0

I have changed my web application from legacy to Claims based authentication. Now when I access the site I get:

You are not authorized to view this site.....send a message to administrator to get access to the site...

I have tried to find an error in the logfiles, but finds nothing. The user that I log in with has full access rights on the web application.

In the IIS logs i find AccesDenied for my account..

Does anyone have a suggestion for me where to look for a solution?

I have added the superuseraccount and superreaderaccount and the account has got full acces to the database, so it has to be another problem...

3
  • I have added the superuseraccount and the account has got full acces to the database, so it has to be another problem... Commented Oct 20, 2016 at 6:31
  • Did you do MigrateUsers? Legacy user permissions no longer apply after conversion unless you migrate permissions to claims accounts or explicitly grant permission to claims accounts.
    – Jussi Palo
    Commented Oct 20, 2016 at 7:19
  • Have you completed all of the steps mentioned in technet.microsoft.com/en-us/library/gg251985.aspx to complete the conversion? Commented Oct 20, 2016 at 8:59

1 Answer 1

0

Most times this problem is caused by wrong formatted object-cache-accounts.

  • Classic-Format: domain\username
  • Claims-Format: i:0#.w|domain\username

Please make sure your cache-accounts are set to claims-format in:

  • WebApplication User Policy
  • $wa.Properties["portalsuperuseraccount"] and $wa.Properties["portalsuperreaderaccount"]

Reference: Configure object cache user accounts in SharePoint Server 2013

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.