SharePoint 2013 Configuration Access denied

Hi While configuring the SharePoint 2013, getting the following error.
System.InvalidOperationException: An error occurred while getting information about the user sp_farm at server <ADserver>: Access is denied
at Microsoft.SharePoint.Win32.SPNetApi32.NetUserGetInfo1(String server, String name)
sp_farm is a Domain User, and local admin, for SQL server this account have sysadmin rights, still having the issue please help.

Basically SharePoint is trying to get information about this service account and access is denied. This is because you may be logged in on server and running Products and Configuration Wizard as a local user that does not have access to the AD OU to verify
the SP_Farm domain account.
Log out from sever and Log in again with "SP_Farm" user and re-launch the SharePoint Products and Configuration Wizard. Specify the SP_Farm account to connect to the SQL Database.Before you run the config wizard , please log in to SQL
Management Studio and remove the partially created farm database SharePoint_Config or use a different name the second time.
Thanks
Ganesh Jat [My Blog |
LinkedIn | Twitter ]
Please click 'Mark As Answer' if a post solves your problem or 'Vote As Helpful' if it was useful.

Similar Messages

'Share' functionality in SHarePoint 2013 - Prevent access to files

Hello
I have a client that has just moved to SP2013 and they used the send document link as hyperlink in email functionality of SharePoint 2010 regularly. THis was good for them because if the link was sent to a user that did not have access to a document
then they couldn't open it.
I would like to do the same thing in the 2013 environment and I have been making use of the 'Share' functionality. This does not seem to be working as if the Share functionality is used then the users specified get access to the document regardless
of their permissions.
Is there a way to stop users from opening documents if they are accidentally sent a link to a document they don't have access to?? it seems the 'Share' functionality overwrites it.

There are a few ways to do it:
http://www.sharemuch.com/2013/07/25/how-to-disable-sharesynchfollow-buttons-on-the-sharepoint-2013-ribbon/
http://www.sharepointdiary.com/2013/12/sharepoint-2013-share-functionality-faqs.html
http://removesharefollow.codeplex.com/
http://www.eliostruyf.com/hiding-the-social-actions-follow-share-from-the-document-libraries-in-sharepoint-2013/
Disabling Access Requests should disable the Share feature.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

PowerPivot for SharePoint 2013 Configuration not starting

Dear,
I have
Windows 2008 R2 SP1 (up to date version)
SQL Server 2012 SP1 PowerPivot For SharePoint (11.1.3000.0 -> the number is from the control Panel)
But I try to run the command PowerPivot for SharePoint 2013 Configuration, the wizard is not starting : it closed with an error
If someone has idea, he is welcomed
Regards
Bohor

hi Muhammad,
thanks a lot for your help but what is "Powershare"?
About running Powerpivot configuration Tools with administrator rights , I have tried without success :-(
I have found the error log in the Windows event viewer, maybe it'll be helpful
Application : PowerPivotSPAddinConfiguration.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.TypeInitializationException
Pile :
à Microsoft.AnalysisServices.SPAddin.Configuration.Tool.App.Application_Startup(System.Object, System.Windows.StartupEventArgs)
à System.Windows.Application.<.ctor>b__1(System.Object)
à System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
à MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
à System.Windows.Threading.DispatcherOperation.InvokeImpl()
à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
à System.Windows.Threading.DispatcherOperation.Invoke()
à System.Windows.Threading.Dispatcher.ProcessQueue()
à System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
à MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
à MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
à System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
à MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
à System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
à MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
à MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
à MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
à System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
à System.Windows.Application.RunDispatcher(System.Object)
à System.Windows.Application.RunInternal(System.Windows.Window)
à Microsoft.AnalysisServices.SPAddin.Configuration.Tool.App.Main()
and there is another message just after that said that the faulting module is
C:\Windows\system32\KERNELBASE.dll
regards
Bohor

Office 2013 C2R - Access denied to installation source from workgroup PC (Error Code 5-4 and 17002)

