Administration Access Denied

My administrator privileges have been deleted. No matter where I go I cannot restore them. Any help?

Hi,
Could you have other administrator account in your computer?
If yes, you could create a new one.
If no, please go in Safe Mode to check if your built-in administrator account is enabled.
If it appears on the welcome screen, login and create an extra administrative account.
If it doesn't appear on the welcome screen, enable it as below tutorial:
Enable and Disable the Built-in Administrator Account
http://technet.microsoft.com/en-us/library/dd744293(v=ws.10).aspx
Karen Hu
TechNet Community Support

Similar Messages

Severity: 3 Administrative access denied, and lost wireless connection

What does that mean? I am currently watching my Logs file update every other second with a new line that looks like someone is trying to access my Airport.
The date is wrong too, says Dec. 31 when it's May 31. Line is as follows:
Dec 31 19:03:15 Severity:3 Administrative access denied to fe80::21e:c2ff:fec0:4f0d%mirror0/49925.
The original reason why I was looking at the Log was because I got bounced off my Airport again. It happens now and then, when there are a bunch of wireless connections in the building, I can see them listed, but when it happens, my own Airport is missing from the list.
The other issue is that I am not interested in paying for someone else's internet access. I have it password protected, but the person I *think might be trying to hack it, is a computer genius/programmer who's built systems, so I'm a bit worried because I don't know anything about this stuff.
Is there any way I can make sure I'm not bounced off my connection again, and that noone else gets to use my connection?
Thanks!

As long as you're passwords are strong, I wouldn't worry about it. There is always someone somewhere trying to gain access to a router, to get internet access or what have you.
More then likely if someone did try and access your routers, and got denied, they just moved on to the next router he could find and try to access that one.
Just make sure you're passwords are strong enough.
If you're concerned that your password isn't strong enough, or to common, check out this website.
https://www.grc.com/passwords.htm
Hope that helps,
AL

Log - Administrative access denied....

I'm seeing numerous "Administrative access denied to xxxx::xx:xx:xx....." statements in my log.
Do I have a problem?

NO.
When you first try to access you Airport using the Airport utility. It will check for a password. It will deny access until the correct password is entered.
If you look at the line after "denied" in the log, you'll see access granted (after the password has been entered) to the machine you are accessing from.

Access Denied when trying to access shared folders on the server with administrative privileges

I have problem accessing shared folder on the server machine from Windows 7 machine even if I try to access it with administrative privileges (server Administrator account). I will try now to explain better my situation.
In my company, we have small network infrastructure with one main server machine (HP ProLiant server) with Windows Server 2012 R2 installed and couple of desktop machines. The network is administrated by me.
On Windows Server we have installed and setup DHCP, DNS, Remote Access and Routing, File and Storage and Active Directory services. Desktop machines are having Windows 8.1 Pro, Windows 8.1 or Windows 7 Home Premium installed on them. In Active
Directory I have created domain, User groups and Users for employees in my company and so far, I didn't added desktop machines to the domain.
Also, I've created one folder on the server which should contain different projects data for network users and I have set access permissions and security for this folder and shared it on the network (I've added couple of users to one user group and I
gave Full control to this group over this folder). When I try to access this folder from network, I've been asked for login credentials (normally), where I just type in one of users username and password who has been given access permissions to (who is member
of group with full control over the folder). From Windows 8.1 Pro and Windows 8.1 machines I can access and work on this folder without any problems.
The problem comes with Windows 7 machines. On Windows 7 machines (I have also tried this with Windows 7 Ultimate in VMWare) I can access server, I can see its shares, but as soon I try to access folder I've created for projects, I get Access Denied message
with request for User login credentials. Whichever user account I use (even servers main Administrator account) I keep getting this message over and over and I'm unable to access it at all.
I have also tried to access the server through VPN (from local or outside) but I'm getting the same error again. Also I've tried to add these Windows 7 machines to the domain and login with domain user but the result is the same. Turned off both firewalls
(on server and desktop machines, which I know is unnecessary, but lets try it), still same case. I've tried couple more things with registry editor on desktop machines which I found on different forums and websites but still no luck. And now I don't know
what else I can do.
Does anyone knows what's the problem here, have I set something wrong, have not set something I should?

