TSource](IEnumerable`1 source)
at Project1.SharePoint.Common.UtilityHelper.IsSyncSchedulingDisabled(StringBuilder logMessage)'   Source: 'mscorlib'   TargetSite: 'System.Object InvokeMethod(System.Object, System.Object[], System.Signature, Boolean)'   ------------------------------------------------------------
Inner exception:   ------------------------------------------------------------    ExceptionType: 'SecurityException'    ExceptionMessage: 'Access denied. Only machine administrators are allowed to create administration
service job definitions of type: Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition, Microsoft.TeamFoundation.SharePoint.WebAccess, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a.'    StackTrace:
at Microsoft.SharePoint.Administration.SPAdministrationServiceJobDefinition..ctor(String name, SPService service, SPServer server, SPJobLockType lockType)
at Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition..ctor()'    Source: 'Microsoft.SharePoint'    TargetSite: 'Void .ctor(System.String, Microsoft.SharePoint.Administration.SPService, Microsoft.SharePoint.Administration.SPServer,
Microsoft.SharePoint.Administration.SPJobLockType)'
Any help will be appreciated.

The bottom of your stack trace begs to differ:
at Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition..ctor()'
Source: 'Microsoft.SharePoint'    TargetSite: 'Void .ctor(System.String, Microsoft.SharePoint.Administration.SPService, Microsoft.SharePoint.Administration.SPServer, Microsoft.SharePoint.Administration.SPJobLockType)'
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs

Access denied in Adobe Help for LR3.3

Cannot utilize Lightroom Help (have LR3.3 currently) - receive message "Access Denied We're sorry you're not allowed access to the service you requested. If you feel you should have access, please contact the appropriate authorities and give them you IP address: XX.XX.XXX.XXX. Thank you for your patience."
I found an older response in this forum with LR3 beta that identified a similar issue and suggested copying a HelpCfg file from C:\Program files(x86)\Common Files\Adobe and paste it into C:\Program Files\Common Files and then restart Adobe Community Help and go to Edit>Preferences and click Update each Help package. Did all of this but in the preference section, the Update tabs do not function and the Status of 'Using Lightroom 3' is listed as 'not available.'
Additionally, I use PS CS5 and Help works just fine with that program.
Any suggestions?
Thanks.

Trevor, I start to understand a lot of mysteries from the past. I only use remote desktop connection to do stuff on that server and didn't know about the possibility to run Central Administration as a Administrator. I used to browse or call the page from
IIS. The reason that I haven't stepped on the necessity to launch it as the Administrator is that launching through IIS seems to give the same result. I remember though that I had irregularities in the behavior of the CA that where killing me... now I
got the explanation.
JJPinto, the accounts are the same and access is always through RDP with the same url. Both time I can access, but some features would throw errors or "access denied"; anyway, for me the case is closed and I'm happy that I learned something new!
Martin

Access denied?!? for my own uploaded files??

For acrobat.com when I upload my files everything is fine.
But when I come back to re-download it, it just gives me an Access denied message.
And this occurs for files I uploaded to my own account!
Could someone please help me?
heres what the message looks like
http://unavailable.adobe.com/accessdenied.html?h=share.acrobat.com&u=/adc/src/CS+maps-mode ls.%5bCHANGE+TO+.rar%5d

I'm sorry - it maybe that the problem lies with your network configuration and not with Acrobat.com. I am sending you a private message - please look for it.
Thanks,
Michelle

Error General Security Access denied : in creating timesheet for a resource using PSI C#

I'm trying to create timesheet for a resource using Method
timeSheetSvc.CreateTimesheet(timeSheetDs, svc_Timesheet.
PreloadType.Default)
get error :
[System.ServiceModel.FaultException] = {"ProjectServerError(s) LastError=GeneralSecurityAccessDenied Instructions: Pass this into PSClientError constructor to access all error information"}

As Glen says, it sounds like a Kerberos delegation issue. IIS does not run in the same context as Visual Studio, and you may be hitting double-hop.
Try using another auth method to confirm (CredSSP is the default).
I have tested this code against Ex15 and Ex14:
http://blogs.msdn.com/b/emeamsgdev/archive/2011/08/31/enable-mailbox-against-exchange-2010-from-a-web-application.aspx

