How to force permission on one user on the PWA

[Magda P]

Hi all,

In a MS Project Server 2007 environment all user permissions were deleted by
mistake. Therefore, no one has access any more to the PWA. Is there any way
to grant access rights at least to one user in order to manage the
permissions?

I made several tests on the issue, and it seems that even the creator of the
PWA can remain without rights.

I tried using also the STSADM tool that is by default installed with the
Project Server but without any success. I get a Logon failure: Username is
incorrect or bad password. In the Event log there is a failure for the
Network Service. On the MSDN - STSADM documentation, it is stated that it is
required only a user that is member of the Administrators group. The logged
user is an Administrator, but the logon failure appears.

Thank you in advance. Any help will be appreciated.

Regards,
Magda P

 

[Gary L. Chefetz]

Magda:

Try this for more info:

http://www.projectserverexperts.com...inistrators group in Project Server 2007.aspx

 

[Ben Howard [MVP]]

Hi Magda, not sure if this will help...
http://www.projectserverexperts.com...inistrators group in Project Server 2007.aspx

 

[Magda P]

Hi Ben, Gary,

Thank you for the help.

The first option presented does not work. As I was saying the STSADM tool
fails to logon.

I tried the second option presented. I added a user in the Administrators
group as it was presented. The problem persists. The user still has an Access
Denied message?!

I connected with another user, and I checked the other one, who is presented
indeed as part of the Administrators group, but it seems that modifying only
the MSP_WEB_SECURITY_GROUP_MEMBERS table is not enough.

If I set the user as part of the Administrators group from the PWA directly,
everything works just fine. The user can connect without any problems.

Any ideas on how to solve this? Is there a modified flag that should be set?


Regards,
Magda

 

[Gary L. Chefetz]

Magda:

Did you try the STSADM account logged in as the Farm administrator? Can you
tell us exactly what moves led to this problem?

 

[Magda P]

Hi Gary,

I did try the STSADM tool with the user who made the PWA but without any
success as the logon failure is persistent. In the event viewer I get the
following entry:
Logon Failure:
Reason: Unknown user name or bad password
User Name: NETWORK SERVICE
Domain: NT AUTHORITY
Logon Type: 8
Logon Process: Advapi
Authentication Package: Negotiate
Workstation Name: PROJECTSERVER
Caller User Name: magda
Caller Domain: DOMAINNAME
Caller Logon ID: (0x0,0x2929F)
Caller Process ID: 3028
Transited Services: -
Source Network Address: -
Source Port: -

I also tried with a user that is a domain administrator. Same result.

I identified the problem with the user:
The rights were denied from the group level. Therefore this is why I still
got the Access denied exception. I modified the
MSP_WEB_SECURITY_SP_CAT_PERMISSIONS table to grant the permissions instead of
denying them. Problem solved.

Thanks for the help,
Magda