Hi MeipoXu,
thanks for your response. I will first answer on your question.
Yes, the main issue is that we can see the folder when we access the server but we cannot access its contents from Windows 7 machines. I have tried on two machines, one with Windows 7 Home Premium version and the other one with Windows 7 Ultimate version
and the situation is the same.
As you recommended, I've checked Network Discovery and File and Printer Sharing and the situation is next: File and Printer Sharing is turned on all layers (Private, Public and Domain) while Network Discovery is off for all layers too. I don't know if this
is normal thing but Network Discovery cannot be turned on in Windows Server (I'm able to select Turn on Network Discovery and apply the changes, but when I get back to this settings page, I again see that it's turned off, so I assume this can't be changed
at all).
I also tried with icacls in command prompt and everything seems to be ok there regarding permissions. Share permissions are set to Full control to Everyone and Security permissions are set to Full control only for Administrators and the user group I've created
for employees in my company. The confirmation for this is that on Windows 8 machines you can access this folder without any problem and without getting any message connected with access permissions with any user account within this user group. This share is
created through File and Storage Services service in Server Manager panel.
And then something came up on my mind. I went in Server Manager to check shared folder settings in File and Storage Services and under Settings page I saw that "Encrypt data access" has been enabled (I enabled this option because I thought
I will get more security with this option). I asked my self what would happen if I disable it, tried it and now everything works ok on Windows 7 machines too. Now I assume that Windows 7 doesn't have this feature implemented or there are some
settings which needs to be set on Windows 7 machines to make this encryption thing work with Windows Server. So basically, I will let this feature off for now until I find out more about it and how to implement it to work with all operating systems.
I want to thank you once more for your kind help!

Access Denied Error while using Cancel Command for an Administrator.

Hi All,
We have created a new capability called Task Administrator which has only one permission <Permission type='TaskInstance' rights='View'/>.
Now when a user who is assigned ONLY this capability clicks a cancel button in the end user interface (<Property name='command' value='Cancel' />), an error is thrown (Error: List access denied to Subject on type WorkItem. com.waveset.ui.util.html.Container: method setSubTitle(LJava/lang.Object;)V not found.
We understand that the system is trying to delete the workitem created (I can see the workitem from the debug menu) which he/she does not have access. Interestingly, a normal end user without any capabilities is able to cancel this request.
Could someone please tell me what the default access is for an end user which is taken away when a new capability is added to that user?
We are using V5 Sp4.
Thanks for your help.

Hi,
Based on the current information, I suggest that you try the following steps:
1. Run REGEDIT command to open the registry editor, navigate to HKEY_CLASSES_ROOT\CLSID\{09beb4fe-6125-4757-af0f-7f487d1aa125}.
2. Expand this node to see if there is a folder named “InprocServer32”, if there is, move to step 3.
3. Click the “InprocServer32” folder, and double-click the “(Default)” key to check its value. It should be the path of a DLL file.
4. Grant “Full control” to the users on this DLL file or its parent folder.
If it doesn’t work, I suggest that you configure the Advanced Security Settings of the SQL Server installation folder, and check the “Replace child object permissions with inheritable permissions from this object” option.
Reference:
http://www.techrepublic.com/blog/how-do-i/how-do-i-change-access-permissions-for-all-folders-and-files-in-vista/
Regards,
Mike Yin
TechNet Community Support
I have already mentioned in my question that the registry location was not there in that PC.
So the result from process monitor does not help me to solve the problem

