The SharePoint 2010 search privileges issue

One of our clients took place the following situation. All users can’t find anything via SharePoint Search center.

The SharePoint Search Service Application was successfully created, The Content was crawled and indexed (index contains about 10 thousands documents).

Symptoms:

• If you try to find something search results always is empty,
• Search results is not empty only If you run a browser with the SharePoint Central Administration Pool Account.
• You can also observe empty scopes in site collection’s options except the People Scope (Url: /_layouts/viewscopes.aspx),

The solution was found here.

This is an insufficient privileges issue. An account which was used for the Search Service Application Pool had no privileges to read user properties from Active Directory. This information need for a security trimming feature of the SharePoint Search.

For resolving the issue you need to add the SharePoint Search Application Pool Account to the Windows Authorization Access group by using the Active Directory Users and Computers snap-in.

And, as usual, I hate it!