SharePoint 2013 Unable to edit Office web apps 2013 files with users that are members of security groups

Article ID: 2908321 - View products that this article applies to.
Expand all | Collapse all


Users provided access to SharePoint through Active Directory (AD) Security Groups may not able to edit documents via the browser using Office Online (OWA) without error.

In this scenario, the error from the Word App is: "Sorry, this document can't be opened for editing.”

We may find the following information after analyzing the ULS logs from the Office web apps Server and SharePoint Server.

From Office web apps server:

w3wp.exe (0x29F8) 0x194C Office Online WAC Hosting Interaction aiwe1 Medium Misc message from host: SyncUPA da6f9c1b-c78c-4d5f-87aa-9d6e4da8c852

w3wp.exe (0x29F8) 0x194C Office Online Word Online File Locking mg6z Unexpected AcquireLock: Unexpected error. [Error: FileUnauthorizedAccess] da6f9c1b-c78c-4d5f-87aa-9d6e4da8c852

From SharePoint:

w3wp.exe (0x1E3C) 0x2950 SharePoint Foundation WOPI ajahs Monitorable WOPI (Cobalt) - UPA Appears to be out of sync: CALLER-[machine: WFE01, version: 15.0.4481.1000, CorrelationId: da6f9c1b-c78c-4d5f-87aa-9d6e4da8c852] da6f9c1b-c78c-4d5f-87aa-9d6e4da8c852

w3wp.exe (0x1E3C) 0x2950 SharePoint Foundation Files 9mpn High File exception:
System.UnauthorizedAccessException: Access denied.
at Microsoft.SharePoint.SPGlobal.HandleUnauthorizedAccessException(UnauthorizedAccessException ex)
at Microsoft.SharePoint.Library.SPRequest.GetFileLock(String bstrUrl, String bstrWebRelDocUrl, Int32 lockType, String lockId, Int32 minutes)
at Microsoft.SharePoint.SPFile.Lock(SPLockType lockType, String lockId, TimeSpan timeout) da6f9c1b-c78c-4d5f-87aa-9d6e4da8c852


This issue can occur if the User Profile Application (UPA) is out of sync. If a user profile and the relevant group memberships for the user are not synchronized, SharePoint Server 2013 may incorrectly deny access to a given resource.


To resolve this issue ensure the User Profile Service Application (UPA) is properly configured and fully synchronized with user and group memberships.

More information

Plan Office Online (Used with SharePoint 2013)

Configure Office Online for SharePoint 2013

Configure licensing in SharePoint Server 2013

Server-to-server authentication and user profiles in SharePoint Server 2013

Synchronize user and group profiles in SharePoint Server 2013

UPA administrator cannot change the synchronization connection settings in SharePoint Server 2013
Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.


Article ID: 2908321 - Last Review: April 17, 2014 - Revision: 3.1
Applies to
  • Microsoft Office Web Apps Server 2013
  • Microsoft SharePoint Server 2013

Give Feedback


Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from