Paul Liebrand's Weblog

Welcome to my blog mainly about SharePoint

Skip to: Content | Sidebar | Footer

Google Search

SharePoint / Office 2007 and random authentication pop up's with “My SharePoint Sites” (Memberships)

25 January, 2009 (13:18) | Office, SharePoint | By: Paul Liebrand

Update – 7/2/2009

The Office 2007 hotfix (KB970950) is now available to download:

http://support.microsoft.com/kb/970950

The specific bullet that resolves this problem states the following:

“When you view folders that are listed under My SharePoint Sites in the Open dialog box or the Save As dialog box in a 2007 Office application, you are prompted for authentication. This problem occurs when an expired site is removed from the list and you no longer have access to the site.”

Update – 6/11/2009

I have been using a private build of the hot fix to resolve this issue and it looks like it is finally resolved. I’ll report back as soon as I get word from Microsoft of the official release of this fix.

Update – 5/14/2009

I just got confirmation from Microsoft today that they are currently testing the hot fix and are still scheduling to have it available at the end of June.

Update – 4/21/2009

Microsoft is currently working on a hot fix for this. They are shooting for the Office 2007 June Cumulative Update. I’ll let you know if they make it.

Update – 2/6/2009

I have been working with Microsoft on this issue and it looks like we may be seeing a hot fix (of some sort) to resolve this issue in the future.

 

I have posted a number of articles on how the SharePoint membership and “My SharePoint Sites” feature works in MOSS 2007 and Office 2007 and some of the problems with it.

http://paulliebrand.com/2007/11/29/moss-2007-and-user-memberships/

http://paulliebrand.com/2007/11/29/office-2007-and-my-sharepoint-sites/

http://paulliebrand.com/2008/02/27/my-sharepoint-sites-and-authentication-popup/

I am currently in the process of working with Microsoft to resolve the specific issues around the pop up box appearing randomly as users are working within Office 2007.

There is another scenario that can cause the random authentication pop ups to occur. Consider the following:

  • A new site is created and the three (3) default groups Visitors, Members and Owners are associated.
  • The members group (which drives the MOSS 2007 membership feature – see previous posts on this topic) is then removed from the Site Permissions.
    • The group still exists but just does not have access to this site.
  • The members group is still associated with this SharePoint site as the designated members group.
  • SharePoint still propagates this site to the Office 2007 client for all users who are part of that group

As this group is propagated to the Office 2007 client’s “My SharePoint Site” feature it will check the users permission to the site and throw up the authentication pop up box because they technically do not have access.

After you remove any group that has been associated as the members group for a site, make sure you go into the “Set up Groups” from the People and Groups screen and change the Members site association to a new group that does have permissions.

In my opinion, the SharePoint membership feature should be smart enough to determine if the associated members group has access to the site or not and act accordingly. Unfortunately it does not – it just assumes it does and continues to propagate.


Post to Twitter Post to Delicious Post to Digg Post to Facebook Post to Reddit

  • Ryan Steeno

    I’m very interested to find out the solution to this. My customer has been periodically seeing these prompts as well. I’m going to check the Membership group for the sites as you stated to see if that is a problem for them too.

    Thanks for posting this.

  • Ryan Steeno

    I’m very interested to find out the solution to this. My customer has been periodically seeing these prompts as well. I’m going to check the Membership group for the sites as you stated to see if that is a problem for them too.

    Thanks for posting this.

  • Ryan Steeno

    I’m very interested to find out the solution to this. My customer has been periodically seeing these prompts as well. I’m going to check the Membership group for the sites as you stated to see if that is a problem for them too.

    Thanks for posting this.

  • http://www.sharepointblogs.com/spsherm Sherman Woo

    Hi Paul,

    Can you clarify the scenario about “the specific issues around the pop up box appearing randomly as users are working within Office 2007″?

    My scenario is quite simple: “standard” permissions (Members group), standard document library, Office 2003 though. User clicks on .doc file, Word opens but prompts for auth (NTLM on intranet). This is NOT SP1. Any thoughts whether our problem might be related to your scenario(s)?

    Thanks!

  • http://www.sharepointblogs.com/spsherm Sherman Woo

    Hi Paul,

    Can you clarify the scenario about “the specific issues around the pop up box appearing randomly as users are working within Office 2007″?

    My scenario is quite simple: “standard” permissions (Members group), standard document library, Office 2003 though. User clicks on .doc file, Word opens but prompts for auth (NTLM on intranet). This is NOT SP1. Any thoughts whether our problem might be related to your scenario(s)?

    Thanks!

  • http://www.sharepointblogs.com/spsherm Sherman Woo

    Hi Paul,

    Can you clarify the scenario about “the specific issues around the pop up box appearing randomly as users are working within Office 2007″?

