As a follow up to my previous post on "User Profile Sync – SharePoint 2010", I'll wrap up with some very good links and other currently known issues we discovered with User profile sync stuff in SharePoint 2010.
If you have not started to setup and configure the User profile Service at all, don't go any further here and instead start reading my above mentioned post.
Known Issue and troubleshooting questions
You'll find here a summary list of most common questions, known issues and/or other reported cases since RTM. For your convenience, I listed the links below to give you a short "jump" to it.
Furthermore, I highly recommend you to frequently check the Blogs and Links referred here for latest Updates as well as I'll posting more new issues here as they arise or found by daily support work
My posts: found or reported through Support incidents:
- User Profile Import from BDC fails on SharePoint Server 2010 with Event ID 6301 (KB 2435284)
- Delete the user property SPS-Local in SharePoint 2010 breaks the My Profile page
- Problem after installing August CU for SharePoint 2010 (Event ID 3 is logged in bulks)
- User Profile Sync does not work when Central Admin page runs on SSL (Fixed with KB 2394320)
- AskMeABout Webpart exception thrown (breaking My Profile site)
- "Unable to open database connection" error from Forefront Identity Manager,
with Event ID 3 logged (KB 2473416) - MsiInstaller errors Event ID 1004; 1001; 1015 (KB 2473430)
- Event ID error 22, 234 and multiple times created ForeFront certificates (KB 2498715)
- Regression with October 2010 CU – (…affects User Profile service applications and MySites…)
- Regression with Dec. 2010 CU:
- Membership on My Site not updated/populated correctly
- SharePoint 2010 Profile Sync – Inability to import users based on group membership
- Proxy Configuration issues with UPA in SharePoint 2010 / 2013
- UPA Sync Service Startup issues due to invalid Name of the server
- …
Last update: 2013-05-21
Let me also refer to Spencer's blog (as of 2010-10-13) with just a few copied links:
- Why does UPS get “stuck on starting”?
- Incorrect Permissions
- UPS Provisioning quits immediately after hitting Start in Services on Server
- NetBIOS Domain Name and Fully Qualified Domain Name don’t match
- Using a SQL Server Named Instance
- Starting UPS after creating the User Profile Service Application using Windows PowerShell
- Running Central Administration over SSL
- Timeouts when creating Synchronization Connections
- After a server restart, the UPS service instance is stopped
- After the installation of Cumulative Updates, the UPS service instance needs to be provisioned
- When attempting to Manage the UPA, you receive an error, Not Found, Correlation ID: [guid], or Could not load file or assembly 'Microsoft.Resource Management’
- After the installation of the August CU, Event ID 3 is repeatedly logged to the Application Event Log
- After clicking start in Services on Server, nothing happens for 20 minutes and UPS is not provisioned. No ILM Configuration steps are logged to ULS.
- How to view progress of UPS provisioning
- How to reset the Sync Machine Instance
- Stuck on Starting and ULS logs event 9i1w: ILM Configuration: Error ‘ERR_CONFIG_DB’
cheers, Steve
Top Microsoft Support solutions for the most common issues experienced when using Microsoft SharePoint
LikeLike
Information was good,i like your post.
Looking forward for more on this topic
http://staygreenacademy.com/"> SharePoint 2013 Administration Training in Hyderabad
LikeLike
Wooh this is very informative article. Thank you so much..!
http://staygreenacademy.com/sharepoint-training-institutes-in-hyderabad-india/">SharePoint 2013 Developer Training in Hyderabad
LikeLike
Great article …Thanks for your great information, the contents are quiet interesting. I will be waiting for your next post.
http://khalil-kothia.com/">SharePoint 2013 Online Training in Hyderabad
LikeLike
Great Article! Thanks for the nice collection of info…
http://sharepointtraininginhyderabad.in/">SharePoint 2013 Training Institutes in Hyderabad
LikeLike
Top Microsoft Support solutions for the most common issues experienced when using Microsoft SharePoint
LikeLike
Top Microsoft Support solutions for the most common issues experienced when using Microsoft SharePoint
LikeLike
Hi Steve,
I am facing an issue with user profile thumbnails on SharePoint Discussion list. I am not able to get the thumbnails for user image though it is available on user profile.
