Microsoft KB Archive/932378

= Members of the domain local group cannot view a Microsoft Office SharePoint Server 2007 Web site =

Article ID: 932378

Article Last Modified on 5/14/2007

-

APPLIES TO


 * Microsoft Office SharePoint Server 2007

-



SYMPTOMS
You grant permissions to a domain local group to view a Microsoft Office SharePoint Server 2007 Web site. However, when members of the domain local group try to visit the SharePoint Server 2007 Web site, they receive an error message that resembles the following:

401 - Access Denied



CAUSE
This behavior occurs when the domain local group resides in a mixed-mode domain. Before domain local group members can access a SharePoint Server 2007 Web site, the Active Directory directory service must be running in native mode or running at the Microsoft Windows Server 2003 domain functional level.

In mixed-mode domains, the domain local group can only be used on the domain controller. However, when the domain is run in native mode, the domain local group can be used within the boundary of the domain.



RESOLUTION
To resolve this problem if your existing domain is running in mixed mode, use domain global groups to assign security roles to folders.

