User in contributor group can not access directly file on SharePoint on-premises site

Question

My user tried to access a powerpoint file directly on sharepoint document library and got this message

When I checked his permission, I had found that he still stayed in the contributor group, that mean he can access and edit this file . I also checked the permission for this file, too

When I checked ULS log, these logs illustrate user didn't have permission:
"Claims Windows Sign-In: Sending 401 for request '<web url>' because the user is not authenticated and resource requires authentication".

So why user still exist in group but they can't act the permission of this group?

Thank for your help

Answer 1

Hi @Mr.Hoang Nghiem Huy ,

Thank you for posting in this community.

There are a few things that can cause this problem:

1.See if you have configured IRM for this Document Library or file(information rights management).

2.look at the error log in your application server it would be more specific why its throwing a 401 error that would help solve your issue.

3.Make sure you have unselected the “Kernel Mode Authentication”

Reference: https://www.sharepointdiary.com/2011/04/http-error-401-not-authorized-with-kerberos-auth.html#ixzz8cLqq8XD3

Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

4.Ensure that permissions are assigned to the correct identity claim (SAML identity claim) rather than the user’s Windows-based account (domain\user).

4.If the user still cannot access the file, try removing them from the site and then granting them permissions again.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.