Also when i click over user pic getting an error i.e. The query string "ID" is missing or invalid.
I do check for the url and found that it is really missing on url and not sure from it is coming.
URL: _layouts/userdisp.aspx?ID=&Source
Source has valid information to it.
Please let me know if you or anyone else is having any idea on it.
Thanks,
Saurabh
LikeLike
This is a collection of the top Microsoft Support solutions for the most common issues experienced when
LikeLike
This is a collection of the top Microsoft Support solutions to the most common issues experienced using
LikeLike
@ Alber Yao:
issues after or during upgrade might be mostly the same or related to one of the above posts
About new Information: everything I have is posted here, linked or referenced to other Posts and finally even TechNet is updated about UPA config etc.
So basically almost all UPA issues on start Setup and/or configuration is handled in one of the mentioned posts, but If you still dont find your Problem described, then provide me some more Details or ask our MS Support Folks for Help.
there is a detailed Post on technet (technet.microsoft.com/…/jj839719.aspx) for the upgrade from 2010 to 2013. If you have followed it, you should be fine.
HtH, cheers,
Steve
LikeLike
Hi ,Steve
Actually this issue still confuse me after i upgrade my farm from SharePoint Server 2010 to SharePoint 2013, is there any new information about this issue. beg your reply!
LikeLike
HI Steve,
Sorry, I know I am posting this question in a quite wrong thread but its relevant to User Permissions.
I need to know that is there any solutions available or nay way from where I can do SharePoint User Management from a single from.
From where I can see which user have what rights to which library and list or to a specific documents as well.
If there is no such way by default, how can I achieve this solution by doing custom forms using visual studio ?
Thanks in advance.
Cheers,
Nabeel Ahmed
LikeLike
my frofile in facebook problem.i dont see anyting,can help me please?
LikeLike
Hi Steve,
in my sharePoint environment , I have SharePoit 2010 Enterprise version with SP1 + June CU + Aug CU
I'm also experiencing issues with the Memberships list not updating correctly in Mysite Tab. where user has access on site collection.
it there is specific criteria for membership in site collection . ii.e they should avaiable in defaut site group only Memebers or if user is avaialble in, Owner and visitors group then it should display that site in user's mysite ->Members Tab.
Please calrify and let me know if this issue has been resolve in above mentioned CU or not?
Thanks.
LikeLike
Hi Steve,
I have downloaded the Aug 2011 Cumulative package from Microsoft provided link but it does not unzip the hot fix properly and I can see lot of broken files. Kindly provide me link where I can download the proper hot fix.
Cheers,
Imran
LikeLike
Hi Steve,
I was trying to fix the membership problem for two weeks before I finally found your blog.
The problem occurs on two of my farms (one is a test farm) and both have the sp1 and August CU applied. It seems as if the Update which has been done after the memberships were out of sync did not delete the wrong entries from the groupwebs and membergroups tables (I lookt at the db of the test environment because I would never dare doing that in a production environment).
The only way to resolve the issue was to follow your workaround described at blogs.technet.com/…/3452083.aspx.
This workaround is not applicable on the production as we would loose all the tags an notes on the mysites.
Is there someting that has to be done to get the old entries deleted from the sql tables (I assume there are such in the production environment)
kind regards
Carsten
LikeLike
I agree – I read through and didn't see this fix being mentioned.
LikeLike
I read through the KBs for the August 2011 CU, and it sure doesn't appear to have been fixed yet.
LikeLike
I am running into this error and cannot find anything about how to fix it. Was thinking about deleting the UPS and then sync database and recreating. Any thoughts
Log Name: Application
Source: FIMSynchronizationService
Date: 7/7/2011 9:54:03 AM
Event ID: 6309
Task Category: Server
Level: Error
Keywords: Classic
User: N/A
Computer: US-IE-APP-SP-02.iceenterprise.com
Description:
The server encountered an unexpected error while performing an operation for a management agent.
"BAIL: MMS(4676): dnutils.cpp(1326): 0x800700b7 (Cannot create a file when that file already exists.): Cannot add partition to the list because it already exists at position 0
BAIL: MMS(4676): ldapmacore.cpp(842): 0x80070057 (The parameter is incorrect.): Object class inclusion list for partition #2 differs from previous partitions
BAIL: MMS(4676): ldapmacore.cpp(1782): 0x80070057 (The parameter is incorrect.)
