We're having a weird problem with Central Administration. The farm consists of several servers, of which 2 are running central administration, loadbalanced.

Now some times, when logging in to CA I'm getting an access denied on my account (and other accounts which should have access). The weird thing is that only one of the servers is returning access denied. When I alter my hosts file to point the DNS name to the second server manually, I can log in and use CA without any problem.

When we reset the application pool for CA, the problem is resolved for a while. But after some time it returns again, I have no idea why.

We have several web applications running loadbalanced on the front-ends, which are having no problems at all. Anyone any ideas what might be causing this?

  • Are you using named host header for your CA web application? – AhmedMoussa Feb 17 '14 at 12:33
  • couple of things to check...Web.config should be same on both server...AppPool account is correct and having the correct credential...also try to disable the loopback check....check the uls logs when its get the access denied for more clue. – Waqas Sarwar MVP Feb 17 '14 at 21:05
  • Yes, we're using host header CA. Web.configs are equal (untouched), apppool account is OK. Loopbackcheck is disabled by default on all machines. ULS isn't giving us valid clues. – Jasper Feb 19 '14 at 12:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.