Access denied error when not using Administrator Role

Hi,
I configured a simple Transaction Iview, calling a CRM transaction but the information is only been displayed when the user has Administrator permisions but when the user has just the Role where the iview is located this error appears:
iView : pcd:portal_content/com.vitro.VitroContenido/com.vitro.content.CNI/com.vitro.content.CNI.Roles/com.vitro.CNI.rl.CNIPuntoVenta/com.vitro.CNI.ws.GeneralWorkset/CRMD_BUS2000115/CRMD_BUS2000115
Componente : com.sap.portal.appintegrator.sap.Transaction
Exception in SAP Application Integrator occured: Cannot retrieve system object for this alias. System Alias: 'SAP_CRM', System ID: 'pcd:portal_content/com.vitro.VitroContenido/Conexiones/com.vitro.CRM/com.vitro.CDECLNT160'. User: 'MLLANO', Reason: Access denied (Object(s): portal_content/com.vitro.VitroContenido/Conexiones/com.vitro.CRM/com.vitro.CDECLNT160).
Exception id: 04:15_10/09/07_0013_3889050
See the details for the exception ID in the log file
has somebody dealed with something like this?
Thanx in Advanced!
Kind Regards,
Gerardo J

Hi Dieter,
sorry didn´t answer before, i didn´t get notified about this answer, the error actualy is in the System permisions.
Kind Regarsds,
Gerardo J

Access denied to a folder; running as Administrator with backup, restore, takeown, and security privileges

I am running as an Administrator with SE_BACKUP_NAME, SE_RESTORE_NAME, SE_TAKE_OWNERSHIP_NAME, and SE_SECURITY_NAME enabled on my application. My group information is listed below. The item's path and ACL are
C:\tests\test_acl_null\src\1d: O:BGG:SYD:P
where the owner is Built-in Guests, group is Local System, the DACL prevents inheritance, and the DACL itself is empty.
I would expect that since I have the four above privileges enabled successfully, I would have access to the item regardless of its security descriptor. Why is this not the case?
whoami /all
USER INFORMATION
User Name SID
==================== =============================================
winbuild\engineering S-1-5-21-<machine-id>-1001
GROUP INFORMATION
Group Name Type SID Attributes
===================================== ================ ============ ===============================================================
Everyone Well-known group S-1-1-0 Mandatory group, Enabled by default, Enabled group
BUILTIN\Administrators Alias S-1-5-32-544 Mandatory group, Enabled by default, Enabled group, Group owner
BUILTIN\Remote Desktop Users Alias S-1-5-32-555 Mandatory group, Enabled by default, Enabled group
BUILTIN\Users Alias S-1-5-32-545 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\REMOTE INTERACTIVE LOGON Well-known group S-1-5-14 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\INTERACTIVE Well-known group S-1-5-4 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\Authenticated Users Well-known group S-1-5-11 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\This Organization Well-known group S-1-5-15 Mandatory group, Enabled by default, Enabled group
LOCAL Well-known group S-1-2-0 Mandatory group, Enabled by default, Enabled group
NT AUTHORITY\NTLM Authentication Well-known group S-1-5-64-10 Mandatory group, Enabled by default, Enabled group
Mandatory Label\High Mandatory Level Label S-1-16-12288 Mandatory group, Enabled by default, Enabled group

Thank you for your information, Frank, as it clarifies part of my confusion. However, there are a couple more loose ends I'd love to address before I mark your responses as answers.
Do backup and restore privileges apply at all over a network mount created via "net use"?
The network mount requires a username and password for the destination machine. Assuming the destination machine is a Windows box with a simple CIFS share, how does this user affect our permissions and access? Do we end up effectively impersonating this
user, or is the access check still done with our sync process's run-as user?
We require that both our configured run-as user for our sync process *and* the credentials passed to the network mount be administrator users of the local system and destination system, respectively, meaning they're in of the "BUILTIN\Administrators,
S-1-5-32-544" group.
On re-syncs, the destination file will exist and since we don't have the ability to read the ACL in all cases (we're running as one user, the file is owned by another user, and we aren't specified in the ACL in any way), we aren't able to determine if the
file has changed. Is it possible to determine the owner of this file in this case? Preferably, we'd obtain the entire SDDL.
My proposed plan is to interpret access denied as a difference requiring re-sync, resulting in us taking ownership of the file, granting ourselves access, determining if there are data differences, and then re-syncing the metadata as appropriate.