BAIL: MMS(4676): cntrler.cpp(498): 0x80230808 (The management agent run was terminated as there were unspecified management agent errors.)
BAIL: MMS(4676): ma.cpp(3578): 0x80230808 (The management agent run was terminated as there were unspecified management agent errors.)
Forefront Identity Manager 4.0.2450.11"
Event Xml:
<Event xmlns="schemas.microsoft.com/…/event">
<System>
<Provider Name="FIMSynchronizationService" />
<EventID Qualifiers="49152">6309</EventID>
<Level>2</Level>
<Task>3</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2011-07-07T16:54:03.000000000Z" />
<EventRecordID>33029</EventRecordID>
<Channel>Application</Channel>
<Computer>US-IE-APP-SP-02.iceenterprise.com</Computer>
<Security />
</System>
<EventData>
<Data>BAIL: MMS(4676): dnutils.cpp(1326): 0x800700b7 (Cannot create a file when that file already exists.): Cannot add partition to the list because it already exists at position 0
BAIL: MMS(4676): ldapmacore.cpp(842): 0x80070057 (The parameter is incorrect.): Object class inclusion list for partition #2 differs from previous partitions
BAIL: MMS(4676): ldapmacore.cpp(1782): 0x80070057 (The parameter is incorrect.)
BAIL: MMS(4676): cntrler.cpp(498): 0x80230808 (The management agent run was terminated as there were unspecified management agent errors.)
BAIL: MMS(4676): ma.cpp(3578): 0x80230808 (The management agent run was terminated as there were unspecified management agent errors.)
Forefront Identity Manager 4.0.2450.11</Data>
</EventData>
</Event>
LikeLike
Now that SP1 and the June CU are out, any confirmation that the Membership issue was fixed? I can't seem to find anything in the list of fixes for either.
LikeLike
I got confirmation that this (Membership Issue Fix) will be released in the June 2011 CU and to apply this fix you must install SP1 and the June 2011 CU when released.
LikeLike
After a number of months of investigation and trying all kinds of different things to figure this out it appears it will be addressed with an official fix and they were shooting for the June 2011 CU but I have not been informed whether they will get this in that quickly. Also with SP1 getting announced recently to be released in late June it might have made it in that release. If I get confirmation I will update everyone here.
LikeLike
Hi Steve,
I sure wish I would have found this blog article a month ago – that is when I started a case with MS about this very thing. It took us a month of trying all kinds of things before the Support Engineer basically got back to me with what you stated in your latest status update.
For us, we did a database attach migration from MOSS 2007 enterprise to SP 2010 (fresh built with Aug 2010 CU), and also changed our teamsite web app URL in the process, which ended up being the killer. In MyMemberships, all the URLs are still pointing to the old web app. New memberships to sites created since the migration are showing up correctly, however.
One thing that did work (but with an unacceptable side effect) was to re-migrate the Shared Services db from our MOSS farm but only after we had detached the team site content db and performed a "stsadm -o sync deleteolddatabases 0" and "stsadm -o sysc -synctiming m:1" and waited 15 minutes for the MOSS 2007 MyMemberships to be deleted. The UPA then in 2010 was created again and the site memberships were refreshed correctly with new URLs. The downside to this method for us was that we lost all our social data – tags, notes, statuses, colleague updates, etc., an untenable situation since at this point we have been in our 2010 environment for a couple months.
I will be greatly interested to see if MS can fix this and quickly. My users are not happy with the inability to navigate to their sites from their MS Office open and save dialog boxes.
LikeLike
Hi Steve,
I'm also experiencing issues with the Memberships list not updating correctly. To confirm whether I'm experiencing the same issue, does this relate to sites not being removed from the Memberships list when a site is deleted?
Cheers,
Brendan
LikeLike
Thanks Steve – I actually just opened a case yesterday with MSFT on this. If I get any answers I will post a comment as well as it might help you out.
LikeLike
We are having issues with the Memberships tab on MySites in SharePoint 2010 not updating as referenced above. Is there a KB associated with this yet? I can't seem to find one. I made sure the timer jobs were running correctly and even did a full crawl as mentioned on other sites. Any help is appreciated.
