CLM: 0x80070005 Access Denied with sensitive Accounts.

Source: Microsoft Support

RAPID PUBLISHING ARTICLES PROVIDE INFORMATION DIRECTLY FROM WITHIN THE MICROSOFT SUPPORT ORGANIZATION. THE INFORMATION CONTAINED HEREIN IS CREATED IN RESPONSE TO EMERGING OR UNIQUE TOPICS, OR IS INTENDED SUPPLEMENT OTHER KNOWLEDGE BASE INFORMATION.

A customer uses Internet Explorer to access Cerfificate Lifecycle Manager.��They�are able to get to the main page but they�are unable to get to additional pages such as Manage My Info.�This is only affecting certain users.

The following error is observed when they click on one of the additional pages within the CLM website.

Event Type:�Error
Event Source:�System.Web
Event Category:�None
Event ID:�0
Date:��5/14/2008
Time:��1:57:31 PM
User:��N/A
Computer:�BILLCLM
Description:
Message:Exception of type 'System.Web.HttpUnhandledException' was thrown.
Type:System.Web.HttpUnhandledException
Source:System.Web
Stack Trace:�� at System.Web.UI.Page.HandleError(Exception e)
�� at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
�� at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
�� at System.Web.UI.Page.ProcessRequest()
�� at System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context)
�� at System.Web.UI.Page.ProcessRequest(HttpContext context)
�� at ASP.content_sm_main_smainmenu_aspx.ProcessRequest(HttpContext context) in c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Temporary ASP.NET Files\clm\446be480\7055ce71\App_Web_x5g0icey.0.cs:line 0
�� at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
�� at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

Inner Exception:Message:Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
Type:System.UnauthorizedAccessException
Source:Microsoft.Clm.Interop.activeds
Stack Trace:�� at Microsoft.Clm.Interop.activeds.NameTranslateClass.InitEx(Int32 lnSetType, String bstrADsPath, String bstrUserID, String bstrDomain, String bstrPassword)
�� at Microsoft.Clm.DS.NameTranslator..ctor()
�� at Microsoft.Clm.DS.NameTranslator.ConvertToGuid(String name)
�� at Microsoft.Clm.BusinessLayer.Users.ConvertNameToGuid(String name)
�� at Microsoft.Clm.BusinessLayer.Security.get_CurrentUserUuid()
�� at Microsoft.Clm.Web.SMainMenu.RequestsCountLoad()
�� at Microsoft.Clm.Web.SMainMenu.Page_Load(Object sender, EventArgs e)
�� at System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e)
�� at System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e)
�� at System.Web.UI.Control.OnLoad(EventArgs e)
�� at System.Web.UI.Control.LoadRecursive()
�� at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

For more information, see Help and Support Center at http://www.microsoft.com/technet/support/ee/ee_basic.aspx.

This can�occur if the user, who is trying to access the page,�has the Account is sensitive and cannot be delegated setting enabled.

To�disable the setting do the following:



����1.� Open Active Directory Users and Computers

����2.� Find the user that is getting the Access Denied error.

����3.� Right-click and select properties.

����4.� Click on the Account tab.

����5.� Under Account options, uncheck Account is sensitive and cannot be delegated.

����6.� Click Ok.�

����7.� Have the user close IE and try and access CLM again.