Repair user access to Windows SharePoint Services

Updated: March 3, 2009

Applies To: Windows SBS 2008

Problem   A user cannot log on to Windows SharePoint Services because of a permission problem with the security groups.

Solution   Verify that the security groups exist. If any of them are missing, recreate them. If the user does not belong to one of the security groups, add the user to the group. If the user belongs to all of the groups and none of them are missing, check whether the groups are correctly associated with Windows SharePoint Services.

To verify that the security groups exist

1. Open the Windows SBS Console.

2. On the navigation bar, click Users and Groups, and then click Groups.

3. In Security Groups, verify that the following groups are listed:

   • Windows SBS SharePoint_VisitorsGroup

   • Windows SBS SharePoint_MembersGroup

   • Windows SBS SharePoint_OwnersGroup

   If any group is missing, recreate it by using the following procedure.

To recreate a security group

1. In the Users and Groups tab, in Group Tasks, click Add a new group.

   The Add a New Group Wizard starts.

2. Click Next.

3. In Group name and Description, type the following information, depending on the group you are recreating:

Group name	Description
Windows SBS SharePoint_VisitorsGroup	Have read-only access to the internal Web site
Windows SBS SharePoint_MembersGroup	Can view, add, delete, approve, and customize the content on the internal Web site
Windows SBS SharePoint_OwnersGroup	Have administrative access to the internal Web site

4. In Group type, click Security group: Control access to files, folders, and applications data for user accounts that belong to this security group, and then click Next.

5. Click the users or groups that you want to add to the security group that you are recreating, and then click Add group.

6. Click Finish, and then repeat this procedure for each security group that you want to recreate.

To add a user to a security group

1. Open the Windows SBS Console.

2. On the navigation bar, click the Users and Groups tab, and then click Users.

3. Click the user who you want to add to a security group, and then, in the tasks pane, click Edit user account properties.

4. In the Properties dialog, click Groups, and then click Add.

5. In the Group Membership dialog, click the group that you want to add the user to, and then click Add.

6. Click OK twice.

To check whether the groups are correctly associated with Windows SharePoint Services

1. Log on as an administrator to the server that is running Windows SBS 2008.

2. Open Microsoft Internet Explorer, and then browse to https://companyweb.

3. Click Site Actions, and then click Site Settings.

4. In Users and Permissions, click Advanced permissions.

5. Click New, and then click Add Users.

6. In Users/Groups, type Windows SBS SharePoint_MembersGroup, and then click the Check Names icon to verify that the group exists.

7. In Give Permission, click Design – Can view, add, update, delete, approve, and customize.

8. Click OK.

9. In Users/Groups, type Windows SBS SharePoint_OwnersGroup, and then click the Check Names icon to verify that the group exists.

10. In Give Permission, click Full Control – Has full control.

11. Click OK.

12. In Users/Groups, type Windows SBS SharePoint_VisitorsGroup, and then click the Check Names icon to verify that the group exists.

13. In Give Permission, click Read – Can view only.

14. Click OK.

To read the most recent version of this topic, see the Microsoft Web site (https://go.microsoft.com/FWLink/?LinkID=147045). The most recent version might contain additional information that was not available when Windows SBS 2008 was released.