Tuesday, April 14, 2015

Access denied. Only machine administrators are allowed to create administration service job

Error: Access denied.  Only machine administrators are allowed to create administration service job definitions of type: Microsoft.SharePoint.Administration.SPSolutionDeploymentJobDefinition, Microsoft.SharePoint, Version=15.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c.
 
Scenario:
  1. You are logged in to SharePoint machine with a user account with Administrator rights.
  2. All users with administrator rights has Farm Admin rights on SharePoint central admin.
  3. you are working on central admin until you click on something like "Manage Farm Solutions" in System Settings.
  4. You are asked to enter credentials again. after repeatedly adding your credentials your are shown error page like below

     
 
ULS Log:
Check ULS log, you will get message like access not being granted on 15 hive folders as shown below.


Failed on try2 to load XML document

at path 'C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\Template\Features\ReportServerStapling\feature.xml': System.IO.DirectoryNotFoundException: Could not find a part of the path 'C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\Template\Features\ReportServerStapling\feature.xml'.

at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)

at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)

at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options, String msgPath, Boolean bFromProxy)

at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share)

at System.IO.File.OpenRead(String path)

at Microsoft.SharePoint.SPXmlDocCache.<>c__DisplayClass2.<GetGlobalXmlDocumentFullPath>b__0()
 
 
What is the Problem:
At first instance the problem looks like irritating as you are logged in as administrator and Farm Admin. Actually SharePoint do not allow local administrator to make changes on jobs and features through other applications like Internet Explorer until or unless the application is run through the machine admin account.
 
Solution:
Close the already running instances of Internet Explorer and run the application as Administrator.
This will run the IE under machine Administrator account and problem will be solved.