BobTheBuild

I created a Shared Service on my server a few days ago using the local administrator account. I have since created a separate Windows account (belongs to the Administrators group) for myself to use. I'm able to do everything in the Central Administration site but accessing this instance of Shared Serviced created a few days ago. What specific access rights does it need My windows account is in the Farm Administrators group too.

Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

Bob Fox MVP

Bob,

Log into Shared Services using the same account you used to create the SSP a few days ago with. There is a permissions seperation between Shared Services and the Central Administration. You simply need to add your account you want to access with.

Hope this helps






Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

ArieMichal

I'm having the same problem. 2 Domain admins, both in MOSS 2007's Farm Administrators group, but only one (the one first used to install/config MOSS) can open the default SSP's admin page. I was even able to make a test domain user, add it to the domain admins group and the farm administrators group then use it successfully to get to the SSP admin page. But my other admin's account still can't, and its the only thing on the server and in MOSS he can't do.

We who are having this problem can already tell there is a separation somewhere. What we need to know is not that a separation exists, since that is clear, but we need to know WHERE it is. WHERE do I go, WHAT do I do specifically to overcome it

ArieMichal





Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

Bob Fox MVP

Hey friend im just trying to help here so please keep the tone down. :)

Did you add you other Administrator to the SSP portal






Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

kiral

Try adding the second admin to the site collection admins of the SSP admin site. That should help.




Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

kentek

I, too, have had this problem.
My only way of solving it so far is to create a new SSP and then re-assign the other sites to the new SSP. The busted SSP can then be removed via IIS.

I know that this will have some implications as to content that was already created in other sites but it is the only way for me to move forward.
What I am learning is that the Shared Services is a special site. Without adequate documentation I'm flying blind.

MOSS 2007 is a huge improvement over previous versions but still has a way to go before it is a manageable product.
I would love to see MS do a better job of streamlining the Admin user, SSP admin, with a set of defaults or recommendation via EXAMPLEs.






Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

Oletho

kiral wrote:
Try adding the second admin to the site collection admins of the SSP admin site. That should help.

Exactly! Thanks a lot, kiral.

Ole Thomsen





Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

BobTheBuild

Thanks a lot Kiral. That fixed the problem for me. It really makes sense since a new top level site wouldn't know what accounts need to be in the admin group other than the account creating it.



Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

Matthew Huntley

Has anyone run across this situation:

I cannot logon to Shared Services with the account used to install it, or any other account

How can I tell which account created it I just want to verify that I am using the right account to access it.

Thanks,

Matt





Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

gbuehrle

Thanks so much Kiral. I had this same issue and your fix worked perfectly. This stuff isn't very intuitive.





Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

Bob Fox MVP

You can find out the account by looking at your App Pool for your SSP. Try logging in with that account






Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

Raju07

I am facing this issue with accessing newly created SSP and never had issue like this.

I can't access the admin site of SSP with any of accounts (set up user, farm admin , ssp pool and ssp service) used to setup but can access settings page like /_layouts/settings.aspx or searchsspsettings.aspx. SSP setup user has full control and added farm admin as well with full control. But nothing happened and still can'taccess the ssp admin site

If I change the Authentication provider to Enable anonymous access, I can see admin site for one or two clicks. I configured it on many server but never had this issue. Only difference with this is SQL Server is running under local system accout.

But no result.

Thanks,






Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

Shane Young MVP

I wrote a blog Give a user access to SSP that should help all of you with permissions. For the person having problem logging in with any account you could try the blog link to from that post Become Administrator of the Entire Web Application and give yourselft access to the whole web application.

Shane - SharePoint Help





Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

chanman

I've got a similar issue. I can't access the SSP admin site at the base url, I get access denied. If I put in

http://servername/ssp/admin/_layouts/settings.aspx I can access all settings. I added additional users. Still no luck accessing main http://servername/ssp/admin. The new users can access the settings.aspx page directly.





Re: SharePoint - Setup, Upgrade, Administration and Operation Getting Access denied when nav to the Shared Service instance

akasmile

We are having this same problem. We are not able to access the Shared Services Provider site with the account I just used to create it, the sp farm account, ssp-app account, or ssp-service account. I have tried the above suggestions including adding the accounts as full application administrators, as farm administrators, and as site administrators through the _layouts/settings.aspx page which we can also get to directly. We have loaded MOSS many times in the last few weeks in our lab and come across this issue ALOT. Any other suggestions would be greatly appreciated. Thanks.

Edit:

I finally found the answer, it was just much further down the google tree than I normally go. It appears to be a bug where sharepoint builds the app pool but insists on running it with the ssp service account instead of the app account that gets entered and won't let you change it. I created a new app pool by hand with the correct account and moved my ssp data to it as suggested here http://faraz-khan.blogspot.com/2007/06/moss-2007-cannot-login-into-ssp.html .

It worked like a charm! Hope this helps.