Jan 27
Resolving “403 Forbidden” Errors in Search Settings After Installing Post-SP1 Hotfixes
There is a known MOSS 2007 post-SP1 bug which will cause 403 Forbidden errors when changing the index server through the GUI. During these changes to configuration of the SSP, we experienced this issue. To resolve this, take the following steps.
From your new index server, open a command prompt and browse to:
C:\Program Files\Common Files\Microsoft Shared\web server extensions\12\BIN
Execute the following STSADM commands:
- stsadm -o osearch -action stop -f
- stsadm -o osearch -action start -role indexquery
- stsadm -o execadmsvcjobs
Return to the Central Administration site and go back to configure the SSP. Re-assign the index server for the SSP as detailed in the “Configure Index Server for SSP” section of this document, but from a web front end (WFE) server.
From that same WFE server execute the following STSADM command:
- stsadm -o execadmsvcjobs
Then provide access to %WINDIR%\Tasks on your new index server for the local group WSS_WPG
- Open a command prompt and type attrib -s %windir%\tasks <enter>
- Browse to %windir%\tasks, right click and select properties
- Add the WSS_WPG group and grant Read & Write permissions on the tasks folder
- Open a command prompt and type attrib +s %windir% \tasks <enter>
Restart the search service on the new index server.
Perform a full crawl.