LikeLike
@ainna grace:
I'm sorry, I dont understand whats your problem. If it is with facebook profile, this is the wrong posting for your purpose. I'm focusing here only for user profile issues with SharePoint 2010 on-premise hosting.
cheers, Steve
LikeLike
Hi Jerry,
the Memberships tab on MySites in SharePoint 2010 issue is currently still on investigation and no cause, fix or workaround yet! I'll publish it here asap once I can grab any valid information! I'm having a case running and escalation services are already involved.
by now, in some cases it works in some others not without an obvious pattern.
Please stay tuned and patient, I'll come up with news as soon as I can …
cheers, Steve
LikeLike
Hello Nabeel,
you may find your answeres on below link:
blog.falchionconsulting.com/…/discovering-who-has-access-to-sharepoint-2010-securable-objects
cheers, Steve
LikeLike
Hi folks,
regarding the Membership issue, the awaited fix is postponed to august 2011 cause they need more time to fix it correctly and thus it did not make it up into the June CU as expected.
Currently the only known workaround is as described in the comment from Eric Riehl Fri, Apr 22 2011 5:52 PM but with the caveat of losing the socila data (maybe you can reuse on recreastion of UPA the SOcial DB – have not tested this yet).
Some others obviously were trying to edit the entries inside the databases but I have no clue if this will bring the intended effects nor whjat side effects will arise afterwards regarding the sync stuff and anyway it's definitly NOT SUPPORTED!
So it seems that we still must wait until the FIX hopefully will be published, sorry for the bad news but that's it by now.
greets and cheers,
Steve
LikeLike
@santosh kanse:
Hi Santosh, sorry for the late response but I was captured by a lot of work đŸ˜‰
Regarding your question:
– Membership issue is still in a variety of "similar symptoms" on first view but is more complex and in depth as expected. Thus, the August CU just contains one single fix which doe not necessarily needs to apply to your problem!
– The first requirement for a working membership relation between the content DB and the shown on MySite membership tab is:
The user must be a member of the "site member" group that has by default the contribute permission level! (No custom created one!)
– The User profile quick sync … and …full sync timer jobs must be enabled and running (minutely/hourly)
So if this is all given, considering a new, fresh web app and site collection, this should work fine!
If there was before a database migration, detach/reattach or even stsadm …-deleteolddatabases … blabla done, then this might break the membership and cannot be resolved reverse !
So here is the only known workaround by recreating the web app/Site coll., adding the users to the "site member" group and wait at least 24h to be updated on the MySites.
But even then, the older orphans will still stay there as lingering objects and can only be removed with maybe a custom script or during a MS support case, where we can use a script which needs to be approved by product group explicitly.
Unfortunately I'm not so close at the moment as I'm working on beta project for SharePoint next version but it may be, that meanwhile any other cumulative update after august 2011 Cu has been released, that may fix the issue. Therefore, I would recommend to try out the lates available CU but still bear in mind: most likely it will not fix reverse! Thus, you may have no new issue on each new created sites but will still have the orphan's on the older sites remaining.
I know, that's not very convenient answer but that's AFAIK the current status.
Hope this gives you some more options to troubleshoot it and finally, if still no fix has been published, please open a MS Support case to make the product team aware of the wide spread issue and give it more pressure as we can only bother them with as much cases as we can raise.
Cheers, Steve
LikeLike
Hi Marc,
sorry for the delay, so from your error message I can see the version "Forefront Identity Manager 4.0.2450.11" is an older build. We have published inbetween the SP1 and June 2011 CU which yiu should install. Maybe this already will fix your problem. Please check herer for more info: blogs.technet.com/…/3433939.aspx and blogs.technet.com/…/3438100.aspx
Hth, cheers, Steve đŸ˜‰
LikeLike
Hey Guys, keep slowly!
firstly I'm not sure where you got that descriptions as the CU's just has been released since yesterday night (6th Sept.), so you might have some mistaken info on this!
2nd:
The mentioned fix regarding "not computed memberships" IS part of the august CU, KB 2553048. I checked it!
The case that certain fixes are not especially beeing mentioned in the KB articles is quiet common. We do not name all of the fixes contained in a certain package. Mostly we're just describing the top few recent fixes and all others such as postponed fixes will be just bypacked.
