The specified Windows account must be a valid user on the specified...

[Robert Roos]

Hello all,



I have installed a server with Windows 2003 R2 Enterprise edition.

On that server I've installed MS Project Server 2003 with it's database
situated on an other server that contains SQL Server 2005 Enterprise

On the same server as the MS Project Server I've activated SharePoint
Services.

When administring the Project server to create a connection to the
SharePoint Site I receive the next error:



"The specified Windows account must be a valid user on the specified
SharePoint server computer. Furthermore, the Windows account must be in
the SharePoint Central Administrators group."



Can somebody help me out with this one??? I've been looking for days to find
a proper solution....



Regards,



Robert Roos

 

[Gary L. Chefetz [MVP]]

Robert:

The account that you use for the "WSSAdmin" role, as it is commonly called,
should be in the local admin group on the PS/WSS box, and it needs access to
the PS database and it should be added to the SharePoint Central
Administrators group in SharePoint Central Administration.

 

[Robert Roos]

Hi Gary,

Thanks for you reply but it's still not working, probably I did something
wrong.
I took these steps to try to solve this problem:

I have created a domain account called SaWssAdmin and assigned this account
to a domain global group WssAdmins.
On the Project/WSS Server I placed this userobject (SaWssAdmin) in the local
Administrators group of that server.
I removed and reinstalled Sharepoint Services on the server by exactly
following the MS online manual:
http://office.microsoft.com/en-us/assistance/HA011653981033.aspx

After completing the setup and configuring the WSS I added the domain global
group WssAdmins to the SharePoint Administration group option:

Set SharePoint administration group

I created a login for the SaWssAdmin account on the SQL server and assigned
it to the Projectserver database and also assigned the next roles:

dbo_owner

MSProjectRole

MSProjectServerRole

From within the admin console of project server I can open all URLs:

https://shareprj.rocwb.local:4443

https://shareprj.rocwb.local:443/sites

Even the full path to the projects domain works fine:
https://shareprj.rocwb.local:443/sites/MS_ProjectServer_PublicDocuments

Everything seems to be working, but when I hit Save I get the same error
message:

"The specified Windows account must be a valid user on the specified
SharePoint server computer. Furthermore, the Windows account must be in
the SharePoint Central Administrators group."


Best regards,

Robert

 

[Gary L. Chefetz [MVP]]

Robert:

You did a whole bunch of stuff that wasn't necessary. In so doing, you've
made troubleshooting much more difficult. Did you go to SharePoint Central
Administration and assign the account to the SharePoint Central
Administration group? This is the crux of the error you're receiving.

I suggest that you refer back to the installation guide.

 

[Robert Roos]

Gary,

This is what I don't understand, I can't manage users on the SharePoint
Central Administration site only groups.
There is only an option to configure a group that has the right for managing
WSS, in my case I created a domain group named WssAdmins and added the
SaWssAdmin user account to that group. I can only manage users for this
group from within Active Directory Users and Computers.
This is the procedure that I followed:

Note To manage the SharePoint administration group, you must be a member of
the Administrators group of the local server computer.

Specify the SharePoint administration group

1.
Click Start, point to All Programs, point to Administrative Tools, and
then click SharePoint Central Administration.

2.
Under Security Configuration, click Set SharePoint administration
group.

3.
In the Group account name box, type the domain group you want to allow
to administer Windows SharePoint Services.

4.
Click OK.


Changing the Group or Changing Group Membership
You can only register one domain group as the SharePoint administration
group, so if you want to include other members, you must add them to the
group using the user and group management tools for your domain. If you want
to change which group is registered, you can follow the steps to specify a
group and specify a different domain group. When you specify a new group,
the old group's rights are removed, and the members of that group can no
longer manage the servers running Windows SharePoint Services.

Is this wrong???

Robert

 

[Gary L. Chefetz [MVP]]

Robert:

It sounds like you followed the correct procedure for the SharePoint
administration group.

 

[Robert Roos]

Gary,

Thanks for your comment, I will post an incident at microsoft about this
issue.

Best regards,

Robert Roos

 

[rrao1072]

Hi Robert:

Did you get this issue fixed. I had the same problem, and it turns out
the IIS permissions are what's causing this error message. The message
is very misleading.

If you followed the installation instructions exactly as listed, then
just check your Default Website Permissions. Anonymous and Integrated
Windows Authentication should be enabled. And both, the ProjectServer
and Sharepoint Central virtual servers should have their Integrated
Windows Authentication enabled.

Let me know if this works for you.

Best,
Rahul.

 

[Rusty]

Rahul, you rock. Thank you very much as this ended three days of very
frustrating dead ends.