Error - Document Access Denied. A component for viewing this document needs to be updated

Hi,
I am having a few problems opening a handfull of PDF documents on the network using Adobe Acrobat Reader XI & X. When opening the documents with Adobe Acrobat Reader X I receive the below error message
I am then directed to a site to instal the FileOpen plugin which I do. I have installed the plugin both automatically using an msi file and manually by placing it in the adobe plugins folder however none work. I am still getting the same error message. As this document was located on a network share I copied it to my desktop and launched it. I still received the same error message however I updated adobe reader to XI and re-installed the fileopen plugin. Now I am receivng the below error message and I am still unable to open the document. When clixking OK it takes me to a site to download the FileOpen plugin which I have already installed.
Protected mode is not turned on. Any help with this error would be greatly appreciated.
Regards.

You'd need to contact the makers of FileOpen. It isn't an Adobe product.Check especially whether your version of Reader is supposed to be compatible with it.An update to it may be needed.

Access Denied Error while accessing "Site Settings Access requests and invitations"

Hi,
I am getting Access Denied Error while accessing "Site Settings > Access requests and invitations" in SharePoint 2013 online. Currently I am the owner of the site and have "FULL CONTROL" access. I am able to access using
site collection account. So, what permission I have to give my regular account to access this page?
Thanks, Pal

Hello,
Have you recently changed the Owners group of the site collection or removed the user from the original owners group?
The reason I am asking is when the Access requests and invitations list are created, the permissions are given only to the default owners group at the time that the Access Request list was created. If this "regular account" is not part of that owners
group, the user will receive access denied. Site Collection Admins always have permissions for the Access Request List.
A workaround for the Access Denied issue is listed in the KB article http://support.microsoft.com/kb/2911390/en-us. By giving the correct group or user the permissions to this list, the users will not receive
the Access Denied issue anymore.
Preferably, in order to grant the user the full permissions ( you will see features like resending invitations may still fail after implementing the above workaround) there is one other workaround that may be required depending on what the original issue
was. Below are additional steps to restore full functionality.
1)Access the /_layouts/15/permsetup.aspx of the site collection, make sure the default Owners Group
is set correctly. (There is a group selected)
2) Add user to that Owners Group. (Issue may be resolved at this step if the site collection Owners
Group was never changed, if not continue to next step.)
3) Implement workaround on http://support.microsoft.com/kb/2911390/en-us, by adding that owners
group as Full control on Access Request list Permissions.
Let me know how this works out for you.
- Shpendi Jashari

Access Denied when trying to access shared folders on the server with administrative privileges

I have problem accessing shared folder on the server machine from Windows 7 machine even if I try to access it with administrative privileges (server Administrator account). I will try now to explain better my situation.
In my company, we have small network infrastructure with one main server machine (HP ProLiant server) with Windows Server 2012 R2 installed and couple of desktop machines. The network is administrated by me.
On Windows Server we have installed and setup DHCP, DNS, Remote Access and Routing, File and Storage and Active Directory services. Desktop machines are having Windows 8.1 Pro, Windows 8.1 or Windows 7 Home Premium installed on them. In Active
Directory I have created domain, User groups and Users for employees in my company and so far, I didn't added desktop machines to the domain.
Also, I've created one folder on the server which should contain different projects data for network users and I have set access permissions and security for this folder and shared it on the network (I've added couple of users to one user group and I
gave Full control to this group over this folder). When I try to access this folder from network, I've been asked for login credentials (normally), where I just type in one of users username and password who has been given access permissions to (who is member
of group with full control over the folder). From Windows 8.1 Pro and Windows 8.1 machines I can access and work on this folder without any problems.
The problem comes with Windows 7 machines. On Windows 7 machines (I have also tried this with Windows 7 Ultimate in VMWare) I can access server, I can see its shares, but as soon I try to access folder I've created for projects, I get Access Denied message
with request for User login credentials. Whichever user account I use (even servers main Administrator account) I keep getting this message over and over and I'm unable to access it at all.
I have also tried to access the server through VPN (from local or outside) but I'm getting the same error again. Also I've tried to add these Windows 7 machines to the domain and login with domain user but the result is the same. Turned off both firewalls
(on server and desktop machines, which I know is unnecessary, but lets try it), still same case. I've tried couple more things with registry editor on desktop machines which I found on different forums and websites but still no luck. And now I don't know
what else I can do.
Does anyone knows what's the problem here, have I set something wrong, have not set something I should?

