Thursday, April 12, 2007

User access to MOSS blocked

This is so far unresolved

A user is unable to access the portal.

They changed their password 3 weeks ago. The error msg they get is as follows:

The local security authority cannot be contacted.

They can access the portal when logging in as themselves through someone elses PC, but not their own.

Their profile has been reset and we can access using a runas cmd.

Google suggested this...

See link for full details: http://www.sharepointu.com/forums/Dodgy_logins_and_deleted_files/m_39098/tm.htm

When a student changes his/her Windows password after being prompted, they are unable to access their Sharepoint sites (ERROR: "The local security authority cannot be contacted") although they can still log in to Windows. Our workaround to this at the moment is to temporarily make the student an administrator (the command prompt is blocked for students), log them in to Windows and use the command prompt to run "control keymgr.dll" and delete any stored usernames and passwords for Sharepoint. Once that is done we can remove the admin privileges and they can log in OK. The only time this is not a problem is when the user changes their password at the end of the day because some sort of synching is set to run overnight that resolves the issue.

Wednesday, April 04, 2007

Site Security

Site security proved to be a bit of a nightmare - needless to say once we figured it out it turned out to be really straight forward.

Each site collection in the farm has been secured using new & existing Active Directory (AD) groups in the domain.

The Intranet portal site collection has one SharePoint security group called Viewers which contains the AD group: DOMAIN\adm dl u portal domain users and which is set to Read, Restricted Read & View Only. This enables all domain users to access and view unsecured content across the site collection.

Each site within the portal site collection either inherits the top level or is set up with individual permissions. In most cases the permissions are individual with AD groups specified as required to grant access & visibility to specific user groups.

Monday, April 02, 2007

How to set a custom default master page for all site definitions in WSS 3.0

http://blogs.tamtam.nl/mart/HowToSetACustomDefaultMasterpageForAllSiteDefinitionsInWSS3.aspx

In WSS3 you can set the masterpage of a site using SharePoint designer, just rightclick the new masterpage and set it to default.

This method however, does not set all the new created sites with the new masterpage. So, how can we deploy the new masterpage?

  • Put the new masterpage in the following directory: C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\TEMPLATE\GLOBAL
  • Go to C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\TEMPLATE\GLOBAL\XML and open de ONET.XML.
  • At the bottom of the page add a new masterpage entry so it will look something like this:

<Modules>

<Module Name="DefaultMasterPage" List="116" Url="_catalogs/masterpage" RootWebOnly="FALSE">

<File Url="[any name].master" Type="GhostableInLibrary" IgnoreIfAlreadyExists="TRUE" />

<File Url="default.master" Type="GhostableInLibrary" IgnoreIfAlreadyExists="TRUE" />

</Module>

</Modules>

This code will automatically put your custom masterpage into the masterpage gallery when a new site is created.

  • Change the default masterpage to the new one. Look for the following line: <Configuration ID="0" Name="Default" MasterUrl="_catalogs/masterpage/default.master"> and change it to your new masterpage.
  • Hit save, and do an IISRESET.

Now create a new site and the new master page is set automatically.

Beware that when you create a master page with SharePoint designer you cannot just export the master page to the filesystem, because it will mess up your master page code. You can better copy the master page code to notepad, and save it as your master page on the filesystem.

Daylight Saving Delay

Since the clocks went back timer jobs are delayed by 1 hour

So far there is no MS hotfix for this.

http://support.microsoft.com/kb/932563

Error when trying to delete a page layout in MOSS: This item cannot be deleted because it is still referenced by other pages

This info comes from: http://www.katriendg.com/aboutdotnet/Default.aspx?m=1&y=2007

After deactivating & uninstalling a feature (CustomMasterPages) and reinstalling it again the original page layouts & masterpages still remain in the "Master Page and Page Layout Gallery".

Trying to manually delete the files from the gallery gives the following error:

"This item cannot be deleted because it is still referenced by other pages"

The problem is mentioned in the following KB article:

http://support.microsoft.com/?kbid=926812

The KB proposes changing the master page properties to Hidden.

Alternative workaround:

  • Create a new sub-folder in the master page gallery
  • Move the page layout to the new folder using SharePoint Designer
  • Delete the complete folder