Grant access for users on a separate domain to SharePoint
Posted
by Geo Ego
on Server Fault
See other posts from Server Fault
or by Geo Ego
Published on 2010-03-18T18:55:19Z
Indexed on
2010/03/18
19:01 UTC
Read the original article
Hit count: 623
Hello. I just completed development of a SharePoint site on a virtual server and am currently in the process of granting users from a different domain to the site. The SharePoint domain is SHAREPOINT, and the domain with the users I want to give access to is COMPANY. I have provided them with a link to the site and added them as users via SharePoint, which is all I thought I would need to do. However, when they go to the link, the site shows them a SharePoint error page.
In the security event log, I am showing the following:
Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 3/18/2010
Time: 11:11:49 AM
User: COMPANY\ThisUser
Computer: SHAREPOINT
Description:
Object Open:
Object Server: Security Account Manager
Object Type: SAM_ALIAS
Object Name: DOMAINS\Account\Aliases\00000404
Handle ID: -
Operation ID: {0,1719489}
Process ID: 416
Image File Name: C:\WINDOWS\system32\lsass.exe
Primary User Name: SHAREPOINT$
Primary Domain: COMPANY
Primary Logon ID: (0x0,0x3E7)
Client User Name: ThisUser
Client Domain: PRINTRON
Client Logon ID: (0x0,0x1A3BC2)
Accesses: AddMember
RemoveMember
ListMembers
ReadInformation
Privileges: -
Restricted Sid Count: 0
Access Mask: 0xF
Then, four of these in a row:
Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 3/18/2010
Time: 11:12:08 AM
User: NT AUTHORITY\NETWORK SERVICE
Computer: SHAREPOINT
Description:
Object Open:
Object Server: SC Manager
Object Type: SERVICE OBJECT
Object Name: WinHttpAutoProxySvc
Handle ID: -
Operation ID: {0,1727132}
Process ID: 404
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: SHAREPOINT$
Primary Domain: COMPANY
Primary Logon ID: (0x0,0x3E7)
Client User Name: NETWORK SERVICE
Client Domain: NT AUTHORITY
Client Logon ID: (0x0,0x3E4)
Accesses: Query status of service
Start the service
Query information from service
Privileges: -
Restricted Sid Count: 0
Access Mask: 0x94
Any ideas what permissions I need to grant to the user to get them access to SharePoint?
© Server Fault or respective owner