User in contributor group can not access file directly on Sharepoint on-premises site

Question

My user tried to access a pptx file directly to the SharePoint Document library and got this message:

I checked his permission and found that he existed in contributor group, it means he can access and edit this file. I also checked the permission of this file and found the same thing too .

After that, I continued to check ULS logs and found the message :"Claims Windows Sign-In: Sending 401 for request '<Document link>' because the user is not authenticated and resource requires authentication." . That means he doesn't have permission to access this file.

So why he is still in this group but he doesn't have this permission? How can I do to fix it?

Thanks for your help

Answer 1

Hi @Mr.Hoang Nghiem Huy ,

Thank you for posting in this community.

There are a few things that can cause this problem:

1.See if you have configured Am for this Dokument, Librari or Phil (Info Martin, Ritz, Managment).

2.look at the error log in your application server it would be more specific why its throwing a 401 error that would help solve your issue.

3.Make sure you have unselected the “Kernel Mode Authentication”

Reference: https://www.sharepointdiary.com/2011/04/http-error-401-not-authorized-with-kerberos-auth.html#ixzz8cLqq8XD3

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

4.Ensure that permissions are assigned to the correct identity claim (SAML identity claim) rather than the user’s Windows-based account (domain\user).

4.If the user still cannot access the file, try removing them from the site and then granting them permissions again.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.