SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Configured search on SharePoint Foundation 2010, but only some user can get the search results, the others not! Users have different privileges, so it's not the case when search works only with farm admins.

share|improve this question
up vote 0 down vote accepted

Inspecting SharePoint log, I found this

AuthzInitializeContextFromSid failed with ERROR_ACCESS_DENIED. This error indicates that the account under which this process is executing may not have read access to the tokenGroupsGlobalAndUniversal attribute on the querying user's Active Directory object. Query results which require non-Claims Windows authorization will not be returned to this querying user.

After googled about the problem, I found this post

There is a group in AD called Pre-Windows 2000 Compatibility Access, I added search service account to this group and search started working properly

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.