BI Dashboard - access denied for user to path /users/administrator/_portal/

Hi,
While I am within OBI EE, I try to access My Dashboards and I get this error message:
" access denied for user to path /users/administrator/_portal/dashboard layout.
Error Details
Error Codes: O9XNZMXB "
I have looked in other forums and found a solutions which was to delete cookies and then restart the system whole. It didn´t work at first. After a while, the system would allow me to access My Dashboards but then....
....I wasn´t able to access the shared filters that are on the network, thus impeding my others dashboards to work.
Does anybody know what the correct procedure for having this work is?
Thanks in advance,
Javier Rincon

Hi...
go to Catalog Manager.
Open and navigate to particular folder (_portal in shared)
right click that and go to permissions.
In left pane are you able to see the presentation Administrator ??
If then, check what kind of permission Administrator has (full control or not), if not.. add Administrator into this pane from right pane (In the right pane, You can see the user by Unchecking the check box present below show groups only check box.)
you didn't tell with whom you logged in?
If administrator then follow the steps i mentioned,
else... same steps but instead of administrator check it for particular user.
Thanks & Regards
Kishore Guggilla

ExceptionMessage: 'Access denied. Only machine administrators are allowed to create administration service job definitions of type: Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition

Hi,
I am getting error "Access Denied" when my code tries to get "SPWebService.JobDefinition" with an AppPool account of content site. The same core runs correctly for the AppPool of CentralAdmin site.
Lemme provide some background of the servers
- We have multi-server FARM
- WFE and APP servers are in different domains, there is one-way trust between the domains.
- We have UAC (User Access Control) set as high on each server
- My site is internet site
Lines of Code are following
SPWebServiceservice =
SPWebService.ContentService
varsyncTimerJob =
fromSPJobDefinitionjob
inservice.JobDefinitions
                   wherejob.Name
== "MyJob"
selectjob;
I am running the above code with in SPSecurity.RunWithElevatedPrivileges so the above code is running with APP POOL account. I m getting
the error in the 2nd line where I have a LINQ query. And I m assuming this is because of "service.JobDefinition" line. Can anyone help me?
Detailed Error:
An exception has occurred.   ExceptionType: 'TargetInvocationException'   ExceptionMessage: 'Exception has been thrown by the target of an invocation.'   StackTrace: '
at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)
at System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
at Microsoft.SharePoint.Administration.SPAutoSerializingObject.GetInstanceFromType(Type type, String typename)
at Microsoft.SharePoint.Administration.SPPersistedObject.GetInstance(XmlNode xml, Guid classId, Boolean bResolveMissingTypes)
at Microsoft.SharePoint.Administration.SPFileSystemCache.FetchObjectFromFileSystem(Guid id)
at Microsoft.SharePoint.Administration.SPFileSystemCache.GetValue(Guid id)
at Microsoft.SharePoint.Administration.SPCache`2.get_Item(K key)
at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid id, Boolean checkInMemoryCache, Boolean checkFileSystemCache)
at Microsoft.SharePoint.Administration.SPConfigurationDatabase.GetObject(Guid id)
at Microsoft.SharePoint.Administration.SPConfigurationDatabase.Microsoft.SharePoint.Administration.ISPPersistedStoreProvider.GetObject(Guid id)
at Microsoft.SharePoint.Administration.SPPersistedObjectCollection`1.get_Item(Guid objId)
at Microsoft.SharePoint.Administration.SPPersistedObjectCollection`1.<GetEnumeratorImpl>d__0.MoveNext()
at System.Linq.Enumerable.WhereEnumerableIterator`1.MoveNext()
at System.Linq.Enumerable.Count[TSource](IEnumerable`1 source)
at Project1.SharePoint.Common.UtilityHelper.IsSyncSchedulingDisabled(StringBuilder logMessage)'   Source: 'mscorlib'   TargetSite: 'System.Object InvokeMethod(System.Object, System.Object[], System.Signature, Boolean)'   ------------------------------------------------------------
Inner exception:   ------------------------------------------------------------    ExceptionType: 'SecurityException'    ExceptionMessage: 'Access denied. Only machine administrators are allowed to create administration
service job definitions of type: Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition, Microsoft.TeamFoundation.SharePoint.WebAccess, Version=11.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a.'    StackTrace:
at Microsoft.SharePoint.Administration.SPAdministrationServiceJobDefinition..ctor(String name, SPService service, SPServer server, SPJobLockType lockType)
at Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition..ctor()'    Source: 'Microsoft.SharePoint'    TargetSite: 'Void .ctor(System.String, Microsoft.SharePoint.Administration.SPService, Microsoft.SharePoint.Administration.SPServer,
Microsoft.SharePoint.Administration.SPJobLockType)'
Any help will be appreciated.

