Microsoft Knowledge Base Email Alertz

(821519) - When you access the document library on your SharePoint Portal Server site by using an alternate portal access URL, you may find that you cannot create or delete a subfolder or add a document to the document library. When you try to do so, you receive...

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 821519 - Last Review: January 9, 2006 - Revision: 2.5

You cannot create or delete a subfolder or add a document to the document library when you use an alternate access portal URL to access a SharePoint Portal Server site

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986  (http://kbalertz.com/Feedback.aspx?kbNumber=256986/EN-US/ ) Description of the Microsoft Windows Registry

SYMPTOMS

When you access the document library on your SharePoint Portal Server site by using an alternate portal access URL, you may find that you cannot create or delete a subfolder or add a document to the document library. When you try to do so, you receive the following error message on the Document Library page in Microsoft Internet Explorer:
Access Denied - You do not have permission to access this item.

CAUSE

This problem may occur if the Internet Explorer Enhanced Security Configuration feature is turned on. When this feature is turned on, service accounts, such as services that use the LocalSystem account, do not have access to intranet resources.

By default, the Internet Explorer Enhanced Security Configuration feature is enabled in Internet Explorer on Microsoft Windows Server 2003-based computers.

WORKAROUND

To work around this problem, add registry entries for the LocalSystem account on the server, and make sure that the registry keys in the following steps exist on the computer and contain the correct values as appropriate to your environment.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
  1. Click Start,, and then click Run.
  2. In the Open box, type regedit, and then click OK.
  3. Add the following registry entry and set it to use a value of 0 (zero):
    HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1A00
    To do this, follow these steps:
    1. Right-click the following registry key, point to New, and then click DWORD Value:
      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
    2. Type 1A00, and then press ENTER.
    3. In the Value data box, type 0, and then click OK.
  4. Add the following registry key (if it does not already exist):
    HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
    To do so, follow these steps:
    1. Right-click the following registry key, point to New, and then click Key:
      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
    2. Type Domains, and then press ENTER.
  5. Add the following registry entry and set it to use a value of 1, where HostHeaderName is the name of the server:
    HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
    HostHeaderName
    \http
    To do so:
    1. Right-click the following registry key, point to New, and then click DWORD Value:
      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
      HostHeaderName
    2. Type http, and then press ENTER.

      Important If you are using Security Sockets Layer (SSL), type https.
    3. In the Value data box, type 1, and then click OK.
  6. If you are using fully qualified domain names (FQDNs), add the following registry entries, and set the value to 3, where ServerFQDN, is the FQDN of the server :
    • HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
      ServerFQDN
      \http
    • HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\
      ServerFQDN
      \http
    To do so, follow these steps:
    1. Right-click the following registry key, point to New, and then click DWORD Value:
      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ServerFQDN
    2. Type http, and then press ENTER.

      Important If you are using SSL, type https.
    3. In the Value data box, type 3, and then click OK.
    4. Right-click the following registry key, point to New, and then click Key:
      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
    5. Type EscDomains, and then press ENTER.
    6. Right-click the following registry key, point to New, and then click DWORD Value:
      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\ServerFQDN
    7. Type http, and then press ENTER.

      Important If you are using SSL, type https.
    8. In the Value data box, type 3, and then click OK.
  7. Quit Registry Editor.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

For more information about Internet Explorer Enhanced Security Configuration, see the Internet Explorer Enhanced Security Configuration Help topic. To do so, on a computer that is running Windows Server 2003, start Internet Explorer. On the Help menu, click Enhanced Security Configuration.

APPLIES TO
  • Microsoft Office SharePoint Portal Server 2003
Keywords: 
kbregistration kbwebbrowser kbpermissions kbpending kbbug KB821519
Retired KB ArticleRetired KB Content Disclaimer
This article was written about products for which Microsoft no longer offers support. Therefore, this article is offered "as is" and will no longer be updated.
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate