bandgeekmafia78 Posted October 29, 2010 Posted October 29, 2010 Hi. We've just got a new system in place which allows automatic authentication to OWA and SharePoint from in the school. However, one bunch of users in Active Directory cannot authenticate. I get this: HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials. Internet Information Services (IIS) Strange, because every other user in the school is working fine. Its just my DiDA users. I've moved them to seperate OUs, changed their group policies etc. etc. but they just won't authenticate! They've always been able to in the past. Any ideas? I'm not sure what the 'invalid credentials' is all about. Can't see anything untoward in IIS either. Any help would be appreciated, I'm getting worried that it wont be ready by Monday! Alan.
GREED Posted October 29, 2010 Posted October 29, 2010 Try moving one back into a normal, working AD OU, if that works then your starting point for the fault will be to look at the AD structure, or more likely GPOs I know that sounds simple and obvious, but from the description it sounds like a good starting point!
bandgeekmafia78 Posted October 29, 2010 Author Posted October 29, 2010 I've tried that already but still having no joy.
bandgeekmafia78 Posted October 29, 2010 Author Posted October 29, 2010 Thats what I initially thought, but I've changed their group membership to EXACTLY the same as the other users that are working fine. Still no joy. I am completely baffled!
GREED Posted October 29, 2010 Posted October 29, 2010 Try creating a brand new user account from scratch, adding to the required user groups, and see how you get on. There may be some latency on the changes you are making. I had this before with SP and it took forever for the changes to cascade through sometimes...
arichards Posted November 1, 2010 Posted November 1, 2010 When making changes to group membership etc in AD this won't appear in SharePoint until the user profile service has run. This normally happens as a timer job, but you can run it manually from central admin to force the change to replicate from AD to SharePoint. So you may need to make your changes again and then run the user profile service manually.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now