We attempted to convert a web app that was set up in claims back to NTLM/Windows auth.
First we unchecked the claims provider in the web app properties in CA. We realized we were still getting claims accounts registered in the user list with the claims account prefix "i:O#.w".
We then ran the following script on the web app:
$webApp = Get-SPWebApplication "http://mywebapp" $webApp.UseClaimsAuthentication = 0; $webApp.Update()
This did change the web app setting to Classic. We then found we no longer had access to the site with any account.
We tried manually changing SC admins in CA to the Windows accounts. The changes were accepted, however access was still denied.
We also manually converted some accounts with the following script. Access was still denied after this.
stsadm -o migrateuser -oldlogin "i:0#.w|domain\userid" -newlogin domain\userid -ignoresidhistory
What did we miss?