Description

User receives the error "Connection string could not be updated.Access denied" while updating the connection string in Winshuttle Central under Database connection settings.

Applies To

Winshuttle Central 10.x

Solution

When updating the settings under Winshuttle Central>Winshuttle Central Administration>Site>Database Connection make sure the following are met:

1. The logged in user should be a SharePoint Farm admin, and have the database mapped to the user account in SQL Server Management Studio. The account needs the db_owner and db_securityadmin roles.
2. Because the connection string is stored as a SharePoint property , you must the appropriate permissions to run SharePoint Powershell commands.

Additional Information

There is a security setting that is known to prevent the ability to update the property when updating the Database Connection String for Central. This presents an "Access Denied" error.

Steps to resolve this error:

1. On a SharePoint Front End server open a SharePoint PowerShell session as Administrator:
2. Run the following commands in that PowerShell window (don't copy/paste)
   $contentService = [Microsoft.SharePoint.Administration.SPWebService]::ContentService
   $contentService.RemoteAdministratorAccessDenied = $false
   $contentService.Update()
3. IISRESET the SharePoint farm
4. Make sure the SharePoint web application app-pool identity is a member of the Farm Administrator's group
5. Make sure the same account is granted sysadmin on the SQL instance
6. Update the connection String in Winshuttle Central Administration

Once the connection string has been updated successfully revert back the changes as mentioned below.

1. Run the below commands in the PowerShell window (don't copy/paste)
   $contentService = [Microsoft.SharePoint.Administration.SPWebService]::ContentService
   $contentService.RemoteAdministratorAccessDenied = $true
   $contentService.Update()
2. IISRESET the SharePoint farm