Hi MeipoXu,
thanks for your response. I will first answer on your question.
Yes, the main issue is that we can see the folder when we access the server but we cannot access its contents from Windows 7 machines. I have tried on two machines, one with Windows 7 Home Premium version and the other one with Windows 7 Ultimate version
and the situation is the same.
As you recommended, I've checked Network Discovery and File and Printer Sharing and the situation is next: File and Printer Sharing is turned on all layers (Private, Public and Domain) while Network Discovery is off for all layers too. I don't know if this
is normal thing but Network Discovery cannot be turned on in Windows Server (I'm able to select Turn on Network Discovery and apply the changes, but when I get back to this settings page, I again see that it's turned off, so I assume this can't be changed
at all).
I also tried with icacls in command prompt and everything seems to be ok there regarding permissions. Share permissions are set to Full control to Everyone and Security permissions are set to Full control only for Administrators and the user group I've created
for employees in my company. The confirmation for this is that on Windows 8 machines you can access this folder without any problem and without getting any message connected with access permissions with any user account within this user group. This share is
created through File and Storage Services service in Server Manager panel.
And then something came up on my mind. I went in Server Manager to check shared folder settings in File and Storage Services and under Settings page I saw that "Encrypt data access" has been enabled (I enabled this option because I thought
I will get more security with this option). I asked my self what would happen if I disable it, tried it and now everything works ok on Windows 7 machines too. Now I assume that Windows 7 doesn't have this feature implemented or there are some
settings which needs to be set on Windows 7 machines to make this encryption thing work with Windows Server. So basically, I will let this feature off for now until I find out more about it and how to implement it to work with all operating systems.
I want to thank you once more for your kind help!

I am not able to open a PDF file that I just created. I get an access denied message instead.

I am not able to open a PDF file that I just created. I get an access denied message instead.

Thanks for asking.
I was combining different types of files into a single PDF. Some of them were excel spreadsheets and I had set the print areas in each file. When I cleared the print area the problem stopped. So I am assuming that had something to do with it. Though I am not sure.
The strange thing was that I was able to open the excel source documents after creating the faulty PDF but some of the MS word source documents also had "access denied" status. I still cannot figure that part out.

Nokia N8 Access Denied !

Hi, when i was deleted data and restored the factory setting. then i cant use wirelesslan or packet data!
it show me "connection failed. access denied"
pls help me

thanks for your help, i do hat but i still have problem... (

Windows 7 Enterprise - Cannot Print - Access Denied

Hello Guys,
I have strange issues..i just created a new Windows 7 Image. Even if i'am connected with Local Admin or Domain users, i cannot print to any printers.
When i want to print a test page, i receive the following error message " Print Test page failed, would you like to open troubleshooter?
Access Denied".
I have this message for network printer or Local Printer.
When i want to print from Office, i receive the following message " Printer Setup Configuration error...".
There is nothing on C:\Windows\System32\Spool\Printers.
Help !
THanks,
Laurent

Hi LoLe,
"i just created a new Windows 7 Image"
First of all ,I would suggest you to install all the updates for the new machine.Please also run "sfc /scannow"to check the health of the system .
"When i want to print from Office, i receive the following message "
Have you tried to print from other programs for example the Internet Explorer ?
"Access denied "
We can try to enable the built-in administrator account to have a check .If there is a antivirus software installed ,please turn them off temporarily to have a check .Please also check the status of "Printer Spooler" serivce and ensure it is running.
To enable the built-in administrator account (This is used to troubleshoot ,it is recommended to keep it disabled):
net user administrator /active:yes
net user administrator /active:no
Here is a fixit tool may be useful .
Diagnose and fix printer and printing problems automatically
https://support.microsoft.com/en-us/mats/printing_problems/en-hk
Please also checked the Event Viewer for any useful information to troubleshoot this issue .
Event Viewer\Windows Logs\Application ,System
Best regards
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Access denied for all (most?) users in all site collections of web app

