1

I have a sharepoint environment with multiple domains, access to the site is given on each domain by an AD security group on the remote domain.

The newest domain has a security group that has been allowed access the same way, however when the users in that group login to the site they get the 'access denied' error.

Sharepoint can query the domain to get the credentials of the accounts, and if an account from that domain is given permissions directly (as opposed to the entire group) it will login successfully.

Does anyone know what can cause this?

Improve this question

1 Answer 1

Reset to default
2

I'm not an AD expert, but we experienced something similar recently. We solved it by making the group a universal security group. Possibly also Global scope would work.

Improve this answer
1
  • yes, this appears to be the case. The security group was created as a 'domain local' group. thank you very much!
    – Mr. pointshares
    Commented Jul 27, 2011 at 2:04

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.