So this server is running SQL 2005, Windows 2003 as a domain controller, and
then the install for Project Server 2007 which includes SharePoint Server. I
get it all setup using just a SQL Services account that all SQL services
start under, a ServerFarm account for install and setup and Shared Services,
an Application Pool account, and a Search/Crawler account.
All the website works great based on permissions of each application
websites, the main team website works, the SharePoint Admin website works,
the main Central Admin website works. I can access all these sites as my
personal domain account, which is a domain admin and set as an additional
admin under each one of those sites, all which looks to be using Kerberos
when looking at the security logs on that server.
So now I setup the PWA site, which only asks for one account during setup
which is the administrator of the Project Web Access server. First off,
which should that account be???? Because it seems that the only account that
can ever access the PWA, is the account that I put here during setup. If I
set the domain administrator, then that account can access it and my personal
account gets access denied at the PWA, even when I go to the PWA site
settings and add my personal domain account as an admin with full rights.
If I recreate the PWA (or create another one) and put my account as the
administrator during setup, then I can access it just fine and the domain
admin cannot. What's the deal???
I also noticed that the main server farm account in SQL has dbowner access
in the SQL databases for those Project databases, but there is also a role
called ProjectServerRole but with no account having access to that role. If
I try and give the server farm account access to that role, I get a SQL
server account error that I cannot change the dbo. Please help!
Failed to get language information for Project Server (http://team/pwa)
--
Regards, Ben.
Ben has already given you the right answer, I just wanted to add that
somethimes organisations use the service account by mistake when thery
install Project Server. If you cant find out what your admin account is, you
may want to try the service account.
Hope this helps
--
Marc Soester [MVP]
http://www.i-pmo.com.au
You are attempting to do this via Site Settings, and this is not correct.
Project Server permissions and users are set via the following method..
Login into Project Web Access
Click on Server Settings (in the links menu).
Click on Manage Users, and add a New User there. Don't set individual
permissions, but add the users to the relevant groups. You can create new
groups and categories as appropriate.
In the 1st instance I would just add your AD account to the administrators
group.
--
Regards, Ben.
One more question, I have read some about the Active Directory sync and now
see that option in here. Should I set that up? I currently don't have any
"MS Project" related groups setup in Active Directory. Do I need to setup
groups first like a Read Only group, Project Manager group and so on in AD,
before even coming in here into the Project Management and setting those
groups? Cause, my Domain Users group only consists of all active users in
the company, all of which would need at least Read Only access. Can I set
the Domain Users group as Read Only, and then create additional Project
groups for more high-level access?
Synchronisation works on two levels, the 1st for enterprise resources, and
the 2nd for groups and permissions. Can I suggest you read this
http://technet.microsoft.com/en-gb/library/cc197530 in the 1st instance, and
then you may want to create a group which you synch your AD to. Note that
you'll need to the relevant licences for each user, and depending on the size
of your AD, this may or may not be a good idea.