Users cannot access SharePoint items after being added to a group.

When chaning membership of a SharePoint group that has item level permissions, the users in the SharePoint group can no longer access the items. I have a group that has low contributor/low modifier permissions on an item. When adding a new
user to the group, the existing members and new members can no longer access the item.

Hi Clem,
Let's verify your issue:
When a new item was added, you set permission to the group via workflow. Then when you added a new user to the group, the permission at the item level for the group was removed. Is it right?
How did you design your workflow to set permission to the group? Which actions did you use? Please provide more information about your workflow to reproduce this issue.
In addition, after you added a new user to the group, go to the item level permission page, check whether the group has permission to the item.
Best Regards,
Wendy
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Wendy Li
TechNet Community Support

Similar Messages

Users cannot access removable devices after you enable and then disable a Group Policy setting in Windows 7 64 Bit

Users cannot access removable devices after you enable and then disable a Group Policy setting on Windows 7 64 bit machines.
on the 32 bit machines I was able to apply this hotfix
http://support2.microsoft.com/kb/2738898
But it will not install on 64 bit machines.
Is there a hotfix for 64 bit? If not, what is the work around?
Thanks!
Robert

Select "Show hotfixes for all platforms and languages", then download x64 hotfix:
Please take a moment to Vote as Helpful and/or Mark as Answer where applicable. Thanks.

User cannot access Crystal reports after user was deleted and recreated

We are using Crystal Enterprise XIr2. We are using Windows AD authentication. We had an issue with a user where they were deleted in Active Directory. Now they can no longer run Crystal reports. When I go into the CMC and open users I see this user. When I try to open this user I get the following error
There was an error while retrieving data from the server: Active Directory Authentication failed to get the Active Directory groups for the account with ID "8B003DF11D45B244AC3B61AB36B6C445:ALLENDG". Please make sure this account is valid and belongs to an accessible domain.
I think Crystal is still trying to access the user's old Active Directory account.
I cannot delete the user either in CMC.
Is there someway I can correct this user.
Thanks
Adam

Arjun - Thank you for your help. I looked in Central Management Console but I could not find what you indicated.
CMC--> Public Folder --> Administration Tools
In administration tool, there are two objects
1) Update Windows AD Group Graph
2) Update Windows AD Group Graph and Aliases --> Right click on this Report and click on RUN Now.
I ended up deleting the records for this user in these SQL tables and then user could access InfoView
CMS_Aliases5 (2 records for this user)
CMS_InfoObjects5 (1 record with both aliases)

Failed to start workflow. The workflow cannot access the item that it has been applied to.

I have a quick question for you and it would be great if you can answer me on this.
I'm working through SharePoint Workflow issue (developed using Nintex) that started recently where people are getting workflow error and I don't see issues if I submit it myself. Current error. - "Failed to start workflow. The workflow cannot access
the item that it has been applied to."
I haven't made any major changes to Workflow except for changing email notification content and publishing it. My question is, do I need to publish the rest of the workflows too that are associated to the list after I publish changes of one workflow? Looks
like users have required permissions to submit the form. Please let me know how to get rid of this error.
smith

Hi Smithspd,
According to your description, my understanding is that your users got a workflow error, and the workflow is created by Nintex.
For SharePoint Designer workflow, once we do any change in a workflow, we need to re-publish the workflow.
For your issue, I suggest you re-publish the workflow, compare the result.
In addition, as your workflow is created by Nintex and this forum is for SharePoint Designer, I suggest you ask Nintex support or forum for better help. Thanks for your understanding.
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Event Receiver:Item is Being Adding Event Recevier Issue

