I have users in domain groups, which we set permission on. Some users get access denied to certain content some of the time, but not all of the time. It's very hard to search for errors in this case. So I'm thinking of adding SharePoint groups, set permissions on these groups and add domain groups in these Sharepoint groups and hope that this will solve the problem.

But I'm not sure if this is the way to go. Am I on the right or wrong track here?

1 Answer 1


I'd suggest looking at permissions on all the resource files that your page uses. Master page catalog, style permissions, images, and stuff like that.

I think I saw this exact behavior when someone deleted Style Resource Readers group from a site collection. Users would get access denied until a site owner logged in. When the owner logged in, the CSS would get cached somehow, and then member access worked fine until the process reset in the middle of the night. Solution was to repair member access to the style library. Longer term solution was to not delete the Style Resource Readers group.

  • +1 Thanks for the tip! I'll give it a try later today. Any idea on domain groups in sharepoint groups?
    – Benny Skogberg
    Mar 4, 2013 at 7:46
  • 1
    Bob is right, often it's resources. You can also use Fiddler to track down which resource is causing the 401. Changing the groups from AD to SharePoint should not make a difference. Mar 4, 2013 at 11:53

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.