locked
Policy for web application does not work? RRS feed

  • Question

  • While i have a MOSS 2007 farm in my production environment, and i get a domain account named 'mossmgmt' which is neither OS administrator nor farm administrator.

    The problem is when i added this account 'mossmgmt' to the 'Policy for Web application' with all zones and full controls in my central administration, the account still don't have permission to do what a site collection administrators can do. It even can not see the 'site actions' menu.

    Anyone can tell me the possible problem? Where do i need to make any configuration?

    Thanks!

     

    Friday, April 2, 2010 9:57 AM

Answers

  • This problem occurred cause there was a 'Error during encryption or decryption. System error code 997 or 0 ' in my farm. Fix it.
    • Marked as answer by Wangxiaolei Monday, May 10, 2010 4:20 AM
    Wednesday, May 5, 2010 9:08 AM

All replies

  • Hi there,

    You could define custom permissions for that account and assign it Site Administrator rights at Web App level?

    And here's one that works you through the steps:

    http://glorix.blogspot.com/2007/10/policy-for-web-application.html

    Hope this helps

    Geoff

    Friday, April 2, 2010 10:32 AM
  • Web application policy does work.  Are you sure that you've selected the correct web application?  There's a sort of non-intuitive UI for selecting the web application and there are typically multiple web apps in a farm.
    --Paul Galvin, Computer Generated Solutions (CGS)
      Microsoft MVP - SharePoint
      Blogging @ http://feeds.feedburner.com/PaulGalvinsSharePointSpace
      Twitter @ http://www.twitter.com/pagalvin
    Friday, April 2, 2010 12:19 PM
  • I am not sure and never heard of Policies not working. Please check as Paul suggested above to make sure that your account and web application are correct.

    Also, please check if there is any Policy above that is not denying you access explicitly. anyways, that would not let you acess the site even.

    Incase issue persists, you will have to rerun sharepoint technologies wizard on the servers.


    I LOVE MS..... Thanks and Regards, Kshitiz (Posting is provided "AS IS" with no warranties, and confers no rights.)
    Friday, April 2, 2010 12:40 PM
  • I have checked my policy settings for many times and i am sure i have selected the right web application and grant the right account.

    Is that possible that when i add a policy for web application, there is a job automatically created by MOSS?

    And if this job failed, then the web application policy dose not work.

    I installed my central administration in my AP server(for index and crawl), and another web server for users to visit.

    Friday, April 2, 2010 1:55 PM
  • Did you Rerun Sharepoint technology wizard on your servers?

     


    I LOVE MS..... Thanks and Regards, Kshitiz (Posting is provided "AS IS" with no warranties, and confers no rights.)
    Tuesday, April 6, 2010 11:23 AM
  • Cause this is our product environment, i did not rerun the wizard.

    I have opened a case to microsoft to find the reason, will update here if i resolve it.

    Thursday, April 8, 2010 11:28 AM
  • This problem occurred cause there was a 'Error during encryption or decryption. System error code 997 or 0 ' in my farm. Fix it.
    • Marked as answer by Wangxiaolei Monday, May 10, 2010 4:20 AM
    Wednesday, May 5, 2010 9:08 AM