E-mail notifications are not sent by SharePoint Portal Server 2003 or by Windows SharePoint Services when content on the portal site or content on the Web site changes (894632)

RESOLUTION

To resolve this issue, use one of the following resolutions, depending on your situation:

Resolution 1 for Cause 1

To resolve this issue, determine the domain functional level of the domain and configure the Active Directory Computers and Users tool to display advanced features. After you do this, follow the steps in Method 1. If the steps in Method 1 do not resolve the issue, follow the steps in Method 2.

To determine the domain functional level of the domain and to configure the Active Directory Computers and Users tool to display advanced features, follow these steps:

1. Start the Active Directory Computers and Users tool.
2. Determine the domain functional level. To do this:
   1. Right-click DomainName in the left pane, and then click Properties.
   2. Click the General tab, and then make a note of the domain functional level. If you are running Microsoft Windows Server 2003, the domain functional level is displayed under Domain functional level. If you are running Microsoft Windows 2000 Server, the domain functional level is displayed under Domain operation mode.
   3. Click Cancel.
3. Configure the Active Directory Users and Computers tool to display advanced features. To do this:
   1. Expand DomainName in the left pane.
   2. Click Advanced Features on the View menu.
4. Follow the steps in Method 1. If the steps in Method 1 do not resolve the issue, follow the steps in Method 2.

Method 1: Assign the SharePoint Portal Alert service account Read permission to the TGGAU attribute in Active Directory

Assign the SharePoint Portal Alert service account Read permission to the TGGAU attribute on all user account objects and on all group account objects in the domain. The SharePoint Portal Alert service account is the user account that the SharePoint Portal Alert service is configured to log on as. To do this, use one of the following methods depending on whether you have a Windows 2000 domain or a Windows Server 2003 domain.

• In a Windows 2000 domain
  
  If the domain is in pre-Windows 2000 compatibility access mode, the Everyone group has Read permission to the TGGAU attribute for all user account objects and for all computer account objects. Therefore, the user account that the SharePoint Portal Alert service is configured to log on as has access to the TGGAU attribute on the user account that created the e-mail notification.
  
  If the domain is not in pre-Windows 2000 compatibility access mode, you must assign Read permission to the user account that is used to run the SharePoint Portal Alert service so that it can read the TGGAU attribute on the user account that created the e-mail notification. To do this, create a domain local group that simulates the pre-Windows 2000 compatibility group, add the SharePoint Portal Alert service account to this group, and then assign Read permissions to the group on all user objects. To do this, follow these steps:
  1. Create a group named "MyAuthZGrp," and then add the SharePoint Portal Alert service account to the group. To do this:
     1. Start the Active Directory Users and Computers tool.
     2. Expand DomainName in the left pane.
     3. Right-click Users, point to New, and then click Group.
     4. Type MyAuthZGrp in the Group name box, click Domain local under Group scope, and then click OK.
     5. Double-click MyAuthZGrp in the right pane, and then click the Members tab.
     6. Click Add.
     7. In the Select Users, Computers, or Groups dialog box, type the SharePoint Portal Alert service account in the Enter the object names to select box, click Check Names, and then click OK.
  2. Assign Read permissions to the "MyAuthZGrp" group. To do this:
     1. Right-click Users in the left pane, and then click Properties.
     2. Click the Security tab, and then click Add.
     3. In the Select Users, Computers, or Groups dialog box, type MyAuthZGrp in the Enter the object names to select box, click Check Names, and then click OK.
     4. Click MyAuthZGrp in the Group or user names list if it is not already selected.
     5. Click to select the Allow check box that is next to the Read permission in the Permissions for MyAuthZGrp list, and then click OK.
• In a Windows Server 2003 domain
  
  If the domain is in pre-Windows 2000 compatibility access mode, the Everyone group has Read permission to the TGGAU attribute for all user account objects and for all computer account objects. Therefore, the user account that the SharePoint Portal Alert service is configured to log on as has access to the TGGAU attribute on the user account that created the e-mail notification.
  
  If the domain is not in pre-Windows 2000 compatibility access mode, add the SharePoint Portal Alert service account to the Windows Authorization Access Group (WAA group). By default, the WAA group has Read permission to the TGGAU attribute on user account objects and on computer account objects when Windows Server 2003 is installed. Therefore, after you add the SharePoint Portal Alert service account to the WAA group, the user account that the SharePoint Portal Alert service is configured to log on as has Read access to the TGGAU attribute on the user account that created the e-mail notification.
  
  To add the SharePoint Portal Alert service account to the WAA group in Windows Server 2003, follow these steps:
  1. Start the Active Directory Users and Computers tool.
  2. Expand DomainName in the left pane, and then expand Users.
  3. Right-click the user account who the SharePoint Portal Alert service is configured to log on as, and then click Properties.
  4. Click the Member Of tab.
  5. Click Add.
  6. In the Select Users, Computers, or Groups dialog box, type Windows Authorization Access Group in the Enter the object names to select box, click Check Names, and then click OK two times.

Method 2: Assign the SharePoint Portal Alert service account Read permission to the TGGAU attribute on the user account that created the e-mail notification

If Method 1 does not resolve this issue, assign the SharePoint Portal Alert service account Read permission to the TGGAU attribute on the user account that created the e-mail notification. For example, if the user account that created the e-mail notification is a member of the Enterprise Admins group on the domain, follow these steps:

1. Start the Active Directory Users and Computers tool.
2. Expand DomainName in the left pane, and then expand Users.
3. Right-click Enterprise Admins, and then click Properties.
4. Click the Members tab, and then click Add.
5. In the Select Users, Computers, or Groups dialog box, type the SharePoint Portal Alert service account in the Enter the object names to select box, click Check Names, and then click OK.
6. Right-click the user account that created the e-mail notification, and then click Properties.
7. Verify that the Enterprise Admins group has Read permission to the user account.

Resolution 2 for Cause 2

To resolve this issue, synchronize the Windows SharePoint Services Timer Service with the new user account information. To do this, follow these steps:

1. Start SharePoint Central Administration.
2. In the left pane, click Windows SharePoint Services.
3. Under Server Configuration on the Windows SharePoint Services Central Administration page, click Configure virtual server for central administration.
4. On the Configure Administrative Virtual Server page, click Use an existing application pool, and then click OK.