I have set up Office 2013 Home and Business on a network share using the Office Deployment Tool.
Domain members can install Office 2013 with no problems using the command line
\\Server\share\Office2013\setup.exe /configure
\\Server\share\Office2013\configuration-home-and-biz.xml
However, if the PC is not a member of the domain I get an Access Denied message, even though "everyone" has full control of the share and NTFS files and subfolders
The full message is as follows,
Access denied to installation source
Sorry, we ran into a problem accessing a required file. Please check that the installation source has correct permissions, the try again.
Go online for additional help
Error Code: 5-4
As soon as I join the PC to the domain the installation works but I would like to pre-install Office as part of an MDT Task Sequence before the PC joins the domain.
Does anyone know how I can make this work?
The Office setup log shows a different error code
03/05/2014 16:23:24.834 SETUP (0xe38) 0xec0 Click-To-Run apx75 Monitorable TryLaunchClient::HandleStateAction: C2R Client returned failing error code 17002
FYI: My config xml file contains the following
<Configuration> <Add SourcePath="\\Server\share\Office2013\" OfficeClientEdition="32" > <Product ID="HomeBusinessRetail"> <Language ID="en-us" /> </Product> </Add> <Updates Enabled="TRUE" UpdatePath="\\Server\share\Office2013\" /> <Display Level="Full" AcceptEULA="TRUE" />  <Logging Name="OfficeSetup-*.txt" Path="%temp%" /> <Property Name="AUTOACTIVATE" Value="0" /></Configuration>
Thom McKiernan (UK) @thommck | thommck.wordpress.com | MCSA | MCTS

C2R editions of Office, during the installation routine, will initially commence execution in the security context of the logged in user, but partway through the installation routine the installation transitions into the security context of the local computer
account. This means that unless the computer account also has network access permissions to the installation source folder/share, the installation routine will fail.
http://technet.microsoft.com/en-us/library/jj219423(v=office.15).aspx#PrepareDeploy
Important:
The computer account for the computer on which you install Click-to-Run for Office 365 products must have read permission to the network share that contains the Office Deployment Tool, the customized Configuration.xml file, and the Click-to-Run for Office
365 product and language files. If you cannot give read permission to the computer account, you can copy the files down to the computer from the network share, and then run Setup from the computer. After the installation is complete, you can delete those files
from the computer.
To workaround this, your installation script routine can copy the installation source files from the server folder/share to a local folder on the computer, then launch the setup routine from that local source.
In your example scenario, the workgroup computer (because it is not a member of "DOMAIN\Authenticated Users" does not have access permissions to the server folder/share.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

SharePoint 2013 Configuration Wizard failure while joining a WFE to the existing server farm.

