When doing a search, using the farm account, you get search results, but when a “Normal” user does a search, they did not get any results.
It relates to giving the service accounts access to read users TGGAU attributes. (http://support.microsoft.com/kb/331951)
It Seems like Search crawl account needs to be given read permissions in all user accounts and groups.
The MSDN KB article has all Technical reason why
How do you give these permissions to crawl account, as below
The Windows Authorization Access Group (WAA group) has read permissions to the TGGAU attribute of all user accounts and groups.So,if you add the SharePoint Services service accounts to the WAA group,the SharePoint Services service account has read permissions to the TGGAU attribute of the user accounts.
To add the SharePoint Services service account to the WAA group, follow these steps:
- On the domain controller, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
- In the Active Directory Users and Computers window, expand DomainName, and then click Users or another appropriate organization unit (OU).
- Double-click the SharePoint Services service account you want to modify.
- In the Properties dialog box, click the Member Of tab.
- On the Member Of tab, click Add.
- In the Select Groups dialog box, type Windows Authorization Access Group under Enter the object names to select, and then click OK.
- Restart the SharePoint Services.
That worked for me, hope it helps someone else out as well.