So now, if you get the august 2011 CU server packages, you will get as well the fix for the membership part.
If it does not directly work or fix any exisitng membership mappings, let me know this and I'll try to take care of it or at least may provide you some extra steps offline this post. Else, you can also open a service request at Microsoft support and we'll check then, if the fix has a regression or may not exactly and in all details match your problem.
Hopefully your confusions are cleared up now đŸ˜‰
greetz, Steve
LikeLike
Hello Brendan, Jerry,
regarding the not yet published post about the membership problem, here is the current statement and status:
1. membership as shown on the MySite – membership tab will not update or change if…
a) a database detach and reattach occured while eitehr server or web app is not the same as previously
b) when June CU 2010 has not been applied or web apps were created prior the June CU was installed
2. We're still on investigating the issue as it does not repro on demand nor is there a currently a straight pattern obviosuly seen, when updates to the mebership are done or not.
Current knowledge:
————————–
The issue should have been fixed with the June 2010 CU AND on web apps/sites that were created AFTER the CU was installed. In those circumstances, the membership update seems to work more or less proper.
The issue also occurs when DB's have been either migrated from a previous upgrade or from any other farm.
In this case, there will be a fix coming out, estimated for the April 2010 CU release but no promise.
As soon as I have detailed information and valid repro's I'll create a post and if possible, also giving the final resolution.
By now, it may help as a workaround but not always applicable, when you have the June 2010 CU or better the most recent CU installed (currently Feb.2011 CU) and Web apps created later than the June 2010 CU was installed. On those web apps, the mebership update will work as expected although it may take a while and will not always happen immediately!
See here for the download links: blogs.technet.com/…/build-numbers-cube-sheet-for-sharepoint-2010.aspx
HtH's so far and I'll let you know in-time, if any news are available.
cheers, Steev
LikeLike
Hi Carsten,
the august CU should actually should solve the issue even afterwards. Did you checked the behavior after 24 hours? Usually an internal sync job is running once per night and will then take care of clean-up the site membership entries, when the fix has been
applied.
If this is not the case, using my workaround from
blogs.technet.com/…/3452083.aspx should only "resetting the sync database" which then should start computing the membership properly.
This should not remove or delete your data! See also on TechNet, where this is described more in detail:
technet.microsoft.com/…/ff681014.aspx
Excerpt: "…By following these steps, you can safely reset a User Profile Synchronization database without losing information in the profile store."
Unless that, you still should test it prior applying on a productive environment and yes, always take a full backup before performing any actions at all against an productive environment!!
If after installing the august 11 CU, resetting the sync db and furthermore after some days later, the mebership still is not computed correctly, then please raise a service incident at Microsoft to support you with deeper investigations.
It may be, that your "symptom" does not got fixed due to not matching exactly the described issue and/or caused by something different or related to other dependencies.
Hope that helps,
cheers, Steve
LikeLike
Hi Jerry,
assuming you're talking about the membership problem, yes there is an onGoing Hotfix request and currently estimated for the June 2011 CU but as always: no promise! It might be as well, that it'll be coming up with the SP1 or with any next CU beyond June.
I cannot provide more information yet other to aks you for patience, sorry đŸ˜¦
cheers, Steve
LikeLike
HI Imran,
I have no info that the link actually would have been broken, thus I suggest to retry the download and unpacking. Maybe your pervios download attempt was corrupting the files somehow.
but you can als try this download links, I have posted earlier: blogs.technet.com/…/3451520.aspx
However, I would anyway go straight ahaed to the most recent update CU yet, which is currently the dec. 2011 CU and if you can wait, in about a few days, the feb. 2012 CU.
Hth,
cheers, Steve
LikeLike
Hello Saurabh Sachan, please go to this link and find the powershell cmdlets. Try to execute them as described and see if this fixes your problem đŸ˜‰
http://blogs.technet.com/b/steve_chen/archive/2010/09/20/user-profile-sync-sharepoint-2010.aspx#Profile Picture Property
kr, Steve
LikeLike
Hi,
I experienced the same issue in a SharePoint 2010 deployment.
I tried to search the fix without results.
Any news??
Thanks
LikeLike