You cannot create or delete a subfolder or add a document to the document library when you use an alternate access portal URL to access a SharePoint Portal Server site (821519)



The information in this article applies to:

  • Microsoft Office SharePoint Portal Server 2003

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

When you access the document library on your SharePoint Portal Server site by using an alternate portal access URL, you may find that you cannot create or delete a subfolder or add a document to the document library. When you try to do so, you receive the following error message on the Document Library page in Microsoft Internet Explorer:
Access Denied - You do not have permission to access this item.

CAUSE

This problem may occur if the Internet Explorer Enhanced Security Configuration feature is turned on. When this feature is turned on, service accounts, such as services that use the LocalSystem account, do not have access to intranet resources.

By default, the Internet Explorer Enhanced Security Configuration feature is enabled in Internet Explorer on Microsoft Windows Server 2003-based computers.

WORKAROUND

To work around this problem, add registry entries for the LocalSystem account on the server, and make sure that the registry keys in the following steps exist on the computer and contain the correct values as appropriate to your environment.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
  1. Click Start,, and then click Run.
  2. In the Open box, type regedit, and then click OK.
  3. Add the following registry entry and set it to use a value of 0 (zero):

    HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\1A00

    To do this, follow these steps:
    1. Right-click the following registry key, point to New, and then click DWORD Value:

      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3

    2. Type 1A00, and then press ENTER.
    3. In the Value data box, type 0, and then click OK.
  4. Add the following registry key (if it does not already exist):

    HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains

    To do so, follow these steps:
    1. Right-click the following registry key, point to New, and then click Key:

      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

    2. Type Domains, and then press ENTER.
  5. Add the following registry entry and set it to use a value of 1, where HostHeaderName is the name of the server:

    HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\HostHeaderName\http

    To do so:
    1. Right-click the following registry key, point to New, and then click DWORD Value:

      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\HostHeaderName

    2. Type http, and then press ENTER.

      Important If you are using Security Sockets Layer (SSL), type https.
    3. In the Value data box, type 1, and then click OK.
  6. If you are using fully qualified domain names (FQDNs), add the following registry entries, and set the value to 3, where ServerFQDN, is the FQDN of the server :
    • HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ServerFQDN\http
    • HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\ServerFQDN\http
    To do so, follow these steps:
    1. Right-click the following registry key, point to New, and then click DWORD Value:

      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\ServerFQDN

    2. Type http, and then press ENTER.

      Important If you are using SSL, type https.
    3. In the Value data box, type 3, and then click OK.
    4. Right-click the following registry key, point to New, and then click Key:

      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap

    5. Type EscDomains, and then press ENTER.
    6. Right-click the following registry key, point to New, and then click DWORD Value:

      HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\ServerFQDN

    7. Type http, and then press ENTER.

      Important If you are using SSL, type https.
    8. In the Value data box, type 3, and then click OK.
  7. Quit Registry Editor.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

MORE INFORMATION

For more information about Internet Explorer Enhanced Security Configuration, see the Internet Explorer Enhanced Security Configuration Help topic. To do so, on a computer that is running Windows Server 2003, start Internet Explorer. On the Help menu, click Enhanced Security Configuration.

Modification Type:MinorLast Reviewed:1/9/2006
Keywords:kbregistration kbWebBrowser kbpermissions kbpending kbBug KB821519 kbAudITPRO