When trying to complete the initial setup of the SharePoint site by completing the 'People and Groups' step and clicking 'OK' we receive the error 'Sorry, something went wrong, Access denied'. It should be noted we just upgraded to from WebsitePanel 2.1 to SolidCP 1.4.
It appears the problem is the client OU is created in Active Directory without the 'Read' allow permission for the 'Authenticated Users' security group. If I set this manually then I'm able to complete the setup of the SharePoint site.
Why is this permission not being set?
Hello,
As part of the dSHeuristics changes to make AD more secure we did make adjustments to Authenticated Users group and the ListObject & ListChildren permission for each OU as it is created.
Can you check advanced permissions for the group and see if disabling these 2 options cause you an issue again?
Thanks,
Trevor
I created a new Account and OU and then looked at the advanced permissions for the 'Authenticated Users' security group and see the 'List Object' is not selected and the 'List Children' does not exist. We are using Windows 2008 R2 for Active Directory.
When I look at an OU for a client that works it has 'List Contents', 'List Object', 'Read all properties' and 'Read permissions' set as allow.
I see there is a script to run on existing environments but I was hesitant to do this as I don't want to break anything. http://installer.solidcp.com/Files/Stable/Tools/SolidCP-dSHeuristics.zip
