MOSS 2007 Access Denied When Accessing SSP Admin Site


Browsing to some of the SSP Admin pages yields:

or prompts continuously for a user name

I first came across this problem after restoring an SSP from a backup.


The SSP service account needs to be granted permissions in the following places:

Central Admin -> Application Management -> Site Collection Administrators

SSP Admin -> Personalization Service Permissions (All)

Central Admin -> Application Management -> Policy for Web Application (Full)

MOSS 2007 Move SSP to another farm

Move An SSP To Another Farm

Use the Technet article Microsoft Technet – Move an SSP to another farm.

The five basic steps are:

Back up the original SSP
Restore the SSP to a new farm
Restore SSP associations and configure the SSP
OPTIONAL – Configure the restored SSP on the new farm to be the default
OPTIONAL – Delete the original SSP

Backup the SSP

Follow the Microsoft instructions.

Also see ../BackupSsp

Restore the SSP to a new farm

Follow the Microsoft instructions.



5b – New Configuration!
5c – Use new database names to avoid overwriting existing


The restore will hang at 90% with lots of errors in the event log
Don’t worry – it has restored the databases and that’s all we need
Cancel the restore.
Delete the restored SSP (not the databases)

See ../UnableToDeleteSsp

Delete the restored SSP Web Application from Central Admin -> Delete Web Application

Restore SSP associations and configure the SSP

Follow the Microsoft instructions.


Access Denied when accessing SSP Admin site

Set SSP as default on the new farm

Follow the Microsoft instructions.

Delete the original SSP

Follow the Microsoft instructions.


Unable to delete SSP
Delete the Web Application for the SSP

MOSS 2007

MOSS 2007



Move an SSP to another farm

Problems (and Solutions)

Access Denied when accessing SSP Admin Site

Access Denied! Only site admin can access Data Source object from user profile DB

The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID

Unable to Delete Shared Services


Mysite is unavailable – 404 error

stsadm -o backup gives error 5

stsadm -o restore gives The server principal x is not able to access the database x under the current security context

PDF Icon is Missing

Interesting Articles

Configure Mysites to appear under http://portal/personal/

Filename Restrictions

Sharepoint does not like filenames to contain certain characters:

Joel is a reputable source, with an exhaustive review:

The official microsoft reference is:;en-us;905231

User Profiles

LDAP Filter for user profile import

Official Resources

The marketing site –

Disaster Recovery

Restoring SSP using stsadm -o restore

The server principal x is not able to access the database x under the current security context.

Solution: The user who is performing the restore (i.e. who is logged into the desktop) needs to be a member of the sysadmin role on the sql server.

Best Practice on Backups

Export User Profiles

This one only works if you have a fully working Shared Services Provider

Export Audiences

stsadm -o deletesite gives (Exception from HRESULT: 0x80070003)

So someone accidentally deleted a site collection (/sites/banana). I attempted to stsadm -o restore but got scared and cancelled it with Ctrl+C. Bizarrely, the site collection (/sites/banana) is still shown in the Central Administration Site Collection List, but without any information in the right hand panel.Presumably the database is corrupt in some way.

I want to delete the site collection so stsadm -o deletesite -url http://intranet/sites/banana but it says Exception from HRESULT: 0x80070003)

A quick google for Exception from HRESULT: 0x80070003) gives:

The Technet reference for databaserepair:

So lets see what sites are orphaned: stsadm -o databaserepair -url http://intranet/sites/banana -databasename wss_content_banana

Lets delete the orphaned sites: stsadm -o databaserepair -url http://intranet/sites/banana -databasename wss_content_banana -deletecorruption

But that doesn’t work.

Lets try detaching and reattaching the content database.

This strategy is backed up by:

stsadm -o preparetomove -contentdb wss_content_banana -site http://intranet/sites/banana

And remove database from farm:

stsadm -o deletecontentdb -url http://intranet/sites/banana -databaseserver wss_content_banana -databasename wss_content_banana

When you’re ready to reattach your database to the farm follow this only step:

stsadm -o addcontentdb -url http://intranet/sites/banana -databaseserver sqlserver1 -databasename wss_content_banana

Move a Sharepoint Site

Move a Sharepoint Document Library and Preserve Metadata

There are two inferior methods for copying data between document libraries or lists:

Using the explorer view to copy items from one tother
Creating list or library templates

These methods are inferior as they do not preserve the ‘Created By’, ‘Last Modified By’, etc. metadata.