Dears,
I've been troubleshooting an issue while trying to join a new WFE server to an existing SharePoint 2013 farm.
Issue Description:
When we run the wizard it runs for almost 30 to 45 minutes on the step 3 itself and eventually fails at the end with an error message "Failed to connect to the configuration Database..... Value doesn't fall within the expected range"
First I thought this is a connectivity issue with the config DB and monitored the complete operation very closely after checking the permissions and SQL server connection and happened to see that the server was able to connect to the farm and all the web
applications and the related solutions were pushed to the server and apparently the failure of the Wizard at below point: Followed by the error, all web sites and solutions were retracted and a complete roll back happens.
Can someone pls help me here at the earliest as I'm stuck ???
0
02/19/2015 11:36:41.60 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology bmt5
High Creating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:41.60 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:41.60 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:41.60 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:41.60 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sis
Medium Attempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:41.60 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sit
Medium Attempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:41.62 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology fx74
High An exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:43.35 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology bmt5
High Creating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:43.35 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:43.35 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:43.35 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:43.35 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sis
Medium Attempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:43.35 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sit
Medium Attempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:43.35 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology fx74
High An exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:45.09 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology bmt5
High Creating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:45.09 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:45.10 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:45.10 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:45.10 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sis
Medium Attempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:45.10 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sit
Medium Attempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:45.10 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology fx74
High An exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:46.82 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology bmt5
High Creating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:46.82 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:46.82 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:46.82 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:46.82 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sis
Medium Attempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:46.82 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sit
Medium Attempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:46.82 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology fx74
High An exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:48.52 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology bmt5
High Creating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:48.52 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:48.52 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:48.52 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 96ft
Medium Adding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:48.54 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sis
Medium Attempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:48.54 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 9sit
Medium Attempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:48.54 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology fx74
High An exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:48.54 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology fx75
Unexpected Reached the retry limit for committing IIS configuration changes, the operation must be rerun.
02/19/2015 11:36:48.65 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology eru1
Medium Released mutex 'Global\Microsoft.SharePoint.SPIisProvisioningLock'
02/19/2015 11:36:48.65 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology aj4j4
Unexpected Joining Farm failed. The exception is Value does not fall within the expected range. StackTrace is at Microsoft.Web.Administration.Interop.AppHostWritableAdminManager.CommitChanges()
at Microsoft.Web.Administration.Configuration.CommitChanges() at Microsoft.Web.Administration.ConfigurationManager.CommitChanges() at Microsoft.Web.Administration.ServerManager.CommitChanges() at Microsoft.SharePoint.Administration.SPIisServerManager.CommitChanges(ApplyChanges
applyChanges) at Microsoft.SharePoint.Administration.SPIisProvisioningAssistant.ProvisionApplicationPool(String name, SecurityIdentifier sid, String password, SPIisApplicationPoolSettings settings) at Microsoft.SharePoint.Administration.SPIisManager.ProvisionApplicationPool(String
name, SecurityIdentifier sid, SecureString password, SPIisApplicationPoolSettings settings) at Microsoft.SharePoint.Administration.SPIisWebServiceApplicationPool.ProvisionLocal(SPIisWebServiceApplicationPoolProvisioningOptions options)
at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.ProvisionApplicationInstance() at Microsoft.SharePoint.Administration.Claims.SPSecurityTokenServiceApplication.ProvisionLocal(SPServiceInstance serviceInstance)
at Microsoft.SharePoint.Administration.SPIisWebServiceInstance.Provision() at Microsoft.SharePoint.Administration.SPFarm.Join(Boolean skipRegisterAsDistributedCacheHost)
02/19/2015 11:36:48.65 psconfigui.exe (0x0FA4)
0x2D28 SharePoint Foundation
Topology 88ah
High Unjoining the farm.
BR,
Mukesh

Hi Pradeep, this wasn't due to any permission issue.. I was trying with the farm account which is a local admin group member as well as being a member of IIS_WPG.. on a continues investigation happened to find that the IIS config file was corrupted and which
encountered issues in the creation of app pool.. I had to tweak around some settings with the config file by considering the other WFE as a reference.. this actually fixed the issue..
BR,
Mukesh
Regards Mukesh

SharePoint 2013 Configuration Wizard Missing Components after Install ServicePack 1

