I've just installed sharepoint 3 and have the following dafault permissions groups: Central Administration members - Farm administrator - Site admin - Users I've added 2 windows accounts to central admin and site admin and they can access the site okay but nobody else can When i add any windows account to the Users group they get an 'access denied' Ideally i would like to add the 'domain users' group from Active directopry to the Sharepoint Users group but when i do so nobody can access Can someone please help it driving me nuts and holding up our project thanks a lot

Hi:There is two ways you can add users in SP. 1. Domain\Domain Users2. NT Authority \Authenticated users : Includes all domains.You have to start full AD import for your case as your first step .Are you done with that?Windows SharePoint Services includes three groups by default owners (administrator) members (contributor) & visitors (reader). Domain groups can be added to any of these three. Basically you need to add the AD group (local) to a SharePoint group.MOSS Site settings >> People and Groups >> and click on >> "ADD Users". If you have created sharepoint groups you have to take "Permissions' level into consideration? This link can give you some more help.http://social.technet.microsoft.com/forums/en-US/sharepointadmin/thread/8f8053d0-8572-4177-bbf6-2a98d6a85475/For Groups and permissions levels please go through http://office.microsoft.com/en-us/sharepointserver/HA101032221033.aspxThanks,Best Regards, Mukesh Giri Sr.System Executive

thank you i'm not sure how to do a full AD import? all i want to do is give the Domain Users group access to the Users group within sharepoint I followed the instructions of: MOSS Site settings >> People and Groups >> and click on >> "ADD Users " and added domain\domain users but still everyones gets "access denied" it seems really simple but i canpt understand why it doesn't work, unless you really need to do something with the AD import?

> There is two ways you can add users in SP.You can also add local users on the server running SharePoint. Not wise if you have more than one server but possible so there aren't only the two options you list.FAQ sites: (SP 2010) http://wssv4faq.mindsharp.com; (v3) http://wssv3faq.mindsharp.com and (WSS 2.0) http://wssv2faq.mindsharp.com Complete Book Lists (incl. foreign language) on each site.

we have sharepoint running on our single domain controller, so all domain accounts could be local? ive added singular accounts and they still get access denied

Hi nvisibl,I don't think you need to do AD import. Did you get any error messages in event viewer or ULS logs?Lu Zou

none in event viewer what are the ULS logs and how do i access them thanks

Hi:ULS > Unified Logging Services and location for them are under 12 hive. ie.. ..\ 12 \ LogsBest Regards, Mukesh Giri Sr.System Executive

thanksi checked the logs and can't see anything obvious.. only references to owstimer.exe, mssdmn.exe, mssearch.exeis there anything else i can do?

i'm really lost on this one and we are due to go live on our site very soonany further help will be most appreciated.. thank you

what can i do with this can anyone please advise????

here is some output i get from the IIS log when i try to login with a domain user and receieve the "access denied" notificationdo you know if there is anything here that shows where the problem might be? thank you2010-02-17 12:35:36 W3SVC851852176 192.168.1.4 POST /_vti_bin/sitedata.asmx - 80 - 192.168.1.4 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.3053) 401 2 21480742542010-02-17 12:35:36 W3SVC851852176 192.168.1.4 POST /_vti_bin/sitedata.asmx - 80 - 192.168.1.4 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.3053) 401 1 02010-02-17 12:35:36 W3SVC851852176 192.168.1.4 POST /_vti_bin/sitedata.asmx - 80 NT+AUTHORITY\LOCAL+SERVICE 192.168.1.4 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.3053) 200 0 02010-02-17 12:35:36 W3SVC851852176 192.168.1.4 POST /_vti_bin/sitedata.asmx - 80 NT+AUTHORITY\LOCAL+SERVICE 192.168.1.4 Mozilla/4.0+(compatible;+MSIE+6.0;+MS+Web+Services+Client+Protocol+2.0.50727.3053) 200 0 02010-02-17 12:35:38 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx loginasanotheruser=true&Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 - 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 1 02010-02-17 12:35:38 W3SVC851852176 192.168.1.4 GET /default.aspx - 80 - 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 2 21480742542010-02-17 12:35:38 W3SVC851852176 192.168.1.4 GET /default.aspx - 80 - 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 1 02010-02-17 12:35:38 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 - 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 2 21480742542010-02-17 12:35:38 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx loginasanotheruser=true&Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 MOUNTAIN\chloe.dickson 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 302 0 02010-02-17 12:35:38 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 - 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 1 02010-02-17 12:35:38 W3SVC851852176 192.168.1.4 GET /default.aspx - 80 MOUNTAIN\chloe.dickson 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 302 0 02010-02-17 12:35:38 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 MOUNTAIN\chloe.dickson 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 200 0 02010-02-17 12:36:44 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx loginasanotheruser=true&Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 - 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 2 21480742542010-02-17 12:36:46 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx loginasanotheruser=true&Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 - 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 1 02010-02-17 12:36:46 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx loginasanotheruser=true&Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 MOUNTAIN\chloe.dickson 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 5 02010-02-17 12:36:55 W3SVC851852176 192.168.1.4 GET /_layouts/AccessDenied.aspx loginasanotheruser=true&Source=http%3A%2F%2Fcairnserve3%2Fdefault%2Easpx 80 MOUNTAIN\chloe.dickson 192.168.1.171 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+Trident/4.0;+InfoPath.2;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.648;+.NET+CLR+3.5.21022) 401 5 0

Hi:There is two ways you can add users in SP. 1. Domain\Domain Users2. NT Authority \Authenticated users : Includes all domains. Best Regards, Mukesh Giri Sr.System Executive i tried to enter NT Authority \ Authenticated users into the Users Group but the name doesn't resolve??????only NT Authority \Local Service or \ Network Service seems to be presentis this a problem?

i tried to enter NT Authority \ Authenticated users into the Users Group but the name doesn't resolve??????only NT Authority \Local Service or \ Network Service seems to be presentis this a problem?

Hi:Please check with your AD\server team in that case.Thanks,Best Regards, Mukesh Giri Sr.System Executive

hi mukesh, we only have a single domain controller.. and our sharepoint is installed on this tooif domain users doesn't work (as above), would it make any difference to use NT Authenticated users?thanks for your help

i found how to add NT authenticated users to the sharepoint users group, but they still get 'access denied'why is this not working, its a brand new install !!

Hi: This is strange..it should work..How have you added? Best Regards, Mukesh Giri Sr.System Executive

i've been trying to add via central administration consolei didn't try adding to 'team members', 'team visitors', or 'team owners' via the front end ... when i did this the users could then get access.is this the way i shold have done it to begin with?why doesn't it work via central admin?

Hi:Great that it has been resolved if you go through the first answer which has been been marked as answer you get your answer preety straight.Cheers,Best Regards, Mukesh Giri Sr.System Executive

yes your right thank you mukesh for your time its been my lack of understanding of how the permissions are applied