When I'm setting up SSO I get the following error: You do not have the rights to perform this operation. The service is started, the service account is a part of the local administrators group; dbcreator, securityadmin on the database; a member of the sharepoint farm administrators group. I'm loooking at the docs at http://technet2.microsoft.com/Office/en-us/library/841080ca-3e3b-4dbc-a081-43c29c76b3551033.mspx?mfr=true and I noticed the Central Administration site doesn't have a "Reader" group. The event log shows the following: Type: ErrorDate: 1/18/2007Time: 6:40:24 PMEvent: 6517Source: Office SharePoint ServerCategory: SSOUser: N/AComputer: SERVERNAMEDescription:User DOMAIN\myuser failed to configure the single sign-on server. The error returned was 0x80630005. Verify this account has sufficient permissions and try again. Any thoughts on cause/workaround? Thanks,Colin

There's several causes to this: - Are you logged on locally on the server? - Is the account logged on locally the account that is specified as the sso admin? Or if that was specified as a group did you add the user that is logged in to that group? - Does the SSO service account have the permission to db creator and securityadmin on the database server? Bit more information about your topology would be nice.

It's a single server with a separate database server. I was part of the local SSO Admin and the account had both db creator and securityadmin access on the database server. I ended up granting sysadmin access to the account on the database server, reinputting the service accounts and it seems to have gone away. The version of Sharepoint seems quite challenging as far as installation goes. I have encountereda number of problems that isn't helped by a documentation set that is largely marked as "TBD".

I was getting this error when trying to enable SSO on our MOSS 2007 dev server: "You do not have the rights to perform this operation." I was signed in as domain admin, and tried setting account to domain admin. Ensuring the service logged on as domain account, then stopping and starting the service didn't fix it. Came across this Chris Johnson blog (http://blogs.msdn.com/cjohnson/archive/2005/07/01/434384.aspx) where he suggested modifying the registry for a another SSO error. Find the ImagePath registry entry at the following location: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ssosrv Remove the quotation strings from around the the ImagePath value ... and away you go. I removed the quotes from the registry as he suggested. Then stopped and started the service again. I entered the same domain admin credentials. And it worked.

Okay, here is how to configure MOS SSO without changing the registry: Create a domain account like SSO_Service_Account In the Windows Services applet: on tab "logon" set the "Microsoft Single Sign On Service" to run as this account Add account to groups "Administrators" (for key server)and " WSS_Admin_WPG" on the MOS server Log off as Administrator Log on locally to you key server with this account (not as Administrator) Run Central Admin 3.0, and click manage SSO Enter the same account for property "SSO Administrator Account" This should work :-) Wim De Groote

THANK YOU!!

Hi Wim, Thanks for your post. i still have a problem though.When i log on with the SSO_Service_Account, am able to run Central admin successfully but when when i try to access "manage SSO" i get Access denied, even when this account is a member of the Farm administrators. Please help, i've really spent alot of time on this one without getting anywhere.

I have same problem. After installation of MOSS SP1, SSO did not worked anymore and needed to set up again. When I try to set up with old setting I get following error: A Single Sign-on error has occurred. Please contact an administrator. Details: The network path was not found

you guys have any luck - Im in the same boat...bjc

I followed this article and everything worked like a charm for me.http://www.thorprojects.com/blog/archive/2008/08/02/moss-single-sign-on-setup-step-by-step.aspx

Hi,Earlier, when I was configuring SSO with domainname\spssoservice account I faced the same kind of error You do not have the rights to perform this operation also Error: Access denied while trying to access _layouts pages like operation tab and application management tab, then I did some R&D and at last found the solution, soon I went to my network administrator and told them to add the domainname\spssoservice account to domain admins groups of active directory.After then I was able to solve the problem and able to access the _layouts pages also configured SSO.Thank you,G Vijai Kumar

Hi,Earlier, when I was configuring SSO with domainname\spssoservice account I faced the same kind of error You do not have the rights to perform this operation also Error: Access denied while trying to access _layouts pages like operation tab and application management tab, then I did some R&D and at last found the solution, soon I went to my network administrator and told them to add the domainname\spssoservice account to domain admins groups of active directory.After then I was able to solve the problem and able to access the _layouts pages also configured SSO.Thank you,G Vijai Kumar

Oh wow...this was the key for me... Log on locally to you key server with this account (not as Administrator) Thanks.

Perfect - thanks!Jason