The bottom of your stack trace begs to differ:
at Microsoft.TeamFoundation.SharePoint.WebAccess.ApplyWebConfigModificationsJobDefinition..ctor()'
Source: 'Microsoft.SharePoint'    TargetSite: 'Void .ctor(System.String, Microsoft.SharePoint.Administration.SPService, Microsoft.SharePoint.Administration.SPServer, Microsoft.SharePoint.Administration.SPJobLockType)'
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs

Access Denied to Site Collection for Everyone Including Site Collection Administrator

I have a site collection with several subsites which I can no longer access. I am listed as both a farm administrator and site collection administrator in this installation. I can access a separate site collection on the same web application,
and I can access the Central Administration site. All accounts including mine, get an access denied error when navigating to any site on the aformentioned site collection.
I was not having any access issues until this morning when I was doing some housekeeping and changing group membership at the root site level, and also deleting a few custom sharepoint groups that were no longer needed. At some point after deleting
one of these custom groups, I began getting the access denied errors.
I found the error below in the uls viewer, but haven't seen anything that looks related in the windows application log. I had some similar issues yesterday, but was able to resolve them by toggling Inherit Permissions, Stop Inheriting permissions from
a subsite using SharePoint Designer. I've had no such luck with SharePoint Designer today. I've scoured this forum and the web for a solution, but have not found any issue that looked the same as mine. Any help would be appreciated.
PortalSiteMapProvider was unable to fetch children for node
at URL: /, message: Thread was being aborted., stack trace:
at System.Threading.Thread.AbortInternal()
at System.Threading.Thread.Abort(Object stateInfo)
at System.Web.HttpResponse.End()
at Microsoft.SharePoint.Utilities.SPUtility.Redirect(String url, SPRedirectFlags flags, HttpContext context, String queryString)
at Microsoft.SharePoint.Utilities.SPUtility.RedirectToAccessDeniedPage(HttpContext context)
at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(HttpContext context)
at Microsoft.SharePoint.Utilities.SPUtility.HandleAccessDenied(Exception ex)
at Microsoft.SharePoint.Library.SPRequest.GetSubwebsFiltered(String bstrParentWebUrl, UInt64 iPermMaskForUnique, UInt64 iPermMaskForInherited, Int32 nWebTemplate, Int16 nProvisionConfig, Int32 lToLinkRecurringMeeting, Object& pvarSubwebs, Object&
pvarSubwebIds, Object& pvarLangs, Object& pvarTitles, Object& pvarDescriptions, Object& pvarCreationTimes, Object& pvarModifiedTimes, Object& pvarUserIsWebAdmins, Object& pvarWebTemplates, Object& pvarProvisionConfigs, Object&
pvarMeetingCounts)
at Microsoft.SharePoint.SPWeb.SPWebCollectionProvider.GetWebsData(String[]& strNames, String[]& strServiceRelUrls, Guid[]& guidWebIds, Int32[]& nLanguages, String[]& strTitles, String[]& strDescriptions, String[]& strCreationTimes,
String[]& strModifiedTimes, Boolean[]& bUserIsWebAdmins, Int32[]& nWebTemplates, Int16[]& nProvisionConfigs, Int16[]& nMeetingCounts, Int32[]& nUIVersions, Int32[]& nFlags, String[]& strMasterUrls, String[]& strCustomMasterUrls)
at Microsoft.SharePoint.SPWebCollection.EnsureWebsData()
at Microsoft.SharePoint.SPWebCollection.get_WebsInfo()
at Microsoft.SharePoint.Publishing.Navigation.PortalWebSiteMapNode.FetchDynamicItems(PublishingWeb pubWeb, NodeTypes includedTypes, Boolean& websFetched, Boolean& pagesFetched)
at Microsoft.SharePoint.Publishing.Navigation.PortalWebSiteMapNode.PopulateNavigationChildrenInner(NodeTypes includedTypes)
at Microsoft.SharePoint.Publishing.Navigation.PortalWebSiteMapNode.PopulateNavigationChildren(NodeTypes includedTypes)
at Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapNode.GetNavigationChildren(NodeTypes includedTypes, NodeTypes includedHiddenTypes, Boolean trimmingEnabled, OrderingMethod ordering, AutomaticSortingMethod method, Boolean ascending, Int32 lcid)
at Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapNode.GetNavigationChildren(NodeTypes includedTypes, NodeTypes includedHiddenTypes, OrderingMethod ordering, AutomaticSortingMethod method, Boolean ascending, Int32 lcid)
at Microsoft.SharePoint.Publishing.Navigation.PortalSiteMapNode.GetNavigationChildren(NodeTypes includedHiddenTypes)

