I followed this


Everything is fine (not error during upgrade either). However, user's in the permission groups still shows domain\username instead of claim based. If i add a new user then it shows i:0#.w|domain\davidhassel01

Since it's a 2013 site so the web app is already claimed based. I can't read the SP groups using powershell script.

The SP 2010 is classic and i can't just change it to claims because it's production site.

Any idea on how to fix this issue?

2 Answers 2


After working on this for past 3 days finally following steps helped

  1. I deleted all the users from _layouts/15/people.aspx?MembershipGroupId=0
  2. I then copied all the SharePoint groups from the source site to target site

Now all the users have proper permissions and they appear with the claim token.

Thanks Trevor for looking into this.


Re-run Convert-SPWebApplication. It is safe to re-run this.

  • I ran that so many times and still no good. Dec 7, 2018 at 19:07
  • Sorry, so you have Active Directory security groups nested in SharePoint Groups and for the users in the security groups who have not accessed the site (in other words, have no entry in the UIL) show up as 'domain\userName' when you perform a Check Permissions. Is that correct?
    – user6024
    Dec 7, 2018 at 20:01
  • All the users in various list show up with domain\username Dec 7, 2018 at 20:39

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.