Hi All,
* I had written Simple event receviers(Item is Being Adding) to a site at FarmLevel(Farm Solution) and below is the code for it.
* In below code I am adding the List name to a Column called "Name" ,when Item is being adding the code is getting loop and inserting unwanted data and updating Column "Name" with it instead of updating when item is added
*Below if u see there is no value in Column "Name" when I insert values "Mark Devis"(Title) and "In Meeting"(Body) columns
Can any one help me how can I solve the issue
       Code:
string listitle = properties.List.Title + "" + "is List Name";
string siteurl = http://sp2010:8080/personal/Sample/;
using (SPSite mysite = new SPSite(siteurl))
using (SPWeb myweb = mysite.OpenWeb())
SPList mylist = myweb.Lists["Announcements"];
SPListItem newitem = mylist.Items.Add();
      newitem["Name"] = listitle.ToString();
      newitem.Update();
Result:
Samar

Hello Samar,
Try to use before/after properties to update item in list on ItemAdding event.
http://sarveshspn.blogspot.in/2010/05/using-itemadding-and-afterproperties-to_08.html
http://social.msdn.microsoft.com/Forums/sharepoint/en-US/1ed217b1-9441-4fe1-b3aa-68b2768bdfc7/updating-list-item-value-on-the-itemadding-event-handler-of-an-item-receiver-class?forum=sharepointdevelopmentlegacy
Also make sure that you have at least contributor right in list to edit data.
Hemendra:Yesterday is just a memory,Tomorrow we may never see
Please remember to mark the replies as answers if they help and unmark them if they provide no help

User cannot access

hi,
i am new to this forum,i have one doubt,
user cannot access one authorization field , how can i analysis this issue, i know su 53 for find the authorization field...but user have 100 roles... how can i find the which role and object...plz help me..

Hi Hassan,
This is not the correct category. This message should be opened under security item. However, you can find the whole required authorization objects list, by using ST01 trace.
Best regards,
Orkun Gedik

User cannot access redirected Documents folder, but can connect to share in Windows Explorer and access folder on server

I am in the final stages of a cross-forest migration. Users have Windows 7 workstations with redirected folders on a Windows Server 2012 box running in the old forest. User accounts were not migrated. The accounts in use have always
been in the "new" forest. One of our challenges was the large volume of data in redirected folders. I made sure users in the target forest had continued to have access to their redirected folders in the old forest and robocopied
the entire users share, copying the permissions with the files. By doing incremental robocopies, we can get a final copy done now in about six hours. The plan was simple: copy the files, do an incremental copy every night, on the night of the cutover
change the folder redirection policy Documents path from
\\oldserver\users\%USERNAME% to
\\newserver\users\%USERNAME%. The policy is configured to NOT copy user files from the existing folder to the new redirected folder. Everything was going well until I tested the policy change. After the folder redirection policy is updated
and applied, the user cannot access the private Documents folder. For example, user Chester Tester logs on as ctester. I open Windows Explorer and click the Documents shortcut. I see one subfolder, which is subfolder of Public Documents.
So I can look at Public Documents but when I click on the Documents folder (Under the Documents library link) I get an access denied error. Now for the kicker, if I open another Windows Explorer window and edit the address bar to
\\newserver\users\ctester, I can navigate the Documents folder tree and see my thousands of documents. What the ....?
I'm hoping this is something really simple to fix!
TIA

HI Vivian,
Thank you for your reply. Yes, the path in Group Policy Folder Redirection Root Path was updated to
\\NEWSERVER\users. I had planned to point this to the distributed file system, so the first used was actually
\\domain\dfs\users. To simplify things I have backed off to copying to just a normal share
\\newserver\users.
We are using BASIC folder redirection and we create a folder for each user under the root path.
We did not want the policy to move content, as we were seeing users requiring 15-20 minute logon times (or higher) after the policy is changed.
Grant the User exclusive right to Documents - Disabled
Move the contents of Documents to the new location - Disabled
Related folder settings
Video - Follow Documents
Music - Follow Documents
Pictures - Follow Documents
Now when I change the folder redirection from old server to new server I now have TWO My Documents folders in the user's redirection folder on the server. The redirected Documents points to an empty folder set. The copied folders with all user
data are there, but folder redirection refuses to recognize the original folder.
I am looking at the full view of the folder, nothing hidden, so I'm wondering how a folder can have two subfolders with the exact same name. For now, I just want the redirection to move from the old server to the new server properly. I deleted
the new My Documents folder, rebooted the user's workstation and tried again. The behavior repeats itself, i.e., a new My Documents folder is always created when the redirection policy is changed from the old server to the new server. The environment
has about 1500 users with approximately 1.3TB of data in the redirected Documents folders. OUCH!