Hi,
I have a Sharepoint 2010 farm pre-SP1 (yes should be updated!) and for all site collections of a web app, all users are getting access denied.
Now in my title I said "most?" because I have found one user in another office who does not have this issue. This web app/site collections also do not go through f5 or any proxies.
Even if I add myself as a site collection admin via central admin, I get the same result. I've looked at everything, windows time on the server (not using kerberos), errors in event log (nothing), uls logs just say access denied (very helpful!), etc...
I can try what's suggested at http://social.technet.microsoft.com/Forums/en-US/e66f1b09-605d-4546-a581-2a9283c238c0/access-denied-for-all-users-and-for-site-collections-owner?forum=sharepointgeneralprevious but when asking colleagues, there's been no
changes, let alone with those accounts? I can do a get on the property tomorrow to find if there is a value set first, however.
Any suggestions on this?

Hi,
Please try logging in the site with farm account.
If it works, please make sure you have superuser and superreader accounts in CA > Application management > web application policy. If not, please add both accounts with the powershell script in the article below, this can cause all users denied when
access the site:
http://technet.microsoft.com/en-us/library/ff758656.aspx
Here is a similar thread:
http://social.technet.microsoft.com/Forums/sharepoint/en-US/a49b1ab8-273f-41e4-a0b8-be0e31c6733b/all-users-including-site-collection-admins-receiving-access-denied-from-one-site-collection?forum=sharepointadminprevious
Regards,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] .
Rebecca Tu
TechNet Community Support

Access denied in internet facing site for xlsx files

Hello,
for xlsx files, the web site responds with access denied. I 've read the article http://support.microsoft.com/kb/2498047 but I don't understand what we should do in resolution <1>.
Just give read permission to this document library? to Whom? If I get to (web site) document library permissions/settings/anonymous user, it just has Add/Edit/Delete/View - there isn't any read permission
It's an internet facing site, so our concern is security.
Thank you
Christos

Hi Christos,
Here's a good post on what you're looking to do in order to make step 1 of
http://support.microsoft.com/kb/2498047/en-us possible.
http://www.topsharepoint.com/enable-anonymous-access-in-sharepoint-2010
Once anonymous is enabled for the entire site, from within the permissions for the library, click on Stop inherting permissions, then click on anonymous access, off the ribbon, click anonymous access, then click view items, then click ok and allow to
view items, if that is all you want to allow.
Cheers
Stacy Anothersharepointblog.blogspot.com

Getting access denied when trying to loging to sharepoint 2010 site collection.

only Site Collection Administrators are able to logging in to the site,other than that
If i give any View or read or contribute permission to any user then he is not able to logging in to the site getting Access Denied ERROR.
Below is the error generated in the LOG folder & attached here with screen shot.
Request (GET:http://sharepoint-app:2525/_layouts/accessdenied.aspx?closeConnection=01
vijay kumar designer 2010

Tanq it solved my problem Fadi
Abdulwahab
vijay kumar designer 2010

Site collection admin getting access denied!!

Hello All,
In my current SPFarm, All users were accessing the environment and all of the sudden some group users are unable to get access to the system. We have been looking this issue all day long and couldn't figure out what is broken in the system.
You can take as an example the following user's credential xyz . He has all sort of permission access to the site collection but unable to access sites within the site collection. He used to access all the sites a couple of days back.
Not everyone is noticing this issue. If I add this user to web application user policy he is able to access the site.
Yashwanth Mannem

This is a published site. superreader and superuser accounts are in web app user policy with appropriate permissions.
Yashwanth Mannem
Do you also have them in the Web Application properties in the correct format (classic or claims)?
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Access Denied to Site Collection for Everyone Including Site Collection Administrator

Similar Messages

Maybe you are looking for