Hello,
today we have installed SharePoint Service Pack 1 for SharePoint Server 2013 inclusive Service Pack 1 for all language packs (we used the new released Service Packs).
Our SharePoint Environment has only one SharePoint Server.
Many
language packs
are
installed
on
this
server.
If we try to run the configuration wizard through the GUI, then we get the following error:
If we try to run "psconfig -cmd upgrade -inplace b2b -wait" then we get also an error:
SharePoint Products Configuration Wizard version 15.0.4569.1503. Copyright (C) Microsoft Corporation 2012. All rights reserved.
The upgrade command is invalid or a failure has been encountered.
The server farm will not work with missing installs. Add "-cmd installcheck -noinstallcheck" to the command-line to ignore this warning.
The following is missing on :
Service Pack 1 for Microsoft SharePoint Server 2013 Language Pack (KB2880554) 64-Bit Edition
Service Pack 1 for Microsoft SharePoint Server 2013 (KB2880552) 64-Bit Edition
Service Pack 1 for Microsoft SharePoint Server 2013 Language Pack (KB2880554) 64-Bit Edition
Service Pack 1 for Microsoft SharePoint Server 2013 (KB2880552) 64-Bit Edition
Service Pack 1 for Microsoft SharePoint Server 2013 (KB2880552) 64-Bit Edition
Service Pack 1 for Microsoft SharePoint Server 2013 (KB2880552) 64-Bit Edition
We checked the Installation in "Programm and Features", result see below:
Next step we run the PowerShell command: Get-SPProduct -local, result see below:
ProductName
Required Missing   Servers
Language Pack for SharePoint 2013 - Bulgarian/български                              True
{ServerName, }
Language Pack for SharePoint 2013 - Croatian/Hrvatski                                True
{ServerName, }
Language Pack for SharePoint 2013 - Romanian/Română
True               {ServerName, }
Language Pack for SharePoint 2013 - Thai/ไทย
         True               {ServerName, }
Language Pack for SharePoint and Project Server 2013 - Chinese (PRC)/中文(简体)    True               {ServerName, }
Language Pack for SharePoint and Project Server 2013 - Chinese (Taiwan)/中文 (繁體)   True               {ServerName, }
Language Pack for SharePoint and Project Server 2013 - Czech/čeština                 True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - Danish/dansk                  True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - Dutch/Nederlands              True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - Finnish/suomi                 True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - French/Français               True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - German/Deutsch                True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - Greek/Ελληνικά                True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - Hebrew עברית                  True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - Hungarian/magyar              True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - Italian/Italiano              True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - Japanese/日本語      True               {ServerName, }
Language Pack for SharePoint and Project Server 2013 - Korean/한국어                    True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - Norwegian/norsk               True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - Polish/Polski                 True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - Portuguese/Português          True               {ServerName, }
Language Pack for SharePoint and Project Server 2013 - Portuguese/Português (Brasil) True               {ServerName, }
Language Pack for SharePoint and Project Server 2013 - Russian/русский               True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - Slovak/Slovenčina             True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - Spanish/Español               True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - Swedish/svenska               True               {ServerName,
Language Pack for SharePoint and Project Server 2013 - Turkish/Türkçe                True
{ServerName, }
Language Pack for SharePoint and Project Server 2013 - Ukrainian/Українська          True               {ServerName, }
Microsoft SharePoint Server 2013
True               {ServerName, }
What's the mistake?
Why we can't run the configuration wizard?
Has anyone answers?
Thanks a lot.
Regards Mario

try to run the below command on all server in the farm and then run the config wizard
Get-SPProduct -Local
Above command basically update the product information into the configuration database. Read this blog from the Trevor.
http://thesharepointfarm.com/2013/12/the-magic-of-get-spproduct-local/
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

How to set custom access denied pages in SharePoint 2013?

Hi everybody,
in SharePoint 2010 custom access denied or other error pages could be easily set by setting the new path to the webapp-properties by using webApp.UpdateMappedPage. In SharePoint 2013 this seems to be ignored. The MSDN-entry seems to be out of date and just
copied from SharePoint 2010:
http://msdn.microsoft.com/en-us/library/microsoft.sharepoint.administration.spwebapplication.updatemappedpage.aspx
A possible workaround could be writing a HttpModule that checks the requested url for accessdenied.aspx and redirects to a custom page but there must be another more best practice way to achieve this behaviour??