    My scenario is quite simple: “standard” permissions (Members group), standard document library, Office 2003 though. User clicks on .doc file, Word opens but prompts for auth (NTLM on intranet). This is NOT SP1. Any thoughts whether our problem might be related to your scenario(s)?

    Thanks!

  • http://www.paulliebrand.com Paul Liebrand

    Sherman Woo,

    No — this is unrelated. Your problem sounds more like a Trusted Sites / Local Intranet issue or similar issue.

    I would refer to another post I made about this issue: http://paulliebrand.com/2008/04/02/sharepoint-consistently-prompting-for-user-credentials/

  • http://www.paulliebrand.com Paul Liebrand

    Sherman Woo,

    No — this is unrelated. Your problem sounds more like a Trusted Sites / Local Intranet issue or similar issue.

    I would refer to another post I made about this issue: http://paulliebrand.com/2008/04/02/sharepoint-consistently-prompting-for-user-credentials/

  • http://liebrand.wordpress.com liebrand

    Sherman Woo,

    No — this is unrelated. Your problem sounds more like a Trusted Sites / Local Intranet issue or similar issue.

    I would refer to another post I made about this issue: http://paulliebrand.com/2008/04/02/sharepoint-consistently-prompting-for-user-credentials/

  • Alex S.

    Thanks a lot for your investigation, Paul!

    I’m just wondering is there any way to temporarily disable propagation of “My Sharepoint Sites” folder for MS Office…

  • Alex S.

    Thanks a lot for your investigation, Paul!

    I’m just wondering is there any way to temporarily disable propagation of “My Sharepoint Sites” folder for MS Office…

  • Alex S.

    Thanks a lot for your investigation, Paul!

    I’m just wondering is there any way to temporarily disable propagation of “My Sharepoint Sites” folder for MS Office…

  • http://www.paulliebrand.com Paul Liebrand

    Yes. Unfortunately it has to be done on the client end. So you could do it through a GPO or something like that. The registry location is:

    HKEY_CURRENT_USERSoftwarePoliciesMicrosoftOffice12.0CommonPortal

    The DWORD you want to create is LinkPublishingDisabled with a value of 1 (1 = true, 0 = false).

    The frequency can also be adjusted by creating a DWORD of LinkPublishingFrequency and value can be some integer. Microsoft said the frequency is in minutes (not seconds) – however when I original was testing this it appeared to be seconds. So who knows.

    I hope this helps.

    Paul Liebrand

  • http://www.paulliebrand.com Paul Liebrand

    Yes. Unfortunately it has to be done on the client end. So you could do it through a GPO or something like that. The registry location is:

    HKEY_CURRENT_USERSoftwarePoliciesMicrosoftOffice12.0CommonPortal

    The DWORD you want to create is LinkPublishingDisabled with a value of 1 (1 = true, 0 = false).

    The frequency can also be adjusted by creating a DWORD of LinkPublishingFrequency and value can be some integer. Microsoft said the frequency is in minutes (not seconds) – however when I original was testing this it appeared to be seconds. So who knows.

    I hope this helps.

    Paul Liebrand

  • http://liebrand.wordpress.com liebrand

    Yes. Unfortunately it has to be done on the client end. So you could do it through a GPO or something like that. The registry location is:

    HKEY_CURRENT_USER\Software\Policies\Microsoft\Office\12.0\Common\Portal

    The DWORD you want to create is LinkPublishingDisabled with a value of 1 (1 = true, 0 = false).

    The frequency can also be adjusted by creating a DWORD of LinkPublishingFrequency and value can be some integer. Microsoft said the frequency is in minutes (not seconds) – however when I original was testing this it appeared to be seconds. So who knows.

    I hope this helps.

    Paul Liebrand

  • http://www.paulliebrand.com Paul Liebrand

    I just wrote up a post about this too if you want to reference that.

    http://paulliebrand.com/2009/05/21/disabling-my-sharepoint-sites-propagation-or-adjusting-the-frequency/

  • http://www.paulliebrand.com Paul Liebrand

    I just wrote up a post about this too if you want to reference that.

    http://paulliebrand.com/2009/05/21/disabling-my-sharepoint-sites-propagation-or-adjusting-the-frequency/

  • http://liebrand.wordpress.com liebrand

    I just wrote up a post about this too if you want to reference that.

    http://paulliebrand.com/2009/05/21/disabling-my-sharepoint-sites-propagation-or-adjusting-the-frequency/

  • Alex S.

    Much obliged to you, Paul!
    I’ll provide our support dep with appropriate WSH-script.

  • Alex S.

    Much obliged to you, Paul!
    I’ll provide our support dep with appropriate WSH-script.

  • Alex S.

    Much obliged to you, Paul!
    I’ll provide our support dep with appropriate WSH-script.