Paul Liebrand’s Weblog

Welcome to my blog mainly about SharePoint

SharePoint / Office 2007 and random authentication pop up’s with “My SharePoint Sites” (Memberships)

Update – 7/2/2009

The Office 2007 hotfix (KB970950) is now available to download:

The specific bullet that resolves this problem states the following:

“When you view folders that are listed under My SharePoint Sites in the Open dialog box or the Save As dialog box in a 2007 Office application, you are prompted for authentication. This problem occurs when an expired site is removed from the list and you no longer have access to the site.”

Update – 6/11/2009

I have been using a private build of the hot fix to resolve this issue and it looks like it is finally resolved. I’ll report back as soon as I get word from Microsoft of the official release of this fix.

Update – 5/14/2009

I just got confirmation from Microsoft today that they are currently testing the hot fix and are still scheduling to have it available at the end of June.

Update – 4/21/2009

Microsoft is currently working on a hot fix for this. They are shooting for the Office 2007 June Cumulative Update. I’ll let you know if they make it.

Update – 2/6/2009

I have been working with Microsoft on this issue and it looks like we may be seeing a hot fix (of some sort) to resolve this issue in the future.


I have posted a number of articles on how the SharePoint membership and “My SharePoint Sites” feature works in MOSS 2007 and Office 2007 and some of the problems with it.

I am currently in the process of working with Microsoft to resolve the specific issues around the pop up box appearing randomly as users are working within Office 2007.

There is another scenario that can cause the random authentication pop ups to occur. Consider the following:

  • A new site is created and the three (3) default groups Visitors, Members and Owners are associated.
  • The members group (which drives the MOSS 2007 membership feature – see previous posts on this topic) is then removed from the Site Permissions.
    • The group still exists but just does not have access to this site.
  • The members group is still associated with this SharePoint site as the designated members group.
  • SharePoint still propagates this site to the Office 2007 client for all users who are part of that group

As this group is propagated to the Office 2007 client’s “My SharePoint Site” feature it will check the users permission to the site and throw up the authentication pop up box because they technically do not have access.

After you remove any group that has been associated as the members group for a site, make sure you go into the “Set up Groups” from the People and Groups screen and change the Members site association to a new group that does have permissions.

In my opinion, the SharePoint membership feature should be smart enough to determine if the associated members group has access to the site or not and act accordingly. Unfortunately it does not – it just assumes it does and continues to propagate.


January 25, 2009 - Posted by | Office, SharePoint | , , ,


  1. I’m very interested to find out the solution to this. My customer has been periodically seeing these prompts as well. I’m going to check the Membership group for the sites as you stated to see if that is a problem for them too.

    Thanks for posting this.

    Comment by Ryan Steeno | January 29, 2009 | Reply

  2. Hi Paul,

    Can you clarify the scenario about “the specific issues around the pop up box appearing randomly as users are working within Office 2007”?

    My scenario is quite simple: “standard” permissions (Members group), standard document library, Office 2003 though. User clicks on .doc file, Word opens but prompts for auth (NTLM on intranet). This is NOT SP1. Any thoughts whether our problem might be related to your scenario(s)?


    Comment by Sherman Woo | May 14, 2009 | Reply

  3. Sherman Woo,

    No — this is unrelated. Your problem sounds more like a Trusted Sites / Local Intranet issue or similar issue.

    I would refer to another post I made about this issue:

    Comment by liebrand | May 14, 2009 | Reply

  4. Thanks a lot for your investigation, Paul!

    I’m just wondering is there any way to temporarily disable propagation of “My Sharepoint Sites” folder for MS Office…

    Comment by Alex S. | May 21, 2009 | Reply

    • Yes. Unfortunately it has to be done on the client end. So you could do it through a GPO or something like that. The registry location is:


      The DWORD you want to create is LinkPublishingDisabled with a value of 1 (1 = true, 0 = false).

      The frequency can also be adjusted by creating a DWORD of LinkPublishingFrequency and value can be some integer. Microsoft said the frequency is in minutes (not seconds) – however when I original was testing this it appeared to be seconds. So who knows.

      I hope this helps.

      Paul Liebrand

      Comment by liebrand | May 21, 2009 | Reply

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: