Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

Configured search on SharePoint Foundation 2010, but only some user can get the search results, the others not! Users have different privileges, so it's not the case when search works only with farm admins.

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

Inspecting SharePoint log, I found this

AuthzInitializeContextFromSid failed with ERROR_ACCESS_DENIED. This error indicates that the account under which this process is executing may not have read access to the tokenGroupsGlobalAndUniversal attribute on the querying user's Active Directory object. Query results which require non-Claims Windows authorization will not be returned to this querying user.

After googled about the problem, I found this post http://blogs.msdn.com/b/russmax/archive/2010/01/20/why-the-tokengroupsglobalanduniversal-tggau-attribute-matters-in-sharepoint-2010.aspx

There is a group in AD called Pre-Windows 2000 Compatibility Access, I added search service account to this group and search started working properly

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.