Hi,
I'm brand new to Project Server and need some assistance on being able to give AD users permission to the Project Web App I've created on a new installation of PS 2010.
I have one PS 2010 farm with the databases connected to a SQL server. The server is on our development domain. I used the technet how-to videos to run through the configuration. I was able to get to the point where I successfully installed
SharePoint 2010 and PS 2010. I created the Project Web App successfully. When I got to the point where I wanted to add users for permissions to the site, I noticed that they were still getting access denied. Even if I made them site collection
administrator. The only account I could use to gain access to the site was the account I used to configure the initial installation. I discovered that you need to synchronize with Active Directory so you can add users into the various
permissions groups within Project Server.
On the PWA site, I went to Server settings - Active Directory Resource Pool synchronization - Find group.. and discovered that I could only add groups that were in my development domain. (It says: "Search is restricted
to the Project Server's Active Directory forest. This forest is: devdomain.com") I want to be able to add users from the production domain.
Under Synchronization status I get the message "The synchronization failed because the Active Directory group was not found. If the Active Directory group no
longer exists, click Clear Group to clear Active Directory information for the group." I'm trying to add the domain admins group in this case. I get an error
in the application log. Event ID 7709 "Active Directory ERP synchronization cannot resolve reference to group." The local firewalls are off and there is no
firewall between the PS server and the domain controllers.
In doing some research, I found the following article:
http://social.technet.microsoft.com/Forums/en/projectserver2010general/thread/75f175e1-efc1-4db0-9dcd-8c840c69de33
It says that I can add the group from another forest if there is a 2 way trust. For example, I could add domainadmins@proddomain.com or user@proddomain.com However, when I try to do this, the error message says "No groups were found matching
that description". There is a trust between the 2 forests.
Perhaps I don't completely understand how this is supposed to work and I'm missing a step or 2. Would somebody be able to explain to me what I need to do give users permission to this site.
