SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a sharepoint environment with multiple domains, access to the site is given on each domain by an AD security group on the remote domain.

The newest domain has a security group that has been allowed access the same way, however when the users in that group login to the site they get the 'access denied' error.

Sharepoint can query the domain to get the credentials of the accounts, and if an account from that domain is given permissions directly (as opposed to the entire group) it will login successfully.

Does anyone know what can cause this?

share|improve this question

I'm not an AD expert, but we experienced something similar recently. We solved it by making the group a universal security group. Possibly also Global scope would work.

share|improve this answer
yes, this appears to be the case. The security group was created as a 'domain local' group. thank you very much! – Mr. pointshares Jul 27 '11 at 2:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.