Here is a method for moving the data whilst preserving its metadata:

Create a blank list or library as the destination
Goto the ‘Site Content and Structure’ page
Navigate to the source list or library
Select every item in the source list or library

Actions -> Move
Select your destination list or library

Henry also uses this technique:

stsadm -o backup gives Error 5

Your UNC backup folder needs to be SHARED and sharepoint service, central admin apid, sql server service need to have read/write on that share.

Microsoft Word Mail Merge SQL Server

Sub ConfigureMailMerge(clientId As Long, dsnFile As String, viewName As String)

Debug.Print “Call ConfigureMailMerge(” & Str(clientId) & “, ” & dsnFile & “, ” & viewName & “)”

Dim sql As String
‘sql = “SELECT * FROM ” & viewName & ” WHERE clientid=” & Trim(Str(clientId)) & “”
sql = “SELECT * FROM “”” & viewName & “”” WHERE clientid=” & Trim(Str(clientId)) & “”
‘sql = “SELECT * FROM ” & MYVIEW & ” WHERE clientid='” & Trim(Str(clientId)) & “‘”
Debug.Print sql

Dim sConn As String
sConn = “FILEDSN=” & dsnFile & “;”

ActiveDocument.MailMerge.MainDocumentType = wdFormLetters
ActiveDocument.MailMerge.OpenDataSource _
Name:=dsnFile, _

Debug.Print “Datasource Record Count = ” & ActiveDocument.MailMerge.DataSource.RecordCount

Debug.Print “Return ConfigureMailMerge”

End Sub

Cups Printing


Check Settings

gs -h | grep cups should reveal the ghostscript cups device.

CUPS Backends

The last part of any CUPS filtering chain is a backend. Backends are special programs that send the print-ready file to the final device.

AppSocket/HP JetDirect

This backend sends print files to AppSocket (a.k.a., HP JetDirect) connected network printers. An example for the CUPS device-URI to use is socket://


This backend sends print files to printers shared by a Windows host. Examples of CUPS device-URIs that may be used includes:


The smb:// backend is a symlink to the Samba utility smbspool (does not ship with CUPS). If the symlink is not present in your CUPS backend directory, have your root user create it: ln -s `which smbspool’ /usr/lib/cups/backend/smb.

To list all available backends installed on the system, use lpinfo -v


Supply also config files like /etc/cups/printers.conf, /etc/cups/cupsd.conf, /etc/cups/ppd/*.ppd, /etc/samba/smb.conf, …

Strip away the comments and blank lines in the config files when posting them, for example with a command like cat /etc/cups/cupsd.conf|grep -v ^#|grep [:alnum:] > cupsd.conf-stripped

Check the integrity of manufacturer-supplied PostScript PPD files with the cupstestppd utility. Often the output helps you fixing small flaws by editing the PPD file. CUPS only accept PPD files which pass the test. Unfortunately often printer manufacturers do not comply well with Adobe’s standards.

Send print jobs with CUPS in debug mode. Edit /etc/cups/cupsd.conf switching the “LogLevel” to “debug”. Kick the CUPS daemon with killall -HUP cupsd and send a print job. Then have a look into /var/log/cups/error_log and look for error messages, GhostScript command lines, option settings. Post relevant parts of the file if you didn’t find a solution for your problem.

Create your own raster driver

Xerox 7345




Try the ljet4 driver from

Linux Convert .m4a to .mp3

A handy bash script for converting all m4a (iTunes) files in the current directory to mp3.


for i in *.m4a; do
echo “Converting $i to wav…”
faad -o $wavname $i
echo “Converting $wavname to mp3…”
lame -h -b 192 $wavname $mp3name
echo “Cleaning up wav…”
rm $wavname
echo “Done. Output is $mp3name”

Paste the above into a file named and then chmod +x

cd into the directory containing your m4a files and then ./