Today, I was building a SharePoint 2007 demo environment using a set of scripts that I’ve used numerous times before to configure and provision the SharePoint Web applications. I made some slight adjustments to the settings to match my clients naming convention e.g. User Names, Web Application Names, Database etc. Something I’d done many times before.
I then went to navigate the SSP Administration site and got access denied no matter what account I used, SPFarm, SPAdmin, SSP Service Account, Local Administrator. I couldn’t understand it! I even deleted the SSP and recreated it doing it manually. Again I got access denied. I checked the database permissions and the AppPools, they seemed to be configured correctly.
I did some Google searches and came across Faraz Khan blog post that seemed to be getting the same issue as me. Faraz suggested creating a new Application pool, but I did not understand why I would have to, again I’d used the scripts a number of times before.
Reading through the comments I noticed that Scott had valid reason why I was experiencing this behaviour:
“DO NOT call you SSP the same name as the AppPool you use for the SSP Admin Site.
The SSP actually uses its name to create an AppPool for use under the Office Search site.
If your SSP Admin AppPool is the same name then MOSS sets it to use the timer svc account.”
I had configured the script to create a SSP called “SharedServices” and the Application Pool called “SharedServices” as per the customer request. Low and behold after deleting the MySites and SharedServices Applications, changing the application pool to be “Shared Services AppPool” everything worked as expected.
Now I know, this is nothing new and I’m sure that many people have had similar experiences, especially if they don’t use the default SSP name “SharedServices1″, but I thought that I would blog about it as I spent 2 hours trying to troubleshoot something that could have been easily avoided.
Thanks again to Faraz and Scott.