I found a workaround to redirect to a custom access denied page but I'm not happy with it.
I created a HttpModule which uses static method SPCustomRedirect.RegisterRedirectHandler to register a class inheriting ISPCustomRedirectHandler to the current HttpContext. In this class there is a method GetRedirectUrl that returns the path to my custom
access denied page.
Now at last a value must be written to the HttpRequest.Querystring named "CustomRedirect". But to add something to the QueryString-NameValueCollection I must use reflection to make it writable because it's readonly. After setting the value, I reset the property
to readonly.
For clearness, I post the code-snippet from the HttpModule below:
HttpRequest request = HttpContext.Current.Request;
NameValueCollection QS = request.QueryString;
QS = (NameValueCollection)request.GetType().GetField("_queryString", BindingFlags.NonPublic | BindingFlags.Instance).GetValue(request);
PropertyInfo readOnlyInfo = QS.GetType().GetProperty("IsReadOnly", BindingFlags.NonPublic | BindingFlags.Instance);
readOnlyInfo.SetValue(QS, false, null);
QS["CustomRedirect"] = "CustomAccessDenied";
readOnlyInfo.SetValue(QS, true, null);
SPCustomRedirect.RegisterRedirectHandler("CustomAccessDenied", new CustomAccessDenied());
This is the redirectHandler-class I register in the last line:
public class CustomAccessDenied : ISPCustomRedirectHandler
public string GetRedirectUrl(string key)
string serverRelativeUrl = string.Empty;
var ctx = HttpContext.Current.Items["DefaultSPContext"];
if (ctx != null)
serverRelativeUrl = ((SPContext)ctx).Web.ServerRelativeUrl;
if (serverRelativeUrl.Equals("/"))
serverRelativeUrl = string.Empty;
return string.Format("{0}/_layouts/15/myCode/CustomAccessDenied.aspx", serverRelativeUrl);
This works fine but I really don't like the need to add a value to the querystring by reflection or the need to do this for every page-request...
What's your opinion for this?

Accessing Sharepoint 2013 externally for domain users and customers

Just an FYI I am not a SP administrator by any means but have be tasked with taking over this project and could use some assistance.
Sharepoint 2013 is working fine internally. Users access the site and login with their domain credentials. Our client is moving one of their departments to another building down the street and we'd like them to be able to access local resources without the
use of another server or site to site vpn or standard vpn.
My question is, how do we make Sharepoint accessible outside of their local network?
If we open up a port on the router and have it forward all request to Sharepoint server will we be able to access it?
Also, how will they authenticating with the Sharepoint Server? Do they use the same user credentials?
I forgot to mention this is Sharepoint 2013 Enterprise Edition. We are also using Project Server 2013 as well.
Thanks in Advance

Hi 3s1k,
According to your description, my understanding is that you want to access the SharePoint site from Internet.
You need to first ensure that you enable Anonymous Access for your web application. You'll then need to set up DNS for the domain you own to point to your web front end server (or virtual IP if it's load balanced). Then set up the appropraite IIS bindings
for the web application, and finally you'll need to extend your web application to an Internet Zone and give it the appropriate domain name.
There are some similar posts for your reference:
https://social.technet.microsoft.com/Forums/en-US/2277d710-ed05-4613-bd66-fd12e4d64b61/sharepoint-intranet-site?forum=sharepointadminprevious
https://social.technet.microsoft.com/Forums/sharepoint/en-US/fd968a08-393b-41c0-a916-c48ce0f83104/configure-sharepoint-2013-for-accessing-over-internet?forum=sharepointadmin
http://sharepoint.stackexchange.com/questions/54315/sharepoint-2013-extranet-acces-outside-the-internal-network
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Sharepoint 2013 on premise external access

Hello,
We have single sharepoint on premise and we need to enable external access to the users from different companies. How to make this possible without ADFS configuration?

Following links help you to start with
Plan for user authentication methods in SharePoint 2013
Authentication overview for SharePoint 2013
Configuring Forms Based Authentication
in SharePoint 2013
Please 'propose as answer' if it helped you, also 'vote helpful' if you like this reply.

SharePoint 2013 Remote Index with ADFS

I have two domains: A and B, each with its own SharePoint 2013 farm. I have established ADFS for the users and Farm trust as well. Users from domain A can access sites in Farm B, even when granted access through AD groups. I have also setup remote search
and search results from sites in Farm B appear in Farm A, but only if I grant permissions directly to the searching users. If not, the logs state access was denied and no remote results are returned. Any ideas?

