Microsoft KB Archive/926320

Knowledge Base

You cannot add users and groups to the Farm Administrators group after you remove the BUILTIN\Administrators group from the Farm Administrators group in Windows SharePoint Services 3.0

Article ID: 926320

Article Last Modified on 5/14/2007

---

APPLIES TO

• Microsoft Windows SharePoint Services 3.0

---

Beta Information

This article discusses a Beta release of a Microsoft product. The information in this article is provided as-is and is subject to change without notice.

No formal product support is available from Microsoft for this Beta product. For information about how to obtain support for a Beta release, see the documentation that is included with the Beta product files, or check the Web location where you downloaded the release.

SYMPTOMS

Consider the following scenario. You are a member of the local BUILTIN\Administrators group on a computer that is running Microsoft Windows SharePoint Services 3.0. The BUILTIN\Administrators group is a member of the Farm Administrators group in Windows SharePoint Services 3.0. You remove the BUILTIN\Administrators group from the Farm Administrators group. After you do this, you receive the following error message when you try to access SharePoint 3.0 Central Administration:

Error: Access Denied

Additionally, you add the user account that is configured as the application pool identity for SharePoint 3.0 Central Administration to the BUILTIN\Administrators group. You then access SharePoint 3.0 Central Administration by using that user account. However, when you try to add a user or a group to the Farm Administrators group, you receive the following error message:

Local administrator privilege is required to update the Farm Administrators' group.

Troubleshoot issues with Windows SharePoint Services.

Therefore, you cannot add users or groups to the Farm Administrators group.

WORKAROUND

To work around this issue, follow these steps:

1. Add the user account that is configured as the application pool identity for SharePoint 3.0 Central Administration to the BUILTIN\Administrators group on the Web server. To do this follow these steps:
   1. Click Start, point to Administrative Tools, and then click Computer Management.
   2. Expand Local Users and Groups, and then click Groups.
   3. Right-click Administrators, click Properties, and then click Add.
   4. In the Select Users dialog box, type the name of the user account that is configured as the application pool identity for SharePoint 3.0 Central Administration, click Check Names, and then click OK two times.
2. Add the users and groups that you want to the Farm Administrators group. To do this, follow these steps:
   1. Log on to SharePoint 3.0 Central Administration by using the user account that is configured as the application pool identity for SharePoint 3.0 Central Administration.
   2. Click Operations, and then under Security Configuration, click Update farm administrator's group.
   3. On the People and Groups: Farm Administrators page, click New, and then click Add Users.
   4. In the Add Users area of the Add Users: Central Administration page, specify the user accounts and the groups that you want to add in the Users box.
   5. In the Give Permission area, click Add users to a SharePoint group, and then verify that Farm Administrators [Full Control] is selected.
   6. In the Send E-mail area, specify whether you want to send an e-mail message to users whom you added to the Farm Administrators group.
   7. Click OK.

Additional query words: wss wss3 wssv3

Keywords: kberrmsg kbprb kbtshoot kbexpertiseinter KB926320

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.