Re: In SSP Admin page Search Setting link fails with access denied

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Ada,

First I modified the permissions of the SSP service account as you said. It
wasn't a member of:
Administrators
WSS_ADMIN_WPG
WSS_RESTRICTED_WPG

I then did a iisreset /noforce

And then I was able to access the search settings page from the WFE. While
I was very very happy that it was working again, I was concerned about the
all the extra access I just gave that account. Accroding to Plan for
administratie and service accounts (Office SharePoint Server):
http://technet2.microsoft.com/Office/en-us/library/f07768d4-ca37-447a-a056-1a67d93ef5401033.mspx?mfr=true
For a Server Farm, the SSP service account requirements are:

. Use a domain user account.

. No manual configuration is necessary. The same permissions as the
SSP application pool account are automatically granted.

. This account should not be a member of the Administrators group on
any computer in the server farm.



So I assumed that for some reason the SSP server account wasn't added to the
right local group or groups automtiacally. So through trial and error I
determined that the SSP service account only need to be added to:
WSS_ADMIN_WPG
To make things work.

Does this sound like the correct setup to you?

Again, thanks for your help,
Jason

"Ada Pan [MSFT]" <v-adapan@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:vN3utbTQIHA.360@xxxxxxxxxxxxxxxxxxxxxxxxx
Hello Jason,

Based on my research, I recommend you try the following methods to narrow
down the problem:

Method 1: Update the username and password
=============================
Before you perform the steps below, please ensure that domain account you
are using for SSP has the following permissions the local administrator
rights in the farm servers: Administrators, IIS_WPG, WSS_ADMIN_WPG,
WSS_RESTRICTED_WPG, WSS_WPG. Also, the account also needs to have DB
Creator and Security Admin rights on SQL Server.

#1. How to change the passwords for service accounts in SharePoint Server
2007 and in Windows SharePoint Services 3.0
http://support.microsoft.com/?id=934838

#2. Reset the Farm Search Service Account in the Configure Office
SharePoint Server Search Service Settings page:

1. Browse the Central Administration site.
2. Select the Operations tab.
3. Select the "Services on server" link in the Topology and Services
section of the Operations page.
4. On the Services on Server page, select the "Office SharePoint Server
Search" link.
5. On the Configure Office SharePoint Server Search Service Settings page,
scroll down to the Farm Search Service Account section and reset the
password for the Farm Search Service Account.
6. Click OK.

#3. Type passwords in WSS timer service in Services control panel.

Method 2: Install Office SharePoint Server 2007 SP1
=============================

Note: Windows SharePoint Services 3.0 Service Pack 1 must be installed
before the 2007 Microsoft Office Servers Service Pack 1 is installed.

Windows SharePoint Services 3.0 Service Pack 1 (SP1)
http://www.microsoft.com/downloads/details.aspx?FamilyId=4191A531-A2E9-45E4-
B71E-5B0B17108BD2&displaylang=en

The 2007 Microsoft Office Servers Service Pack 1 (SP1)
http://www.microsoft.com/downloads/details.aspx?FamilyId=AD59175C-AD6A-4027-
8C2F-DB25322F791B&displaylang=en

Method 3: Re-provision the Central admin site
=============================

1. Run the Post Setup Configuration Wizard and un-provision the Central
admin site.

2. Run the wizard again and provision the central admin site.

Here the detailed steps:
------------------------------------
1. Select SharePoint Products and Technologies Configuration Wizard.

2. Select Next. And yes to the IIS, SharePoint Admin Service, and the
SharePoint Timer Service popup.

3. Select Next leaving the default "Do not disconnect from this server
farm" selected

4. Select "Yes, I want to remove the web site from this machine" then
click
next.

5. Click next again to confirm.

6. There are a series of 8 steps that transpire, when they complete, your
Central Admin site will be removed. Click finish.

7. Go back to SharePoint Products and Technologies Configuration Wizard

8. Select Next. And yes to the IIS, SharePoint Admin Service, and the
SharePoint Timer Service popup.

9. Select the "Do not disconnect from this server farm" radio button, and
click next.

10. You can specify a port, or leave the default port selected and click
next.

11. Then Select Next on the Completing the SharePoint Products and
Technologies Configuration Wizard.

12. Click Finish. And your Central Admin Site will be launched.

If the problem still persists, please help us collect the following
information for further research:

1. Has the problem ever worked? If so, what has changed?
2. What is the authentication method used in your Office SharePoint Server
2007, NTLM or Kerberos?
3. Please take a screen shot of the error message and attach it your reply
or send it to v-adapan@xxxxxxxxxxxxxx

Please reproduce the problem, note down the exact time (hh:mm:ss), and let
us know the exact time in your reply.

#1. Collect Trace log
==========
a. Navigate to C:\Program Files\Common Files\Microsoft Shared\web server
extensions\12\LOGS folder.
b. Send me the last ULS logfile (<servername><date><time>.log)

#2. Collect Event Log
==============
a. Click Start, and then click Run.
b. In the Run dialog type "eventvwr.exe" (without the quotation marks),
and
then click OK.
c. In the opening Event Viewer windows, double click event viewer, click
Application, click the Action menu, and click save log file as.
d. In the File name box, enter the event name to be saved, and click ok.
e. Repeat step3 to step4 for "System".

Please attach the log files to your reply or send them as mail attachments
to me.

Please try the suggestion and update me with the result at your earliest
convenience. We look forward to your reply.

Regards,

Ada Pan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no
rights.




.

Relevant Pages

  • Indexes not Propagating to Other Servers in SPS2003
    ... One Web/Search server, ... I unfortunately cannot get a second Web/Search server into the mix due to ... Verified security rights for the Sharepoint service accounts on both SP ... spssql ­ Configuration Database service account, ...
    (microsoft.public.sharepoint.portalserver)
  • RE: SharePoint and Company Web not working
    ... How did you install the SharePoint 3.0, side by side install or In-place ... If you made in-place upgrade for companyweb, you must uninstall SharePoint ... Select Windows Small Business Server 2003, ...
    (microsoft.public.windows.server.sbs)
  • Available share point developer consultant for your clients. projects. In vargina,. are any other l
    ... Office SharePoint Server 2007 with Windows SharePoint ... SharePoint Developer ...
    (microsoft.public.sharepoint.windowsservices)
  • RE: Problems upgrading SQL MSDE for Sharepoint
    ... I am glad to know the upgrade Sharepoint ... Microsoft CSS Online Newsgroup Support ... With this working I was able to start upgrading SQL MSDE for SharePoint. ... >white paper to backup your SBS server first. ...
    (microsoft.public.windows.server.sbs)
  • Re: WSS FAQ additions and changes - 18th - 23rd December 2006
    ... The order of blog post objects changes during publication when you use ... Word 2007 to publish a blog post to a SharePoint blog site ... Services when you enable anonymous access to a SharePoint Server 2007 Web ... How to use SQL Server to take a snapshot of a Windows SharePoint Services ...
    (microsoft.public.sharepoint.windowsservices)