Make sure you give  supper user account with following format.
Moral of the story: if
you are in claims mode, you will need to use the claims user name (i:0#.w|domain\user).
some one point out that.
http://blogs.msdn.com/b/andrasg/archive/2010/09/30/setting-the-super-user-account-on-sharepoint-2010-and-getting-access-denied-errors-afterwards.aspx
Sutha Thavaratnarajah

"Access Denied. Contact your administrator"

Hello,
We are a small company using WindowsServer2008R2 Enterprise software for our file server. Users are using Microsoft Office 2010 on Windows 7 Professional. All users have similar permissions.
When I open a file from file server on my computer, and edit -> save -> close it, after that neither me nor other users are able to open the file. We all get error "Access Denied. Contact your administrator".
Note that if OTHER users do the same (i.e. open a file from file server on my computer, and edit -> save -> close it), we dont get the same error. We all are easily able to open the file.
Please suggest a solution urgently.
Thanks

This issue occurs because Excel 2010 tries to delete the temporary copy of the original workbook on the UNC share.
When a user saves an Excel workbook to a UNC share location, Excel 2010 creates a temporary copy of the workbook. In the final step of the saving process, Excel 2010 deletes the original Excel workbook and replaces it with a temporary copy. If Delete permissions
are not granted to the user, Excel 2010 cannot complete the saving process, and the user receives the error message that is mentioned in the "Symptoms" section.
To resolve this issue, apply the following update:
http://support.microsoft.com/kb/2553034
Source link: http://support.microsoft.com/kb/2589410
More information about troubleshooting errors when you save Excel files, please visit here:
https://support.microsoft.com/kb/271513
Tony Chen
TechNet Community Support

