Right now, I cannot access my Central Admin. (Access Denied) When I run the configuration wizard to rebuild Central Administration, it errors out on Step 5 "Registering SharePoint Services" with an "Access Denied" message. The log file generates the following error:
DATE TIME 12 ERR Task services has failed with an unknown exception DATE TIME 12 ERR
Exception: System.UnauthorizedAccessException: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) at Microsoft.SharePoint.SPGlobal.HandleUnauthorizedAccessException(Unauthorized AccessException ex) at Microsoft.SharePoint.Library.SPRequest.GetListsWithCallback(String bstrUrl, Guid foreignWebId, String bstrListInternalName, Int32 dwBaseType, Int32 dwBaseTypeAlt, Int32 dwServerTemplate, UInt32 dwGetListFlags, UInt32 dwListFilterFlags, Boolean bPrefetchMetaData, Boolean bSecurityTrimmed, Boolean bGetSecurityData, Boolean bPrefetchRelatedFields, ISP2DSafeArrayWriter p2DWriter, Int32& plRecycleBinCount) at Microsoft.SharePoint.SPListCollection.EnsureListsData(Guid webId, String strListName) at Microsoft.SharePoint.SPListCollection.get_Count() at Microsoft.SharePoint.Administration.SPAdministrationWebApplication.get_Healt hRules() at Microsoft.SharePoint.Administration.Health.SPHealthAnalyzer.RegisterRules(As sembly assembly) at Microsoft.Office.InfoPath.Server.Util.HealthAnalyzerRegistration.RegisterHea lthRules() at Microsoft.Office.InfoPath.Server.Administration.FormsService.Update() at Microsoft.SharePoint.PostSetupConfiguration.ServicesTask.InstallServiceInCon figDB(Boolean provisionTheServiceToo, String serviceRegistryKeyName)
at Microsoft.SharePoint.PostSetupConfiguration.ServicesTask.InstallServices(Boo lean provisionTheServicesToo) at Microsoft.SharePoint.PostSetupConfiguration.ServicesTask.Run() at Microsoft.SharePoint.PostSetupConfiguration.TaskThread.ExecuteTask()
So, let me start by saying that this is NOT a fresh install. This farm has been up for 3+ months.
So, what's recently changed? I was troubleshooting a PowerPivot issue in Central Admin in regards to Claims and Permissions. The last change I remember doing right before I lost my Central Admin was I ran the following command:
$wa = Get-SPWebApplication https://centraladminurl $wa.MigrateUsers($true)
It was referenced in an article for fixing Claims issues on Normal Web Apps, but for whatever reason I thought it'd be okay to run on my Central Admin, which I'm almost certain last time I checked, was using Windows Authentication Provider.
I don't know where to start on troubleshooting this issue. There's not a lot of info that I could find on the above command, but as I understand it, it changes the user values in permission policy from domain/user to claims prefix:domain/user. But, how would this affect my ability to use the Config Wizard?
I don't want to make so many changes to fix one thing just to be fighting all the changes I made later on.