|
Home > Archive > BizTalk Server General > December 2005 > SSO Access Denied CreateApps
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
SSO Access Denied CreateApps
|
|
| Michael 2005-12-19, 2:48 am |
| Hi,
I'm trying to get SSO working on my dev box. When I try to run ssomanage
-createapps to create an application I get the following access denied error.
The user I am running the util under belongs to the SSO groups and is a
local administrator aswell as biztalk administrator. The user is also the
dbo of the SSO database. I'm running on win2003 with BTS04 Any ideas?
Event Type: Warning
Event Source: ENTSSO
Event Category: Enterprise Single Sign-On
Event ID: 10536
Date: 12/19/2005
Time: 2:54:45 PM
User: N/A
Computer: #####
Description:
SSO AUDIT
Function: CreateApplication
Tracking ID: 0b7dc58b-b0db-4633-92ed-0e96cf99dbfc
Client Computer: ######### (ssomanage.exe:4528)
Client User: domain\username
Application Name: SSOApplication1
Error Code: 0x80070005, Access is denied.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
| |
| Alan Smith 2005-12-19, 2:48 am |
| Hi Michael,
This may be due to you using local users and groups instead of domain users
and groups. I think that if you are to create applicatios with SSO, the SSO
Administrator account needs to be an account in a domain. (I think this is
the case, please correct me if it's not.)
If you are able to create users on your domain, and reconfigure BizTalk to
use them, then the SSO tools should work.
Regards,
Alan
--
The Bloggers Guide to BizTalk
http://geekswithblogs.com/asmith
"Michael" wrote:
> Hi,
>
> I'm trying to get SSO working on my dev box. When I try to run ssomanage
> -createapps to create an application I get the following access denied error.
> The user I am running the util under belongs to the SSO groups and is a
> local administrator aswell as biztalk administrator. The user is also the
> dbo of the SSO database. I'm running on win2003 with BTS04 Any ideas?
>
> Event Type: Warning
> Event Source: ENTSSO
> Event Category: Enterprise Single Sign-On
> Event ID: 10536
> Date: 12/19/2005
> Time: 2:54:45 PM
> User: N/A
> Computer: #####
> Description:
> SSO AUDIT
> Function: CreateApplication
> Tracking ID: 0b7dc58b-b0db-4633-92ed-0e96cf99dbfc
> Client Computer: ######### (ssomanage.exe:4528)
> Client User: domain\username
> Application Name: SSOApplication1
> Error Code: 0x80070005, Access is denied.
>
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
| |
| Steve Jamieson [MSFT] 2005-12-27, 6:03 pm |
| Hi Guys -
No, to create applications you just need to be a member of the SSO
Affiliate Administrators account or the SSO Administrators account - which
can be either a local or domain accounts.
For more info you can set the SSO audit levels to high and try again -
ssoconfig -auditlevel 3 3
(from the Enterprise Single Sign-On install directory)
Restart the ENTSSO service, try to create the application again, take a
look in the Application event log.
--------------------[vbcol=seagreen]
users[vbcol=seagreen]
SSO[vbcol=seagreen]
is[vbcol=seagreen]
to[vbcol=seagreen]
ssomanage[vbcol=seagreen]
error.[vbcol=seagreen]
a[vbcol=seagreen]
the[vbcol=seagreen]
This posting is provided "AS IS" with no warranties, and confers no rights.
EBusiness Server Team
|
|
|
|
|