'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix SharePoint Access Denied Error When Opening Files in Desktop Apps
Question details
Users encounter an "Access denied" message or find files opening in read-only mode when attempting to open a SharePoint document in a desktop application from their web browser.
- Product
- SharePoint, Microsoft Office
- Device & OS
- not provided
- Scenario
- Clicking "Open in App" in Microsoft Edge to edit a SharePoint document using a local desktop app like Word or Excel.
- Observed behavior
- The desktop application fails to open the file properly, displaying an "Access denied" error or forcing the document into a read-only state, even though the user has full edit permissions in the web browser version.
Ensure you have administrative privileges for your organization's SharePoint admin center, as resolving this issue requires modifying tenant-level access control policies.
Allow Apps That Don't Use Modern Authentication
Modify your SharePoint access control policies to permit access for legacy desktop applications that do not utilize modern authentication protocols.
This error is primarily caused by security policies in Microsoft 365 that block applications relying on legacy authentication methods. Enabling this setting ensures compatibility with a wider range of desktop clients.
Open your web browser and navigate to https://[YourOrganization]-admin.sharepoint.com/, making sure to replace [YourOrganization] with your actual tenant name.
In the left-hand navigation pane of the admin center, locate and click on 'Policies', then select 'Access Control'.
Find the option labeled 'Apps that don't use modern authentication' and change its status to 'Allow Access'. Save your changes.
Verify User Permissions and Office Sign-In Status
If adjusting the authentication policies does not resolve the read-only issue, the problem might stem from local application account credentials.
Experience Hassle-Free Document Editing with WPS Office
If SharePoint and Microsoft Office authentication issues continue to disrupt your workflow, consider trying WPS Office. It provides a lightweight, highly compatible, and user-friendly environment for editing all your essential documents without complex credential conflicts.
- 1. Download the Installer: Visit the official WPS Office website and download the free installation package for your operating system.
- 2. Install WPS Office: Run the installer and follow the quick on-screen instructions to set up the software on your computer.
- 3. Open Your Documents: Launch WPS Office and easily open, edit, or save your locally downloaded cloud documents with full format support.
Frequently Asked Questions
Why does my file open in read-only mode in the desktop app but not in the browser?
This usually happens because the desktop application fails to authenticate your editing permissions properly due to modern authentication blocks, or because your local Office app credentials need to be refreshed by signing out and back in.
What does 'Apps that don't use modern authentication' mean?
This refers to older applications or specific connectivity protocols that use basic authentication (username and password only) without supporting newer security standards like Multi-Factor Authentication (MFA).
Is it secure to allow apps that don't use modern authentication?
While it restores functionality for certain desktop connections, allowing legacy authentication can bypass advanced security measures like MFA. It is recommended to consult with your IT administrator before leaving this setting permanently enabled.
How long does it take for SharePoint policy changes to take effect?
Changes made in the SharePoint admin center, such as updating access control policies, can sometimes take anywhere from a few minutes to up to 24 hours to propagate completely across the entire Microsoft 365 tenant.
