Note: The steps listed below should resolve this issue in most cases. My situation involved my browser cache...
Whenever I access my SharePoint 2010 foundation page I am automatically logged in as "System Account". Attempting to sign in as a different user fails and attempting to use the farm account also fails. No authentication is required either from the browser on the server or from another computer on the same network.
I recently split out my service accounts in the following fashion:
- SP_Admin: Local admin, farm administrator, timer service, app pool identity for central admin.
- SP_WebAPPS: runs all web app pools
- SP_ServiceAPPS: runs all service app pools
- SQL_User: SQL Server Admin & SQL Services account
I am continuing to create users for my services.
Here are the steps I have tried so far to rectify this problem: (I've perfomed an IISRESET after each)
Check the IIS Application Pool Authentication method:
- Start> Internet Information Services > Expand "Sites" > click on problem site > Right click on Authentication > choose "Basic Settings" > Find "Connect As" and see if an account is specified. Change to "Pass Through Authentication" if an account is specified.
Check the IIS Application Pool Identity:
- Start> Internet Information Services > click "Application Pools"> Right click on target application pool> choose "Advanced Settings" > Find the "Process Model" grouping > Find "Identity" > Check that this is not a system account.
- This setting should be changed via Central Administration>Security>Configure Service Accounts and not directly in IIS.
- Choose the target web application from Central Admin and change the service account within "Configure Service Accounts". SharePoint will make all the appropriate permission changes etc.
Check the farm account:
- Start>Central Administration>Security>Configure Service Accounts>Farm Account Check to see that the Farm Account is actually the account you intend to use for the farm and not a system account.
- Be sure that the Farm Account has the appropriate level of access to your SQL Database before making a change to this setting. You will be locked out of Central Admin if the farm account does not have appropriate access and you will need to change the web application identity in IIS to regain access.
Check the user policy in the site:
- Start>Central Administration>Web Applications>Manage Web Applications Click on target web application > click on "user policy" in the ribbon. Check a box next to a user account - click on "Edit Permissions of Selected Users"
- Look to see if "Account operates as system" is checked.
Update farm admin using stsadm:
- stsadm -o updatefarmcredentials -userlogin domain\sharepointAdminUser -password myPassword
- Default location of stsadm for SharePoint 2010 Foundation: c:\Program Files\common files\microsoft shared\web server extensions\14\bin
Change the Web Application Service Account back to "Network Service"
- This should prompt for credentials from the user...
No avail! What is left to do?