Agent for SharePoint Guide › Troubleshooting › Log Files Show Access Denied Because of SPAuthorizeUserAgent Settings

Log Files Show Access Denied Because of SPAuthorizeUserAgent Settings

Symptom:

The trace log files of my Agent for SharePoint show users were denied access to resources because of the settings in the SPAuthorizeUserAgent parameter.

Solution:

Follow these steps:

1. Examine the request shown in the trace log file to determine which User Agent string value was denied access. The following example shows typical trace log file results for this parameter:

   spauthorizeuseragent=Microsoft Office Protocol Discovery
   spauthorizeuseragent=Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; FDM; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
   spauthorizeuseragent=Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; FDM; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)
   spauthorizeuseragent=Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
   spauthorizeuseragent=Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; MS-RTC LM8; .NET4.0C)
   spauthorizeuseragent=Microsoft Office/12.0
   spauthorizeuseragent=Microsoft Office/12.0 (Windows NT 6.1; Microsoft Office Word 12.0.6545; Pro)
   spauthorizeuseragent=Microsoft Office Existence Discovery
   spauthorizeuseragent=Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; InfoPath.2; MS-RTC LM8; .NET4.0C; MSOffice 12)
   spauthorizeuseragent=MSFrontPage/12.0
   spauthorizeuseragent=Mozilla/4.0 (compatible; MS FrontPage 12.0)
   spauthorizeuseragent=Microsoft-WebDAV-MiniRedir/6.1.7600
   

2. Add the user agent string from your trace log to the list of values in the following parameter:

   SPAuthorizeUserAgent

   Specifies a list of Microsoft Office user-agent strings for which the Agent for SharePoint allows access. This list is populated automatically with the default values when the Agent for SharePoint starts. The user-agent strings in this parameter act as a whitelist. Changes to this parameter override the default settings. Access is denied to clients whose user-agent string does not appear in the list.

   For example, setting the value to Microsoft Office allows access to all versions of Microsoft Office products that are associated with that user-agent string. Conversely, setting the value to Microsoft Office/12.0 allows access to only those versions of Microsoft Office products that are associated with that user-agent string.

   Default: Microsoft Office, MS FrontPage, MSFrontPage, Microsoft Data Access Internet Publishing Provider Protocol Discovery, Test for Web Form Existence, Microsoft-WebDAV-MiniRedir

   Limits: Multiple values are allowed.