Repair user access to SharePoint Foundation 2010

  • Article

Published: March 10, 2011

Applies To: Windows Small Business Server 2011 Standard

Problem   A user cannot log on to SharePoint Foundation 2010 because of a permission issue with the security groups.

Solution   Verify that the security groups exist. If any of them are missing, recreate them. If the user does not belong to one of the security groups, add the user to the group. If the user belongs to all of the groups and none of them are missing, check whether the groups are correctly associated with SharePoint Foundation 2010.

To verify that the security groups exist

  1. Open the Windows SBS Console.

  2. On the navigation bar, click Users and Groups, and then click Groups.

  3. In Security Groups, verify that the following groups are listed:

    • Windows SBS SharePoint_VisitorsGroup

    • Windows SBS SharePoint_MembersGroup

    • Windows SBS SharePoint_OwnersGroup

    If any group is missing, recreate it by using the following procedure.

To recreate a security group

  1. In the Users and Groups tab, in Group Tasks, click Add a new group.

    The Add a New Group Wizard appears.

  2. Click Next.

  3. In Group name and Description, type the following information, depending on the group you are recreating:

Group name Description

Windows SBS SharePoint_VisitorsGroup

Members have read-only access to the internal Web site

Windows SBS SharePoint_MembersGroup

Members can view, add, delete, approve, and customize the content on the internal Web site

Windows SBS SharePoint_OwnersGroup

Members have administrative access to the internal Web site

  1. In Group type, click Security group: Control access to files, folders, and applications data for user accounts that belong to this security group, and then click Next.

  2. Click the users or groups that you want to add to the security group that you are recreating, and then click Add group.

  3. Click Finish, and then repeat this procedure for each security group that you want to recreate.

To add a user to a security group

  1. Open the Windows SBS Console.

  2. On the navigation bar, click the Users and Groups tab, and then click Users.

  3. Click the user who you want to add to a security group, and then, in the tasks pane, click Edit user account properties.

  4. In the Properties dialog, click Groups, and then click Add.

  5. In the Group Membership dialog box, click the group that you want to add the user to, and then click Add.

  6. Click OK twice.

To check whether the groups are correctly associated with SharePoint Foundation 2010

  1. Log on as an administrator on the server that is running Windows SBS 2011 Standard.

  2. Open Microsoft Internet Explorer, and then browse to https://companyweb.

  3. Click Site Actions, and then click Site Settings.

  4. In Users and Permissions, click Advanced permissions.

  5. Click New, and then click Add Users.

  6. In Users/Groups, type Windows SBS SharePoint_MembersGroup, and then click the Check Names icon to verify that the group exists.

  7. In Give Permission, click Design – Can view, add, update, delete, approve, and customize.

  8. Click OK.

  9. In Users/Groups, type Windows SBS SharePoint_OwnersGroup, and then click the Check Names icon to verify that the group exists.

  10. In Give Permission, click Full Control – Has full control.

  11. Click OK.

  12. In Users/Groups, type Windows SBS SharePoint_VisitorsGroup, and then click the Check Names icon to verify that the group exists.

  13. In Give Permission, click Read – Can view only.

  14. Click OK.