Tell me more ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.
up vote 0 down vote favorite

A user has two AD accounts, a 'user' account and a 'domain admin' account. He is in a SharePoint group that has contribute access to the sub-site. There's a document library in the sub-site which inherits permissions. When the user tries to access with his domain admin account, he gets an access denied error, the domain user can edit documents. Any pointers appreciated!

share|improve this question
Can you define what you mean by 'access with his domain account?' - is he getting the error viewing the list? Viewing the document properties or opening the document itself in the native application? Does he get an access denied error if he merely tries to save the document rather than open it? – Dave Wise Jul 18 '12 at 16:26
What content/area is the domain admin account trying to access? Is it the document library? Is your domain user a site collection admin/farm admin? What role does domain admin has in SharePoint site? Pls elaborate to make things clear. Thanks. – Zakir HC Jul 18 '12 at 16:41
What do you mean by "He is in a SharePoint group" is both accounts in there? What does "Check Effective Permissions" report on the two accounts? – Per Jakobsen Jul 18 '12 at 17:04
Thanks to all for asking the correct questions, some which I asked myself. Let me clarify this was nothing specific with doc library, it was just the access to the site was being denied. This user (who was added by the admin) had accounts in multiple domains, and the account from the correct domain was not added. From the UI, just by looking at the login name it was not apparent that the nameswer from diff domains, until I executed a script to get the "GetUserEffectivePermissions". Thanks again! – SharePoint Warrior Jul 19 '12 at 20:16

1 Answer

up vote 0 down vote

Double the way you give permission in your site collection. When you say he is in a SharePoint Group , how you grant the permission? Do you add the domain user directly to the SharePoint Member Group or do you add a AD group to the SharePoint Member Group. If his domain admin account does not have access , can you add his domain admin account to the SharePoint Member Group?

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.