You receive the 'Unable to get global configuration data' error message in Microsoft Windows SharePoint Services or in Microsoft Office SharePoint Portal Server 2003

Support for Office 2003 has ended

Microsoft ended support for Office 2003 on April 8, 2014. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

This article has been archived. It is offered "as is" and will no longer be updated.
Symptoms
Assume that you try to perform one or more of the following tasks in Microsoft Windows SharePoint Services or in Microsoft Office SharePoint Portal Server 2003:
  • You try to use a browser to connect to a Windows SharePoint Services Web site or to a SharePoint Portal Server Web site.
  • You try to access specific SharePoint Central Administration settings. For example, you try to access the Configure default e-mail server settings setting or the Manage Web server list setting.
  • You try to configure the configuration database server by using the Set Configuration Database Server option on the Windows SharePoint Service Central Administration page.

When you try to perform any one of these tasks, you may receive the following error message:
Unable to get global configuration data
Cause
This behavior occurs when one of following conditions is true:
  • The user account to which the application pool identity for the virtual server is configured does not have the permissions that are required to access the content folder for the virtual server.
  • The virtual server content database is located on a remote computer that is running Microsoft SQL server.
  • The account that is used by the virtual server does not have database owner permissions or database access permissions for the content database.
Resolution
To resolve this behavior, you must use one of the following methods depending on your configuration.

Method 1

By default, the Default Web site uses the IIS_WPG group account. The IIS_WPG group account contains accounts that are used to run the virtual server.

However, the IIS_WPG group account may not have the required permissions to access the new content folder when you create a new virtual server and a new content directory.

In this situation, you must add the IIS_WPG group account or the account that is used to run the virtual server on the content folder. Then, you must grant the following permissions:
  • Read & Execute
  • List Folder Contents
  • Read
To assign security permissions to a folder, follow these steps:
  1. Start Windows Explorer. To do this, click Start, click Run, type explorer, and then click OK.
  2. Locate and then right-click the folder where the content of your virtual server is located, and then click Properties.
  3. Click the Security tab.
  4. Click Add, type IIS_WPG, click Check Names, and then click OK.

    Note If you use an account other than the IIS_WPG account to run the virtual server, modify this step accordingly.
  5. In the Group or user names list, click the account that you added in step 4.
  6. Click to select all the following check boxes in the Allow column:
    Read & Execute
    List Folder Contents
    Read
  7. Click OK.

Method 2

If the Microsoft Windows SharePoint Services content database is located on a remote computer that is running SQL Server. The account that is used to run the virtual server cannot access the content database.

In this situation, you must add the account to the content database. Then, you must grant the account database owner permissions. To do this, follow these steps:
  1. Use an account that has administrative permissions to log on to the computer that is running SQL Server and that is hosting the SharePoint content database.
  2. Click Start, and then click Enterprise Manager.
  3. In the SQL Server Enterprise Manager MMC snap-in, expand Microsoft SQL Servers, expand SQL Server Group, expand the SQL server that is hosting the SharePoint SQL database, expand Databases, right-click the SharePoint content database, and then click Properties.
  4. On the database properties dialog box, click the General tab, and then view the account that is next to Owner.

    Verify that this account is the same account that is used for the SharePoint virtual server IIS application pool.

    If the SharePoint virtual server IIS application pool is using the Network Service account, continue to step 5.

    If the SharePoint virtual server IIS application pool is not using the Network Service account, you must remove this account. Then, configure the database owner for the Windows SharePoint Services content and configuration databases. To do this, follow these steps:
    1. In SQL Enterprise Manager, expand Security, and then click Logins.
    2. In the details pane, right-click the account that you want to remove, and then click Delete.
    3. After you have removed the account, you must configure the database owner for the Windows SharePoint Services content and the configuration databases. To do this, follow these steps.

      For the content database

      1. On the server that is running SQL Server, click Start, point to All Programs, point Microsoft SQL Server, and then click Query Analyzer.
      2. In the Connect to SQL Server dialog box, specify the name of the server to which you want to connect, specify the type of authentication, and then click OK.
      3. On the Query menu, click Change Database.
      4. In the Select Database of ServerName dialog box, click the content database that you want to update, and then click OK.
      5. In the Query pane, type the following lines:
        DECLARE @AdminVSAccount nvarchar(255) DECLARE @ContentVSAccount nvarchar(255) SET @ContentVSAccount = N'Domain\ContentAccount'; SET @AdminVSAccount = N'Domain\AdminAccount'; EXEC sp_grantlogin @ContentVSAccount;EXEC sp_grantlogin @AdminVSAccount; EXEC sp_changedbowner @AdminVSAccount; IF NOT EXISTS (SELECT * FROM sysusers WHERE name=@ContentVSAccount) EXEC sp_grantdbaccess @ContentVSAccount; EXEC sp_addrolemember 'db_owner', @ContentVSAccount; 
        Note Where Domain\ContentAccount is the domain user account for the content virtual server, and where Domain\AdminAccount is the domain user account for the administration virtual server.
      6. On the Query menu, click Execute to run the query.

