SharePoint By Yagya Shree

SharePoint 2013: Publishing Feature Activation Issue

leave a comment »

Symptom:
Unable to activate the Publishing feature on the site http://(SiteCollection Url)/ . While enabling the feature, it fails with “Access denied” error and then the users (including the site collection administrator) are unable to login to the site , fails with same error as access denied.

Environment:
SharePoint server 2013 with product version : 15.0.4649.1000

Error Messages Seen:
“Access denied”

Cause:
It looks like the Super user account and Super reader account was NOT set properly.

Currently the displayed strings are as like below:

DomainName\ superuser
DomainName\ superread

But the displayed strings should be as like below if you are using claims authentication for the web application
Claims format :
i:0#.w| DomainName\ superuser
i:0#.w| DomainName\ superread

Resolution:
The following command was executed and found that the web applications are configured with portal super user account and portal super reader account, however the format was domain\username instead of Claims format.

Get-SPWebApplication | %{Write-Host “Web Application: ” $_.url “`nSuper user: ” $_.properties[“portalsuperuseraccount”] “`nSuper reader: ” $_.properties[“portalsuperreaderaccount”] “`n”}

We nullified the property values of portalsuperuseraccount and portalsuperreaderaccount using the below command

$wa = Get-SPWebApplication “http://(SiteCollection Url)/”
$wa.Properties.Remove(“portalsuperuseraccount”)
$wa.Properties.Remove(“portalsuperreaderaccount”)
$wa.Update()

Followed the article https://technet.microsoft.com/en-us/library/ff758656.aspx and set the accounts using CA and PowerShell with right Claims format

$wa = Get-SPWebApplication -Identity “http://(SiteCollection Url)/”
$wa.Properties[“portalsuperuseraccount”] = “i:0#.w| DomainName\ superuser ”
$wa.Properties[“portalsuperreaderaccount”] = “i:0#.w| DomainName\ superread ”
$wa.Update()

More information:
https://technet.microsoft.com/en-us/library/cc261797.aspx
https://technet.microsoft.com/en-us/library/ff934623.aspx
http://blogs.msdn.com/b/andrasg/archive/2010/09/30/setting-the-super-user-account-on-sharepoint-2010-and-getting-access-denied-errors-afterwards.aspx
http://blogs.msdn.com/b/tehnoonr/archive/2013/05/03/10209570.aspx
http://blogs.msdn.com/b/kunal_mukherjee/archive/2011/01/10/caching-in-share-point-2010-best-practice.aspx

Advertisements

Written by bajiraoshinde

February 12, 2016 at 7:15 pm

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: