When you deploy a forms-auth site to sharepoint. Usually you have two web applications with one forms-auth and one windows-auth.
If you have changed the "Alternate access mappings" to your windows-auth site as a public URL, you may find your site collection administrators no longer have rights.
That's the reason, just change it back to forms-auth site.