        Note If the domain user account for the content virtual server and the administration virtual server are the same user account, SQL Query Analyzer displays a message that is similar to the following when you run the query:
        Database owner changed. Server: Msg 15023, Level 16, State 1, Procedure sp_grantdbaccess, Line 127User or role 'domain\account' already exists in the current database. Server: Msg 15410, Level 11, State 1, Procedure sp_addrolemember, Line 66User or role 'domain\account' does not exist in this database.
        However, the operation is completed successfully.

      For the configuration database

      1. On the server that is running SQL Server, click Start, point to All Programs, point Microsoft SQL Server, and then click Query Analyzer.
      2. In the Connect to SQL Server dialog box, specify the name of the server to which you want to connect, specify the type of authentication, and then click OK.
      3. On the Query menu, click Change Database.
      4. In the Select Database of ServerName dialog box, click the configuration database that you want to update, and then click OK.
      5. In the Query pane, type the following lines:
        DECLARE @AdminVSAccount nvarchar(255) DECLARE @ContentVSAccount nvarchar(255)SET @ContentVSAccount = N'Domain\AdminAccount';SET @AdminVSAccount = N'Domain\AdminAccount'; EXEC sp_grantlogin @ContentVSAccount; EXEC sp_changedbowner @AdminVSAccount;IF NOT EXISTS (SELECT * FROM sysusers WHERE name=@ContentVSAccount) EXEC sp_grantdbaccess @ContentVSAccount;EXEC sp_addrolemember 'db_owner', @ContentVSAccount; EXEC sp_addsrvrolemember @AdminVSAccount, 'dbcreator'EXEC sp_addsrvrolemember @AdminVSAccount, 'securityadmin'
        Note Where Domain\AdminAccount is the domain user account for the content virtual server, and where Domain\AdminAccount is the domain user account for the administration virtual server.
      6. On the Query menu, click Execute to run the query.

        Note If the domain user account for the content virtual server and the administration virtual server are the same user account, SQL Query Analyzer displays a message that is similar to the following when you run the query:
        Database owner changed. Server: Msg 15023, Level 16, State 1, Procedure sp_grantdbaccess, Line 127User or role 'domain\account' already exists in the current database. Server: Msg 15410, Level 11, State 1, Procedure sp_addrolemember, Line 66User or role 'domain\account' does not exist in this database.
        However, the operation is completed successfully.
    4. After you run the two SQL queries, right-click the SharePoint content database, and then click Properties.
    5. On the General tab, make sure that the account next to Owner is the administration virtual server application pool account.
    If the database owner is the correct account and you still cannot access the database, you must grant access to the content and configuration databases. To do this, follow these steps:
    1. In SQL Enterprise Manager, expand Security, expand Logins, and then double-click the account in which the virtual server is running.
    2. Click the Database Access tab, click to enable the Permit box next to the content and configuration databases.
  5. When the SharePoint virtual server IIS application pool is using the Network Service account, you must grant the Network Service account the correct permissions in SQL Server. To do this, follow these steps:
    1. In the SQL Server Enterprise Manager MMC snap-in expand the Security folder, and then click Logins.
    2. Double-click the Network Service account.
    3. In the SQL Server Login Properties dialog box, click the General tab, and make sure that the Grant access option is enabled.
    4. Click the Server Roles tab, and then grant the Network Service account the following roles, and then click OK:
      System Administrator
Note To force the execution of the page, you must browse directly to http://server/default.aspx. This is because the error message may still be cached in the browser.
References
For more information about how to configure the database owner for the Windows SharePoint Services content and the configuration databases, click the following article number to view the article in the Microsoft Knowledge Base:
832770 How to change the application pool identity for Windows SharePoint Services administration and content virtual servers
wss wss2003 stsv2 sps sps2003 share point 1433 sql port listen
Properties

Article ID: 900499 - Last Review: 01/16/2015 01:43:21 - Revision: 2.0

Microsoft Office SharePoint Portal Server 2003, Microsoft Windows SharePoint Services 2.0

  • kbnosurvey kbarchive kbtshoot kbprb KB900499
Feedback