PIX Users Cannot Access Other Websites & Email Servers on Same-Shared T1 Co

We are sharing a T1 connection with another business in our building. They have their own separate network environment from mine. I have a Windows 2003 Small Business Server behind a PIX-501 and the users in my network connect to the Internet via Windows Server?s DHCP and Internet sharing (NAT) services.
All Internet and email traffic is accessible except for those hosted by the other company who we're sharing a connection with. My users cannot access that company?s web server or send email to their email server (we all get 4.4.7 SMTP errors? days later after sending the message).
They have no firewall on their end; which is why I think there may be something wrong with my PIX configuration (see attached config file). I'm sort of a newbie with the PIX CLI, so any help I can get could be great. Thanks in advanced!

The problem is not with PIX. This is a common problem when sharing a T1 link as it creates a routing problem since routing cannot be done based on shared T1 channels. Your PIX config is fine and has nothing to do with this issue.

BOX31 - Users cannot access InfoView

After upgrading BOXIR2 to BOX31 the users cannot access InfoView. The following message is shown:
Account Information Not Recognized: Enterprise authentication could not log you on ...
As administrator I can access OK.
What has changed between BOXIR2 and BOX31 in terms of user authentication?
Thank you in advance.

The structure of the users is as follow:
Management (at the top)
- Accounting
- Marketing
- Sales, etc
Users can then access one of the above, only one.
Universe restrictions has been applied to allow users to see information related to their department only.
We do not use any Windows AD authentication, it is just Business Objects.
Thank you.

After upgrading to Mountain Lion I am not able to access "security and privacy" button under "system preferences". I like to activate "find my mac" but cannot access privacy setting after upgrade. Kindly advice.

After upgrading to Mountain Lion I am not able to access "security and privacy" button under "system preferences". I like to activate "find my mac" but cannot access privacy setting after upgrade. Kindly advice.

Non-admin user cannot access Essbase server level variables

Version 11.1.1.3
Essbase Substitution variables are created at server level. Users are getting error in FR report that uses the Subsitution Variable -- Essbase Error(1051085): You do not have sufficient access to get this substitution variable. Also, users cannot access Substitution variable in SmartView. However, users can access variables created at database level. Users are provisioned as "Server Access" to Essbase and filter access to ASO application "MGTRPTG", where MGTRPTG is an ASO essbase application for reporting. We tried the same provisioning in two other environments and it seems to be working fine.
User is type "Essbase and Planning" provisioned with essbase "server access", application mgtrptg "filter", Reporting and Analysis "analyst", "dynamic viewer" and "Explorer". In addition, it is given a filter "REP_DME_GALB" which restricts 2 dimensions (Division and Geography).
Steps taken to resolve:
1. Existing users were deprovisioned and reprovisioned with no effect.
2. Created brand new identically provisioned users in Prod and QA. QA user can access the server level var and Prod user cannot
3. Created a brand new server level variable in Prod and this cannot be accessed.
4. All services have already been restarted several times.
5. SR has been opened.
Temporary workaround:
By creating a duplicate of the same set of variables at the database level, the reports work. This can only be a temporary workaround as the client cannot be expected to maintain two sets of substitution variables since there are 3 applications using these server level variables.
Thank you for any ideas!
Jennifer

You have stumbled on a defect which is resolved in the Hyperion Planning 9.3.1 patch 6 and above. If you have your planning preferences set to indent members it will cause forms which have page selections to show as invalid in SmartView.
You can either patch Planning or turn off the preference. The patches are available from http://metalink3.oracle.com and require account which has been associated with your client ID.
P.S. Usually it's not a good practice to use the admin id.
Regards,
-John
Edited by: Jbooth on Nov 3, 2008 2:12 PM

Cannot access my Ipad after downloading latest download. It wont accept my password.

