Friday, June 22, 2012 3:42 PM
Greetings - We are trying to troubleshoot an issue with AD groups that are added to the Visitors groups not being able to access the site collection. The error message is access denied. I have verified that this group does indeed have read access to the site.
If anyone has any suggestions on what the problem may be, please let me know if you don't mind.
The AD groups were added to the site collection after we applied SSL to the site. I would like to turn on the diagnostic logging but am not sure which category/subcategory I should be using for this. If I could get some direction on where I could get a breakdown of what each category/subcategory in the Diagnosic logging section does, or direction on what i should be setting up I would appreciate it.
Friday, June 22, 2012 7:22 PMAre you using a publishing page? Are all of the page artifacts (CSS, images, etc) checked in and published? I would recommend using Fiddler to see what request is triggering access denied.
Friday, June 22, 2012 9:53 PMCan the users access the site if they are added individually as users to the Visitors group? I suspect Raymond is is on the right path, I just want to rule out an issue with AD.
- Marked As Answer by callaway59 Wednesday, June 27, 2012 12:45 PM
Saturday, June 23, 2012 3:11 AM
To expand on what Raymond is saying, whenever I have this problem I put ?=contents=1 at the end of the URL. That's a shortcut to the web part maintenance page. Since there are no web parts or customizations on this page it's a good permissions test.
Wednesday, June 27, 2012 12:45 PMThank you Jason - The problem was with AD and the fact that you cannot use the distribution groups, they need to be security groups.