Glynn Barnard

Hello,

I had a functioning SharePoint site prior to running DCPromo to make this box a secondary DC in my environment. Now after becoming a DC, the site is no longer viewable. I have done some digging and I think it is because the account I did the initial install with was a local account which was blown away by the DCPromo. Can anyonew point tell me how I can reassign these accounts to get my site back up

Thanks,

Glynn



Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Chris_Jones199

Glynn,

What configuration have you installed MOSS in Is the SQL server on the same box

I can't guarantee that you will be able to get MOSS running again, but try the following...

If SQL server (including SQL server express) is on the same box the first thing you need to do is make sure that it is running correctly and that all of it's services are starting successfully (you may need to change the account they are login on as to a domain account).

Once you have SQL server backup you need to make sure that you have an account with full control over the databases.

Then to get MOSS backup and running try running the SharePoint Configuration Wizard with the account that has full database access.

Please let me know how you get on.

Chris





Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Neil Hodgkinson (MSFT - PFE)

Just to add something to Chris's comments above.

Once you have completed Chris's suggestions also consider using

stsadm -o updatefarmcredentials

here you can specify the accounts used to "run" moss. make sure they have the reuired group memberships as specified in the install guide






Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Glynn Barnard

Hi Chris,

Thanks for your reply. My MOSS is a single server. All components run on the same box. It looks like all my SQL services are up and running. I can now see my site if I view it from the server itself, but if I try to view it from a workstation, I get prompted for credentials but it doesn't accept any I give it. I just get an error stating that I don't have permission to view the site.

Glynn





Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Glynn Barnard

Neil,

I will give your suggestion a try. Thanks for your help.

Glynn





Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Chris_Jones199

Glynn,

As Neil said try updating the farm credentials using stsadm - see http://blogs.msdn.com/joelo/archive/2006/08/22/712945.aspx for some more instructions.

When you say you get an error saying you don't have permission to view the site is it an IIS authentication error page, or is it the SharePoint access denied page

If it is the access denied page then what permissions are you expecting the account to have If the account should be the site collection administrator then check this from Central Administration -> Applications -> Site Collection Administrators. Another option if you are getting the SharePoint access denied page is to use "Policy for Web Application" to grant full control to the account for the Web application in question.

Also check the event logs on the server for DCOM errors. If you are changing the accounts that the SharePoint services are running under then you may get DCOM errors which you will need to fix. Also check for ASP.Net errors I know of one error that prevents you from authenticating because of a bug in .net (there is a hot fix for it).

Chris




Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Glynn Barnard

Ok, I ran stsadm, but the site is still not accessible to any account other than my domain administrator account. Even my admin account cannot view the site anywhere else other than in a browser on the SharePoint server. The access denied message that I am getting is an IIS error. It seems that all my domain accounts have lost permission to view the site. When I look at the permissions in IIS for each SharePoint web site, I see that there are 2 unknown accounts which still have permissions attached to them. Is there any way to find out what these accounts were

Oh also, I should add that I don't have any DCOM or ASP.net errors in my event log. The only errors that I am getting now are EventID: 4127, Source: Office Server Search, Error no mapping between account names and security IDs was done.

Do you think that if I re-ran the installer I would be able to correct these problems

Thanks for your help guys. I am really pulling my hair out on this one...

Glynn





Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Neil Hodgkinson (MSFT - PFE)

the search error is almost certainly a problem with the account used to launch the search service

you say that the only account that can login is the local admin account, this leads to a possible isue with the permissions on the site itself. Im assuming you have set these up properly so the final check would be the authentication method you are using.

have you enabled kerberos






Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Glynn Barnard

Neil,

The site was working great prior to me running DCPromo on the box. Prior to the problem, all my domain users could access the site without a login prompt. I have not enabled Kerberos. I have not really made any changes since it stopped working. I have played around with permissions, but I have tried to put everything back to the way it was before I broke it.

Glynn





Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Neil Hodgkinson (MSFT - PFE)

Glynn

When you DCPROMO'd the box did you create a new domain or just add a new DC to the existing domain






Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Jukka Paajanen - MSFT

This may be off, but one thing I've seen frequently after several OS-level operations is that the ASP.NET accounts don't have proper permissions to the temp files they need. Maybe you already covered this.

To verify if this is you:

  • eventviewer will show ASP.NET WARNING about something and temp files (I cannot remember the full warning and don't have a machine in this state handy). (Yes, I agree, I would log this as an error, not a warning, but that's what is happening)

To fix:

  • You can reinstall ASP.NET. Alternatively (and much better in most cases), run from the ASP.NET folder (Windows\microsoft.net\framework\v2.0.50727) aspnet_regiis -i. Some people prefer to use other options too. This will reregister ASP.NET to IIS, also ensuring the permissions are correct.

JP





Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Glynn Barnard

Neil,

I just added the box as a new DC in an existing domain.





Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Glynn Barnard

Neil,

I am pretty sure that this is a permission problem.When I try to access the site from my workstation, this is the error I get from IIS:

You are not authorized to view this page

You do not have permission to view this directory or page using the credentials that you supplied because your Web browser is sending a WWW-Authenticate header field that the Web server is not configured to accept.




Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Chris_Jones199

Glynn,

Here's a thought:

Have you tried creating a new Web Application on the server on a separate URL With a new content database and a new site collection

If that works then you will atleast know that Sharepoint is running correctly on the box - you could then either try repairing the existing web application or detach the content databases, delete the web application and then recreate it and attach the previous content databases.

If the new web application doesn't work then you know that there is a bigger problem that needs fixing.

Chris





Re: SharePoint - Setup, Upgrade, Administration and Operation Problems accessing MOSS 2007 after running DCPromo

Glynn Barnard

I'm pretty sure that SharePoint is working because when logged onto the console of the SharePoint server as administrator, I can browse my site and everything works fine. The problem is that this is the only way to see the site. It seems that the permissions do not allow access to the site over the network only locally on that box.

Glynn