Access denied creating new folders/files as administrator, UAC disabled

I'm having some issues with a 2008 R2 server. It's a standalone server used for file storage only, no domains no AD or policies have been applied to it.
I have recently been getting access denied errors trying to create new files or folders on the data drive. I'm logged in as local administrator and have full access to everything.
I've spent the last 3 days searching for a solution but so far have not found one. Solutions so far have almost always suggested turning off UAC and resetting permissions on the affected files and folders but that has not solved the issue, UAC was already
disabled and I've tried creating a new user group and adding the admin account to it, I've also removed all inherited permissions and manually specified all users and groups and 'everyone' as full access to no avail.
This did happen once before in the past with one network share and I can't remember what I did back then to solve it but somehow I did, but now all files and folders are having the issue on all network shares and drives (the server has 8 hard drives installed).
I can move and rename files and folders fine without problems but I cannot create any new folders or files of any kind without getting access denied, I'm really stumped at this one and hoping someone here will be able to suggest a fix that I haven't already
tried.
I have scoured the event logs but there's no sign of the issue there either.
Any help appreciated.

Hi,
Did you access the network drive from a workstation? If so, what is the system operation on the workstation? Please give everyone group “full control” share permission to check the results. You could try to create a new shared folder and give local administrator
“full control” ntfs permissions and share permissions to check if the issue still exists.
Best Regards,
Mandy
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

WindowsServer2008R2- "Access Denied. Contact your administrator"

Hello,
We are a small company using WindowsServer2008R2 Enterprise software for our file server. Users are using Microsoft Office 2010 on Windows 7 Professional. All users have similar permissions.
When I open a file from file server on my computer, and edit -> save -> close it, after that neither me nor other users are able to open the file. We all get error "Access Denied. Contact your administrator".
Note that if OTHER users do the same (i.e. open a file from file server on my computer, and edit -> save -> close it), we dont get the same error. We all are easily able to open the file.
Please suggest a solution urgently.
Thanks

Hi,
First I would like you to disable the anti-virus program on the server to test the result. I've seen that some anti-virus program may cause this problem.
Please right click on the shared file and check the Security tab permissions, are you listed as a user? Check it before and after you open and close the file. If you are not listed after you save the file, try re-adding yourself and check the result.
If it's not office documents specific, we may post this question in the Windows Server Forum:
http://social.technet.microsoft.com/Forums/en-US/home?category=windowsserver
The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank
you for your understanding.
Regards,
Melon Chen
TechNet Community Support

SharePoint 2010 - Claims Based Authentication - Access Denied for AD Group members

We're in the process of migrating our SharePoint 2003 system to 2010 and have used Metavis to migrate the data. We had to do the data migration in a lab environment and then move/attach the content database to our production server. The database attached successfully
and I, as a site collection administrator, can see all sites and the data therein. We are using claims-based auth with ADFS 2.0 as the provider.
My users, however, get access denied trying to go anywhere on the site. I have added the Active Directory groups to the appropriate SharePoint groups and have confirmed the groups are appearing with the c:0-.t|adfs|group_name syntax. If I add them as individual
users (i:05.t|adfs|[email protected]) they can authenticate fine, but not by AD group membership.
I enabled ADFS tracing and I see that the claim being provided includes the SIDs for all the groups the user belongs to. Using ULS Viewer I can see that SharePoint sees the correct number of claims (it doesn't show what those claims are, just the number) but
it doesn't seem to be connecting the SIDs passed to the group name used in the permissions list. I have also updated the portalsuperreader and portalsuperuser accounts after the database was moved, just in case there was something weird there.
The ADFS and SharePoint servers are all in the same AD domain, so they should be able to resolve SIDs ok. I suspect the issue is somehow related to the migration of the content database from a separate
environment (different domain), but I can't figure out for the life of me how to get the group authentication to work.
Thoughts?

