Changing SPSite Application Pool: Can't Logon after that.
Hi folks,
I am getting some problems changing the Application Pool Account of my MOSS installation. I've installed it with the default accounts and now I need to change them to a specific domain user. Using the default accounts I can logon in MOSS without problems but If I change the account I can't logon. I followed the steps bellow:
- Created a Domain User Account;
- Using the Administration Site, I selected Service Accounts -> Application Pool - > Sharepoint - 80;
- Run the command IISReset /noforce;
When I tried to logon again, I couldn't. If I change the application pool through the IIS to NetworkService, for example, I can logon again.
What Do I have to do to change the application Pool?
Thanks,
Renato Guimaraes.
Answers
Hello,
try to add the New Application Pool User to SQL Server Member:
· Membership in the db_owner role for content databases and search databases associated with the Web application.
· Access to read from the configuration and the SharePoint_AdminContent databases.
· Access to read from and write to the associated SSP database
Regards
- Marked As Answer byXue-Mei Chang-MSFTMSFT, ModeratorTuesday, July 29, 2008 7:09 AM
All Replies
Hello,
You need to make changes in the SharePoint Central Administrator:
Folow link bellow.
Central Administration > Operations > Service Accounts
Cheers
Thanks Ivan.
As I said before... I've done it but I can't login after that. For example, I have the user Administrator who can login very well when the account is NetworkServices. When I change through the SP Admin, I can't login anymore, even with the account I've set to the application pool.
Thanks,
Renato,
From your steps you listed you made the changes in the IIS but not in the SharePoint Central Administration.
For SharePoint you should not be making any changes in IIS all changes should be made via CA console.
Please confirm
Regards
Ivan, thanks again...
I've done that.. Using CA I changed the Application Pool Account. After that, I've used an account (collection administrator) to login but It is not working.. It couldn't login.. The user Administrator has both Site Collection Administrator and Farm Administrator profiles.
thanks
Changing the permissions manually is a bit of a no no. You should perform it via this method;
How to change service accounts and service account passwords in SharePoint Server 2007 and in Windows SharePoint Services 3.0
http://support.microsoft.com/kb/934838
Cheers,
Thanks,
I am still getting problems after change the account.
I installed my MOSS env using the network account, ok? With the network service account I don't have problems to log in with my Administrator account, but If I change the account (by SP Admin ou STSADM.exe) I can't log in with the adminsitrator.
Is it possible to change the accounts after installation? I don't know anymore..
Thanks,
Hello,
try to add the New Application Pool User to SQL Server Member:
· Membership in the db_owner role for content databases and search databases associated with the Web application.
· Access to read from the configuration and the SharePoint_AdminContent databases.
· Access to read from and write to the associated SSP database
Regards
- Marked As Answer byXue-Mei Chang-MSFTMSFT, ModeratorTuesday, July 29, 2008 7:09 AM
Thanks Francesco,
When I changed the pool using the Administration Site, It added the user to those database permissions.
Thanks,
Renato.
Another problem solved!
Bye Renato!But, as I said in my posts before yours, I can't log on after change the account. For example, I am trying to log on with an sharepoint administrator account.
thanks,
How are your site collection administrator?
Francesco.
I have the user "Administrator" as the Primary Site Collection Administrator and no user as Secondary.
After chage the pool account, I can't log on with this user, only when the SP Application Pool is configured with the Network Service Account.
Thnaks,
Please have a look at this article on the supported method to change and update your service credentials;
How to change service accounts and service account passwords in SharePoint Server 2007 and in Windows SharePoint Services 3.0
http://support.microsoft.com/kb/934838
Cheers,- Hi
I am getting exactly the same problem here. I followed the KB number as specified in the previous post here and all changes have worked. The only problem is as soon as you try to access your site, under any user, it continues to prompt you for your username and password and will not let you in as it does not authenticate. If you change the Central Administration application pool account back to Network service you can then login to the site fine and it all works. So if you change the application pool identity to anything other than Network service you then get locked out of your site(s).
Further investigaton here has found that if you use Firefox or Opera to access your site it will work fine.. so the problem is something to do with IE. We have also found that if you Untick the enable Integrated Authentication tick box in the Advanced properties of IE you will then be able to access your site fine. SO the problem is something to do with IE and Integrated Authentication. Please can someone come up with a solution to this problem. I am just waiting for our support contract here to come through then I will be raising this problem with the Microsoft Technical support desk as it is urgent we have an answer. If I get a fix I will post it here asap but if anyone else out there has an answer please let us know :)
kind regards
Simon
Further investigaton here has found that if you use Firefox or Opera to access your site it will work fine.. so the problem is something to do with IE. We have also found that if you Untick the enable Integrated Authentication tick box in the Advanced properties of IE you will then be able to access your site fine. SO the problem is something to do with IE and Integrated Authentication. Please can someone come up with a solution to this problem. I am just waiting for our support contract here to come through then I will be raising this problem with the Microsoft Technical support desk as it is urgent we have an answer. If I get a fix I will post it here asap but if anyone else out there has an answer please let us know :)
Hello
This solution works however it is far from ideal , is there any know fix for this?- Hi Razza, I just got the same issue. What I found was that this is an Kerberos / NTLM issue. Central Administration defaulted to Kerberos on my install (single server / network services as account), and when changing to a decent service account I couldnt login. I reverted back to network service, logged in and changed to NTLM authentication by using this guide: http://support.microsoft.com/kb/832769. After doing the change again, I could login just fine using IE without disabling integrated authentication.
Hope that helps,
Vidar Crosby