I cannot access my Ipad after downloading latest download. The Ipad wont accept my password. What can I do?

Try the following:
1. Restore:
http://support.apple.com/kb/HT1414
2. Recovery:
http://support.apple.com/kb/HT1808

Computer clock that user cannot access

I have made a game that i published on Kongregate using C# language with Unity.
I have a serious issue though. If the player stays offline, he gets some bonus in game when he returns. The more he is offline the bigger bonus. The issue is that if someone while he is offline changes the clock of his computer to 1 day or 10 years in the
future he gets so much bonus that he ruins the game.
Is there any way to avoid that without having a server to get time?
In the webplayer i cannot use NTP due to security limitations, so i am trying to find a clock that the user cannot access.
Thanks in advance for any possible answers!

The software house where I'm working as a phone app which uses a timestamp on data it sends to a server.
There are frequent issues with users messing with the time on their devices for games like candy crush.
This causes no end of problems since you get data which is sent as if it happened like yesterday or some such and bad stuff happens.
You definitely don't want to rely on the time on the users computer.
Get the time when you start up or support bonus for save to server only and apply it retrospectively.
Use a timer to see how long they play between saves if necessary.
Or change the game and ditch the bonus mechanism.
Hope that helps.
Technet articles: Uneventful MVVM;
All my Technet Articles

Users cannot access calenders from outlook after migration to exchange 2013

I have a strange situation after upgrading to exchange 2013 some users are reporting that they cannot open or create calender appointments for calenders they used to be able to manage. we currently are using outlook 2010. also when the users access the calenders
with the webmail they are reporting that they can access the calenders and are able to do all the things they need to do.
i have tried reinstalling office and adding their exchange accounts but this does not help.
another stange thing is that to be sure i had setup the correct access policy i have reset all the security entries on all the calendars with the help of powershell. this seemed to have helped but after a couple of hours some users started reporting that they
could not access calendar items again!

Hi,
Is there any error description when the problematic users cannot open or create calendar items? Since the issue only happens to some users instead of all users and all calendars can work well in OWA, I think the calendar in the mailbox
should be configured properly.
Please configure the problematic user’s Outlook account in a clean computer with new installed Outlook to check whether the issue persists.
Thanks,
Winnie Liang
TechNet Community Support

Cannot access Crystal Reports after adding SP1

On a new install of Crystal Reports 2008 I downloaded and added SP1 (cr121_clickonce.zip) to try to update my .NET to the new version of Crystal. I now get the error message:
The procedure entry point ?PrintLegend@CMapXLegend@CSLib300@@QAEXJJJJJ@Z could not be located in the dynamic link library cslibu-3-0.dll.
I also added the update from 'cr120_redist_install.zip' which will allow my users to access the .NET files and programs they need. (This I did only on one machine to test its success)
I am sure it is a case of inexperience but can you help me get back in business with Crystal Reports 2008

Hmmm, "... I downloaded and added SP1 (cr121_clickonce.zip)"
That file is not the SP 1 download. Sp 1 is here:
https://smpdl.sap-ag.de/~sapidp/012002523100010503722008E/cr2008_sp1.exe
So. At this point, I'm not really clear as what has been done and why.
E.g.; "...I downloaded and added SP1 (cr121_clickonce.zip) to try to update my .NET to the new version of Crystal"
- this sounds kinda muddled up...
And this: "I also added the update from 'cr120_redist_install.zip' which will allow my users to access the .NET files and programs they need. " also does not sound right.
I'd recommend uninstalling CR 2008 on your development system. Reinstall and then Apply SP 1 from the above link. This will update you to CR 2008 SP1 on the development computer.
Now, if you are then trying to deploy a .NET app to a client, use the MSI from here:
https://smpdl.sap-ag.de/~sapidp/012002523100011722132008E/cr121_redist_install.zip
or you can build your own deployment project using the msm from here:
https://smpdl.sap-ag.de/~sapidp/012002523100011715292008E/cr121_mm.zip
Ludek

Users cannot access SharePoint items after being added to a group.

Similar Messages

Maybe you are looking for