Hi,
Please understand that Search requires windows authentication to be selected on at least one zone in the web application. If we only have ADFS configured currently, we will receive Access denied when crawl web application.
As workaround, we could extend the web application to one zone other than default zone, and configure windows authentication for that zone. Please refer to the detail step in the article below:
http://sharepointobservations.wordpress.com/2013/08/06/sharepoint-2013-configuring-search-to-crawl-web-applications-using-claims-and-adfs-2-0/
Regards,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] .
Rebecca Tu
TechNet Community Support

Sharepoint 2013 search component best practice

hi
With a big SharePoint 2013 farm:
2 WFE
2 App server
2 Search App server (havent set up these servers yet)
What would the best way to divide the search componment between the two serarch app servers?
Crawl component
Crawls content sources to collect crawled properties and metadata from crawled items and sends this information to the content processing component.
Content processing component
Transforms the crawled items and sends them to the index component. This component also maps crawled properties to managed properties.
Analytics processing component
Carries out search analytics and usage analytics.
Index component
Receives the processed items from the content processing component and writes them to the search index. This component also handles incoming queries, retrieves information from the search index and sends back the
result set to the query processing component.
Query processing component
Analyzes incoming queries. This helps optimize precision, recall and relevance. The queries are sent to the index component, which returns a set of search results for the query.
Search administration component
Runs the system processes for search, and adds and initializes new instances of search components.
If you ignore the need for redunancy (we may add another 2 search app servers for that later).
brgs
Bjorn

Hi Bjorn,
According to your description, my understanding is that you want to deploy the search components in two search app servers.
It depends on how many search service applications you need and the size of your environment.
Here is a link about how to configure topology for one search service application with multiple search components across 2 servers for redundancy and performance:
http://blogs.msdn.com/b/chandru/archive/2013/02/19/sharepoint-2013-configuring-search-service-application-and-topology-using-powershell.aspx
You can also run the Query Processing component in web front server and run the other components in the search servers or application servers.
Please refer to the link below:
http://blogs.technet.com/b/meamcs/archive/2013/04/09/configuring-sharepoint-2013-search-topology.aspx?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+yahoo%2FZfiM+(Team+blog+of+MCS+%40+Middle+East+and+Africa)
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Timerjob Access denied error while opening web object

Hi Team,
I have created a timer job to get list information on the site. Everything is fine in the development(Stand alone server) . Got access denied error while running same timer job in QA server(one app and one WFE).
Note: This timer job is globally deployed.
Code snippet :
SPSite site1 = webApp.Sites[0];
SPWeb web = site1.RootWeb;
SPSecurity.RunWithElevatedPrivileges(delegate()
using (SPSite site = new SPSite(site1.ID))
using (SPWeb currWeb = site.OpenWeb(web.ID)) // Got access denied error here.
Additional information:
Sharepoint timer service account : Domain\SP_Farm
Site app pool account : Domain\SP_App.
Both accounts have site collection administrative access on the site. Do i need to check access permissions on DB level also this error ?
Waiting for urgent reply..

Hi,
1. Please check the link below:
Fixing Access Denied Errors With SharePoint 2010 Timer Jobs
http://www.sharepointsecurity.com/sharepoint/sharepoint-security/fixing-access-denied-errors-with-sharepoint-2010-timer-jobs/
2. Try to set RemoteAdministratorAccessDenied to false using PowerShell
Access denied when deploying a timer Job or activating a feature from SharePoint 2010 content web application
https://support.microsoft.com/kb/2564009?wa=wsignin1.0
3. Check your ULS log for detail error message.
Best Regards
Dennis Guo
TechNet Community Support

