I've got an issue which is driving me wild...
An account which was a farm administrator was deleted from AD, this account has since been recreated, obviously with a new SID and I've begun the process of granting access again to everything. The account is a member of local admin group and the WSS_Admin_WPG and is also DBOwner for all databases. Almost everything works except when clicking on "Create Site Collection" from "Central Administration" I get "Error:Access denied".
Using this re-created account I can add another user to the farm administrators group and they have no such issues.
Nothing in the ULS logs except the 2 entries below
Leaving Monitored Scope (Request (GET:http://<servername>:<port>/_admin/createsite.aspx)). Execution Time=54.6083370931222
Entering monitored scope (Request (GET:http://<servername>:<port>/_layouts/AccessDenied.aspx?Source=http%3A%2F%2F<servername>%3A<port>%2F%5Fadmin%2Fcreatesite%2Easpx))
Attempting the same via PowerShell renders "Attempted to perform an unauthorized operation."
Anyone experienced this before?
Paul Turner http://www.askPT.co.uk Twitter:@RedMantaUK MCTS:WSS,MOSS,2010 MCITP:2010.
Please remember to click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if it was useful.