Microsoft KB Archive/823278

= You receive an &quot;Access denied&quot; or a &quot;Cannot complete this action&quot; error message when you try to connect to a Windows SharePoint Services Web site =

Article ID: 823278

Article Last Modified on 12/4/2007

-

APPLIES TO


 * Microsoft Windows SharePoint Services 3.0
 * Microsoft Windows SharePoint Services 2.0

-





SYMPTOMS
When you try to connect a Microsoft Windows SharePoint Services 2.0 or a Microsoft Windows SharePoint Services 3.0 Web site, you may receive an error message that is similar to one of the following:

Access denied. You do not have permission to perform this action or access this resource. Access requests are not enabled.

Cannot complete this action.

Please try again.

You may experience this symptom even though you are logged on by using a user account that is a member of the Domain Administration group and you are the site owner of the Windows SharePoint Services Web site.



CAUSE
This issue occurs if you delete the user account in Microsoft Windows, and then re-create the user account by using the same user name. Windows generates a unique security identifier (SID) for each new user account that you create. In situations where you delete a user account in Windows, and then re-create it by using the same name, you must remove and then add the new user account to the site collection in Windows SharePoint Services before the user can view Web pages in that site collection.



RESOLUTION
To resolve this issue, use one of the following methods as appropriate to your situation.

Method 1: If the User Is a Member of the Users Group
If the user is a member of the Users group in Windows, remove the existing user account from the site collection in Windows SharePoint Services, and then add the new user account that you re-created to the site collection. To do so, follow these steps:

Windows SharePoint Services 3.0

 * 1) Connect to the Windows SharePoint Services 3.0 Web site by using a user account that has administrator permissions to the site collection.
 * 2) Click Site Actions, and then click Site Settings.
 * 3) On the Site Settings page, click People and groups under Users and Permissions.
 * 4) Click to select the check box next to the user account that you want to remove from the site collection, and then click Remove Users from Group under Actions.
 * 5) Click OK when you are prompted to confirm the removal.
 * 6) Click Site Actions, and then click Site Settings.
 * 7) On the Site Settings page, click People and groups under Users and Permissions.
 * 8) On the People and Groups page, click New, and then click Add Users.
 * 9) On the Add Users Central Administration page, type  in the Users/Groups box, click Check Names, click to select the permissions that you want the user to have under Give Permission, and then click OK.

Note You may add a user to a SharePoint group by selecting a group from the Add users to a SharePoint group list under Give Permission.

Windows SharePoint Services 2.0
 Connect to the Windows SharePoint Services 2.0 Web site by using a user account that has administrator permissions to the site collection. Click Site Settings. On the Site Settings page, under Administration, click Go to Site Administration. On the Top-level Site Administration page, under Site Collection Administration, click View site collection user information. Click to select the check box next to the user account that you want to remove from the site collection, and then click Remove Selected Users. Click Yes when you are prompted to confirm the removal.</li> Click Site Settings.</li> On the Site Settings page, under Administration, click Go to Site Administration.</li> On the Top-level Site Administration page, under Users and Permissions, click Manage Users.</li> On the Manage Users page, click Add Users.</li> On the Add Users:  page, in the Step 1: Choose users area, type the name of the user account that you want to add in the Users box.

Make sure that you specify the name of the user by using the following format:

\

</li> In the Step 2: Choose Site Groups area, click to select the check box next to the site group that you want to assign the user, and then click Next.</li> Confirm the user who you want to add to the site, specify the e-mail option that you want, and then click Finish.</li></ol>

Method 2: If the user is member of the Domain Administration group and is site owner
If the user is a member of the Domain Administration group in Windows and is also listed as the site owner of the Windows SharePoint Services Web site, temporarily specify a different user account as the site owner, remove the temporary site owner, and then specify the new account that you re-created as the site owner. To do so, follow these steps: <ol> Log on to Windows as an administrator with sufficient permissions to administer the site.

Make sure that you do not log on by using the user account that you re-created.</li> Start Windows SharePoint Services Central Administration.</li> Under Security Configuration, click Manage site collection owners.</li> In the Site URL area, type the URL of the site collection in the Web Site URL box, and then click View.</li> In the Site Collection Owner area, type a different user account in the User name box to temporarily configure a new site owner.

Make sure that you specify the name of the user account by using the following format:

\

</li> Click OK.</li> On the Windows SharePoint Services Central Administration page, under Security Configuration, click Manage site collection owners.</li> Under Security Configuration, click Manage site collection owners.</li> In the Site URL area, type the URL of the site collection in the Web Site URL box, and then click View.</li> <li>In the Site Collection Owner area, type the user account that you created in the User name box.

Make sure that you specify the name of the user account by using the following format:

\

</li> <li>Click OK.</li></ol>

Method 3: If you use Microsoft Office Project Server 2003 features that rely on Windows SharePoint Services
If you are also using Microsoft Office Project Server 2003 features that rely on Windows SharePoint Services, following these steps to avoid receiving this error message when you access documents:
 * 1) Log on to Project Web Access as an administrator.
 * 2) Click the Admin tab, click Manage SharePoint Service, and then click Manage SharePoint Sites.
 * 3) Click the Project name, and then click Synchronize.

Now, the new user profile that is updated in Windows is updated in Project Server. This new user profile is now synchronized with the Windows SharePoint Services profile.

<div class="moreinformation_section">

MORE INFORMATION
You may experience this problem if the user accounts are migrated by using the Active Directory Migration Tool. This tool creates a new account in the target domain. Therefore permissions will have to be re-applied for the user to gain access. Consider a scenario where a user is in a Child Domain in the forest, for example CHILD\cuser1. This account is then migrated to a parent domain by using the migration tool, and now becomes PARENT\cuser1. In this scenario, a new SID is applied to the migrated account, and the users old SID/user information still resides on the WSS/SharePoint site. You have to re-permission the site with the new account for the user to regain access.

For more information about Windows SharePoint Services, visit the following Microsoft Web site:

http://technet.microsoft.com/en-us/windowsserver/sharepoint/bb741069.aspx

Additional query words: WSSv3 WSS

Keywords: kberrmsg kbtshoot kbnofix kbprb kbwebservices kbaccounts KB823278

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.