Server.xml in tomcat access denied

hello,
I am using tomcat 5.5.9 with suse (linux), and I am using jdk 1.6.0
The CATALINA_HOME, JAVA_HOME are defined,
When I try to startup the tomcat as root user every thing is ok, it
start (with port 8080)
I have create a new user with permissions to logs and work
directories, and try to startup the tomcat from command
like that su - tomcatuser -c /user/tomcathome/bin/startup.sh
every thing is ok
but wenn I try to start it from eclipse I get this message:
In Catalina.out
Jul 12, 2006 6:03:26 PM org.apache.catalina.startup.Catalina load
WARNING: Can't load server.xml
Jul 12, 2006 6:03:26 PM org.apache.catalina.startup.Catalina load
WARNING: Can't load server.xml
Jul 12, 2006 6:03:26 PM org.apache.catalina.startup.Catalina start
INFO: Server startup in 0 ms
java.lang.reflect.InvocationTargetException
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.jav
a:39)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessor
Impl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at
org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:271)
        at
org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:409)
Caused by: java.lang.NullPointerException
        at org.apache.catalina.startup.Catalina.await(Catalina.java:600)
        at org.apache.catalina.startup.Catalina.start(Catalina.java:560) Can any one help,
Thanks

Click Start, click Run, type cmd in the
Open box, and then click OK.
Switch to the <var>Drive</var>:\WINDOWS\Microsoft.NET\Framework\v2.0.50727 folder. In this folder, <var>Drive</var> is the drive where Windows is installed. To do this, type the following line at the command prompt, and then press Enter:
cd <var>Drive</var>:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
Add the appropriate permissions to the Network Service group for the Temporary ASP.NET Files folder. To do this, type the following line, and then press Enter:
aspnet_regiis -ir
cd <var>Drive</var>:\WINDOWS\Microsoft.NET\Framework\v4
Add the appropriate permissions to the Network Service group for the Temporary ASP.NET Files folder. To do this, type the following line, and then press Enter:
aspnet_regiis -ir
http://social.technet.microsoft.com/Forums/sharepoint/en-US/bf6bb272-eb75-4435-8264-6980e9e7268f/sharepoint-server-2010-access-denied-error?forum=sharepointadminprevious
Is this a claims based web application? If yes, the super reader and super user need to be added with the in the format "i:0#.w|domain\username". Also, add them with full read and full control on the web application as well.
Check AAM settings
Can you check that your databases are not set to read only. I had a similar issue after backing up the farm users were not allowed to do anything on the site. Turned out the database was set to read only in SQL.
If this helped you resolve your issue, please mark it Answered

Root cause of error " Access denied. You do not have permission to perform this action or access this resource" - workflow - SharePoint 2013

