SharePoint search returns no result for a few users.

Turn on the logging, I found this in log file


03/11/2011 10:39:17.45 w3wp.exe (0x15B0) 0x03F0 SharePoint Server Search Query Processor e2p4 Verbose In CSecurityTrimmer::AccessCheck there were 5 unique sdids among the candidates. 8316b34f-88e5-446f-8fed-f5689fd4c20b
03/11/2011 10:39:17.45 w3wp.exe (0x15B0) 0x03F0 SharePoint Server Search Query Processor g2j0 Verbose Initializing CAuthZContext 8316b34f-88e5-446f-8fed-f5689fd4c20b
03/11/2011 10:39:17.47 w3wp.exe (0x15B0) 0x03F0 SharePoint Server Search Query Processor g2j3 High AuthzInitializeContextFromSid failed with ERROR_ACCESS_DENIED. This error indicates that the account under which this process is executing may not have read access to the tokenGroupsGlobalAndUniversal attribute on the querying user's Active Directory object. Query results which require non-Claims Windows authorization will not be returned to this querying user. 8316b34f-88e5-446f-8fed-f5689fd4c20b03/11/2011 10:39:17.47 w3wp.exe (0x15B0) 0x03F0 SharePoint Server Search Query Processor g2j5 Verbose Finished initializing CAuthZContext 8316b34f-88e5-446f-8fed-f5689fd4c20b
03/11/2011 10:39:17.47 w3wp.exe (0x15B0) 0x03F0 SharePoint Server Search Query Processor e2pc Verbose Security Trimming docid 11. 8316b34f-88e5-446f-8fed-f5689fd4c20b
03/11/2011 10:39:17.47 w3wp.exe (0x15B0) 0x03F0 SharePoint Server Search Query Processor e2pc Verbose Security Trimming docid 2498. 8316b34f-88e5-446f-8fed-f5689fd4c20b
03/11/2011 10:39:17.47 w3wp.exe (0x15B0) 0x03F0 SharePoint Server Search Query Processor e2pc Verbose Security Trimming docid 2126. 8316b34f-88e5-446f-8fed-f5689fd4c20b
...
03/11/2011 10:39:17.50 w3wp.exe (0x1744) 0x0A1C SharePoint Server Search Query dlm8 Verbose Ignoring exception fetching opensearch total result counts in location.GetResults: Exception: System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.Office.Server.Search.Query.Location.GetResults(QueryManager qdra) 778ae124-d6a7-4ea1-902c-fd79f3e019b9
03/11/2011 10:39:17.50 w3wp.exe (0x1744) 0x0A1C SharePoint Server Search Query dlm9 Verbose Ignoring exception fetching opensearch result counts in location.GetResults: Exception: System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.Office.Server.Search.Query.Location.GetResults(QueryManager qdra) 778ae124-d6a7-4ea1-902c-fd79f3e019b9
03/11/2011 10:39:17.50 w3wp.exe (0x1744) 0x0A1C SharePoint Server Search Query dln0 Verbose Ignoring exception fetching rss result counts in location.GetResults: Exception: System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.Office.Server.Search.Query.Location.GetResults(QueryManager qdra) 778ae124-d6a7-4ea1-902c-fd79f3e019b9
03/11/2011 10:39:17.50 w3wp.exe (0x1744) 0x0A1C SharePoint Server Search Query dln1 Verbose Ignoring exception fetching atom result counts in location.GetResults: Exception: System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.Office.Server.Search.Query.Location.GetResults(QueryManager qdra) 778ae124-d6a7-4ea1-902c-fd79f3e019b9
03/11/2011 10:39:17.50 w3wp.exe (0x1744) 0x0A1C SharePoint Server Search Query dln2 Verbose Ignoring exception fetching rdf result counts in location.GetResults: Exception: System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.Office.Server.Search.Query.Location.GetResults(QueryManager qdra) 778ae124-d6a7-4ea1-902c-fd79f3e019b9
03/11/2011 10:39:17.50 w3wp.exe (0x1744) 0x0A1C SharePoint Server Search Query dln3 Verbose GetResults on location LocalSearchIndex for Strategy completed with 0 results 778ae124-d6a7-4ea1-902c-fd79f3e019b9
03/11/2011 10:39:17.50 w3wp.exe (0x1744) 0x0A1C SharePoint Foundation Monitoring nasq Verbose Entering monitored scope (RefinementManager.GetRefinement(Dictionary<string, Dictionary<string, RefinementDataElement>>, XmlDocument, int)) 778ae124-d6a7-4ea1-902c-fd79f3e019b9
03/11/2011 10:39:17.50 w3wp.exe (0x1744) 0x0A1C SharePoint Server Search Query eq48 Verbose Metadata threshold is not met: category = Result Type, threshold = 5, actual number filters = 0. 778ae124-d6a7-4ea1-902c-fd79f3e019b9


A search of the "AuthzInitializeContextFromSid" and "tokenGroupsGlobalAndUniversal" on Google leads me to several useful articles.


Following next instructions from http://support.microsoft.com/kb/842423

1. On the domain controller, click Start, point to Programs, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the Active Directory Users and Computers window, expand DomainName, and then click Users or another appropriate organization unit (OU).
3. Double-click the Reporting Services service account.
4. In the Properties dialog box, click the Member Of tab.
5. On the Member Of tab, click Add.
6. In the Select Groups dialog box, type Windows Authorization Access Group under Enter the object names to select, and then click OK.
7. Restart the Reporting Services service.

The problem solved!

A similiar description of the issues is at http://social.technet.microsoft.com/Forums/en-GB/sharepoint2010setup/thread/688b5c52-f478-463b-bc00-debfd0c3be2b