none
Members of AD groups does not get access to SharePoint site RRS feed

  • Question

  • Hi,

    SharePoint has stopped accepting New users in AD groups. It looks like the AD part is ok - it workd fine on the test-servers.So when I...:

    - create a new AD Group and add users

    - Add the AD Group to a SP Group With Access to a site (the AD Group is visible in SP and can be added)

    => none of the users in the AD Group gets access

    If I add the same users directly to the SP Group, then they get Access.

    Also when I add New users to an existing AD Group that also are granted Access to a SP site, New users don't get Access.

    What may be wrong?


    jik

    Wednesday, January 29, 2014 12:03 PM

All replies

  • If you perform a full crawl (search), does it resolve the permission issue?

    Trevor Seward

    Follow or contact me at...
      

    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Wednesday, January 29, 2014 4:23 PM
    Moderator
  • Did you run the User Profile Service Application and do a full Profile Sync to pull in the AD changes?

    SPYliu

    Wednesday, January 29, 2014 4:30 PM
  • This is a known issue with using AD Groups in SharePoint Groups.  You have to wait for the token to get refreshed (~24hrs) or do an IISRESET.  Reference:

    http://jopx.blogspot.com/2013/06/sharepoint-server-2013-active-directory.html


    Chris Givens CEO, Architecting Connected Systems Blog Twitter

    Wednesday, January 29, 2014 4:41 PM
  • We use a SP 2013 farm for search...so it may not do any difference?


    jik

    Wednesday, January 29, 2014 4:57 PM
  • Yes - I did.

    And if I just add users it Works fine, but not With ad Groups...


    jik

    Wednesday, January 29, 2014 4:58 PM
  • Is the A/D group a security group or a distribution group?  Distribution groups are not supported  in SharePoint for permissions, and so if it is a nested distribution group that exists in the Security group, they still will be ignored.  So in any way shape or form (nested or not) distribution groups cannot beused for security in SharePoint.
    Wednesday, January 29, 2014 5:00 PM
  • It's a Security Group.

    The last update on the servers is SP2. Maybe some later CU's fix the problem?

    ...I haven't read about all yet...


    jik

    Wednesday, January 29, 2014 5:05 PM
  • Take a look at Chris' link. He's got the answer here.

    Trevor Seward

    Follow or contact me at...
      

    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Wednesday, January 29, 2014 6:23 PM
    Moderator
  • I tried a full reboot of the servers....

    jik

    Wednesday, January 29, 2014 6:36 PM
  • How many members are in the AD group?

    Trevor Seward

    Follow or contact me at...
      

    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

    Wednesday, January 29, 2014 6:37 PM
    Moderator
  • About 50 members in the Group I tried when I first discovered the problem.

    I also tried to create a New AD Group for testing With just 1 member. Didn't work either.

    It appears that the problem may started when an AD Group was accidentically deleted. To fix that the VM running as DC was just restored to a point before the deletion...


    jik

    Thursday, January 30, 2014 8:25 AM
  • Hi,

     Please refer the below link for your reference,

    http://stackoverflow.com/questions/10090626/unable-to-see-new-active-directory-security-groups-in-sharepoint-2010-audiences


    Balaji -Please click mark as answer if my reply solves your problem.

    Thursday, January 30, 2014 8:33 AM
  • Thanks for the suggestion, but it didn't help me :-(

    Still same problem...


    jik

    Friday, January 31, 2014 9:02 AM