Users lost their permissions

[Ido Stein]

hello,
we are using MSP2007 sp1 (and few later hotfixes).
groups are synchronise to AD on a daily basis.
occasionally, several users are loosing their permissions - although marked
as "active" after synch complete.
the solution we found is to re-save rellevant user data from server settings

mange users page , without any other change.

any other idea? infrastructure upgrade?
thanks in advance.
Ido.

 

[Marc Soester [MVP]]

Hi Ido,

do you get any event log errors when this issue occurs?
I would think it is certainly woth installing the infrastructure upgrade.
first on test then on prod.
Hope this helps

 

[Dharmesh Patel]

Hi Guys,

The infrastructure update will help with this (by speeding up the sync), but
not resolve this issue.

The issue is still seen. You can see this job in the queue which is the
Synchronisation which once has finished, the issue will not been seen.

I would change the time that the syncronisation is ran or add the users to
the high level PWA site to by pass the syncronisation.

HTH,

Regards,

--
Dharmesh Patel
Project Server Consultant
Please rate this post

 

[AmWall]

I can say that our user base had a similar issue but we are not using SP1 as
of yet for Project Server 2007. I found that the same solution worked for us
I selected the entire grouip and did a bulk edit and just saved the user
profile one at a time, using save and continue button. The users names were
missing from the SharePoint site People and Groups. The only problem was that
the same issue repeated the next day. We have not placed any upgrades into
production since the upgrade to 2007 over a year ago. I did not see any
errors in the queue.

Are you suggesting that the users be added as readers to the SharePoint
site, I will have to say that I did add two of the users directly to the
SharePoint permissions through Site Settings and those two users also
reverted back to not seeing them in the permissions for SHarePoint. The only
thing I can think happened was that I had made changes to their Group
permissions by editing and or removing one group and replacing it with
another. I thought maybe due to this change it had to wait on the queue to
catch back up. When I came back an hour later the users were backin the
SharePoint list of People and Groups for the site. Hope this helps.

 

[Ido Stein]

Hi Dharmesh,
just to clarify the situation: synch process is complete. some users lost
their permissions althogh synch completes. the job is no longer exist on the
queue.
by-passing the syncronization is not an option, for us.
I will absolutely check the event viewer for errors and/or warnnings.

regards,
Ido.

 

[Dharmesh Patel]

In PWA, if you go to Site Actions – Site Settings – People and Groups –
Select ‘Groups’ – then Settings – Setup Groups - Set Up Group – Add NT
AUTHORITY\authenticated users to the visitors to this site.

This will allows NT authenticated users to access the site (if the have
permission) even during the sync job is running, this is not an issue with
security.

HTH,

Please do rate this posting.