Good evening, technet community
I hope you are doing well.
When configuring my SharePoint workflow, I encounter the problem below:
Problem Description:
Let's say my domain is: test.com, my group user is: test\group , my user is: test\user1
Except an admin account with full control at both "Web Application" and "Site Collection", all others account all have problem when creating a list item. After creating a list item, the workflow status is "cancelled" immediately
with the following message:
RequestorId: 262a35e4-99f4-40f0-929b-5d04b415f147. Details: System.ApplicationException: HTTP 401 {"Transfer-Encoding":["chunked"],"X-SharePointHealthScore":["0"],"SPClientServiceRequestDuration":["10"],"SPRequestGuid":["262a35e4-99f4-40f0-929b-5d04b415f147"],"request-id":["262a35e4-99f4-40f0-929b-5d04b415f147"],"X-FRAME-OPTIONS":["SAMEORIGIN"],"MicrosoftSharePointTeamServices":["15.0.0.4420"],"X-Content-Type-Options":["nosniff"],"X-MS-InvokeApp":["1;
RequireReadOnly"],"Cache-Control":["max-age=0, private"],"Date":["Thu, 06 Nov 2014 12:14:28 GMT"],"Server":["Microsoft-IIS\/7.5"],"WWW-Authenticate":["NTLM"],"X-AspNet-Version":["4.0.30319"],"X-Powered-By":["ASP.NET"]}
{"error":{"code":"-2147024891, System.UnauthorizedAccessException","message":{"lang":"en-US","value":"Access denied. You do not have permission to perform
this action or access this resource."}}} at Microsoft.Activities.Hosting.Runtime.Subroutine.SubroutineChild.Execute(CodeActivityContext context) at System.Activities.CodeActivity.InternalExecute(ActivityInstance instance, ActivityExecutor executor,
BookmarkManager bookmarkManager) at System.Activities.Runtime.ActivityExecutor.ExecuteActivityWorkItem.ExecuteBody(ActivityExecutor executor, BookmarkManager bookmarkManager, Location resultLocation)
- The workflow is still fail even I assign "full control" to my users group "test\group" – at Site Collection level.
Surprisingly, I have successfully found a solution for this error message. However, I still have some points that I do not clearly understand. Let's start with my solution first.
Solution:
*** i. Assign permission policy at Web Application level – Central Admin site ***
1. Central Administration ==> Application management
==> Manage Web application
2. Go to "permission policy", then create a new permission level. This permission level contains all "edit item" permission.
3. Select "user policy", then I assign it directly to my user account: test\user1.
*** ii. Assign "edit item" permission at Site Collection level ***
1. Site Setting ==> Site permission
2. Assign "Edit" permission to my test\group.
(Actually I removed all permissions of my user group at Site Collection level. It seem my group has inherited permission from Web Application level, is that correct? )
*** iii. Create a new list item and workflow runs ……. ***
==> My question is:
1. Why I cannot assign permission to my users group - "test\group" -
at "Web Application" level? Instead I have to assign permission policy for each users, one by one?
2. Could you please let me know how to collect full detail error message of workflow status?
Thank you very much! Have a nice weekend.

Thank you for your very detail response.
Point 1: Yes my 2 service: user profile & profile sync service are running. I performed "full synchronization" as well. Actually i've tried 3 another action plans before coming up with the solution i posted:
*** Actions completed ***
1. Activate the feature: workflow can use app permissions.
Site actions > Site Settings > Site features >activate the feature below:
Workflows can use app permissions
2.
Refresh trusted security token services metadata feed
Get-SPTimerJob
"RefreshMetadataFeed"
| Start-SPTimerJob
- then restart the machine.
3. Start full user profile synchronization.
Point 2:
- Yes my user had Edit permission at workflow task list + list affected by workflow.
I have just remove all permissions of my user at "Site Collection" level. However, when i show my user permissions at my workflow task list and my users still have "Edit" Permission ( assigned at Web Application level. These permissions
still exist even after my workflow task list stop inheriting permission).
==> the problems probably belongs to "permission" at "Site Collection level". It seems "permission level at my Site Collection does not work". All users accounts are also suffer from the same issues except farm admin account
( which has full control at Web Application level).
I would appreciate if your guys can guide me how to make "permission" at my "Site Collection level" work again?
Thank you very much.

Configure a sharepoint 2013 site for external and internal access

I need to configure a local install of sharepoint 2013 so that users can access it internally and externally using windows/AD authentication. The internal and external addresses are different.
I have bound an external ip to the domain for external access.
I have created Alternate Access mapping, and bound the host header but I get a file not found message for external access.
Have I missed something here? why the error and how can it be fixed. Step by step process would be appreciated.

Hi Luis,
According to your description, my understanding is that the error occurred when accessing the site externally.
The most common cause for this is that the IIS host header is configured incorrectly. The 404 will appear because we are hitting a different IIS web site and not the one we are intended to.
Here is a similar issue for you to take a look:
http://stackoverflow.com/questions/14953322/sharepoint-2013-404-not-found-while-accessing-site-collection-from-outside
More references:
http://technet.microsoft.com/en-us/library/cc261814(v=office.15).aspx
http://technet.microsoft.com/en-us/library/cc263208(v=office.15).aspx
Best regards.
Thanks
Victoria Xia
TechNet Community Support

SharePoint 2013 Configuration Access denied

Similar Messages

Maybe you are looking for