Brilliant idea. Unfortunately that didn't work - I can get to the new site as the site collection owner, but members of groups to which I assigned permissions still get Access Denied. :-(

Root cause of error " Access denied. You do not have permission to perform this action or access this resource" - workflow - SharePoint 2013

Good evening, technet community
I hope you are doing well.
When configuring my SharePoint workflow, I encounter the problem below:
Problem Description:
Let's say my domain is: test.com, my group user is: test\group , my user is: test\user1
Except an admin account with full control at both "Web Application" and "Site Collection", all others account all have problem when creating a list item. After creating a list item, the workflow status is "cancelled" immediately
with the following message:
RequestorId: 262a35e4-99f4-40f0-929b-5d04b415f147. Details: System.ApplicationException: HTTP 401 {"Transfer-Encoding":["chunked"],"X-SharePointHealthScore":["0"],"SPClientServiceRequestDuration":["10"],"SPRequestGuid":["262a35e4-99f4-40f0-929b-5d04b415f147"],"request-id":["262a35e4-99f4-40f0-929b-5d04b415f147"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"MicrosoftSharePointTeamServices":["15.0.0.4420"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1;
RequireReadOnly"],"Cache-Control":["max-age=0, private"],"Date":["Thu, 06 Nov 2014 12:14:28 GMT"],"Server":["Microsoft-IIS\/7.5"],"WWW-Authenticate":["NTLM"],"X-AspNet-Version":["4.0.30319"],"X-Powered-By":["ASP.NET"]}
{"error":{"code":"-2147024891, System.UnauthorizedAccessException","message":{"lang":"en-US","value":"Access denied. You do not have permission to perform
this action or access this resource."}}} at Microsoft.Activities.Hosting.Runtime.Subroutine.SubroutineChild.Execute(CodeActivityContext context) at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor,
BookmarkManager bookmarkManager) at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager bookmarkManager, Location resultLocation)
- The workflow is still fail even I assign "full control" to my users group "test\group" – at Site Collection level.
Surprisingly, I have successfully found a solution for this error message. However, I still have some points that I do not clearly understand. Let's start with my solution first.
Solution:
*** i. Assign permission policy at Web Application level – Central Admin site ***
1. Central Administration ==> Application management
==> Manage Web application
2. Go to "permission policy", then create a new permission level. This permission level contains all "edit item" permission.
3. Select "user policy", then I assign it directly to my user account: test\user1.
*** ii. Assign "edit item" permission at Site Collection level ***
1. Site Setting ==> Site permission
2. Assign "Edit" permission to my test\group.
(Actually I removed all permissions of my user group at Site Collection level. It seem my group has inherited permission from Web Application level, is that correct? )
*** iii. Create a new list item and workflow runs ……. ***
==> My question is:
1. Why I cannot assign permission to my users group - "test\group" -
at "Web Application" level? Instead I have to assign permission policy for each users, one by one?
2. Could you please let me know how to collect full detail error message of workflow status?
Thank you very much! Have a nice weekend.

Thank you for your very detail response.
Point 1: Yes my 2 service: user profile & profile sync service are running. I performed "full synchronization" as well. Actually i've tried 3 another action plans before coming up with the solution i posted:
*** Actions completed ***
1. Activate the feature: workflow can use app permissions.
Site actions > Site Settings > Site features >activate the feature below:
Workflows can use app permissions
2.
Refresh trusted security token services metadata feed
Get-SPTimerJob
"RefreshMetadataFeed"
| Start-SPTimerJob
- then restart the machine.
3. Start full user profile synchronization.
Point 2:
- Yes my user had Edit permission at workflow task list + list affected by workflow.
I have just remove all permissions of my user at "Site Collection" level. However, when i show my user permissions at my workflow task list and my users still have "Edit" Permission ( assigned at Web Application level. These permissions
still exist even after my workflow task list stop inheriting permission).
==> the problems probably belongs to "permission" at "Site Collection level". It seems "permission level at my Site Collection does not work". All users accounts are also suffer from the same issues except farm admin account
( which has full control at Web Application level).
I would appreciate if your guys can guide me how to make "permission" at my "Site Collection level" work again?
Thank you very much.

Administration Access Denied

Similar Messages

Maybe you are looking for