Sharepoint 2013 - Active Directory Import User Profile Property manager fields

Hi there,
I juste encountered actually a little issue regarding the Active Directory Import User Profil.
Importation seems to work well but I have a little problem regarding the Manager field.
When I verify a user profil through the sharepoint admin page ("Manage user profil") , I can see the manager field is correctly populated, but if I want to check my profil as a user (personal information), the manager field is not visible.
With Sharepoint Admin and Manage Profil Properties, I haven't the possibility to modify some settings for the manager.
For example, Policy parameters is greyed.
The only way I found to show this field in a user profil is to give the permission "allow users to Edit values ...".... setting I don't want to set.
Have you already this sort of issue ?
Thanks for your help/idea.

Hi Michael,
I don't remember well what I did exactly regarding this issue because I played a lot with user profil.
I know I used this powershell script from Sheyia which in fact help me a lot to clean and create a good profil setting.
http://blogs.technet.com/b/sheyia/archive/2013/10/09/sharepoint-2013-another-way-to-change-order-for-user-profile-properties-via-powershell.aspx
For example, this script help me to resolve some double entries.
Let-me know if it help you (or not of course)

Similar Messages

Sharepoint 2013 Active Directory Import- Manager field not updating

Hi,
SharePoint 2013 Active directory import -Manager field not updating
Concern/Issue-
We are using SharePoint and configured the Active Directory Import .First import it seems everything is working fine and OOB Organization chart built using User profile data is coming out right.
Now the user is moved from one Organization Unit to Another.
Now our Manager field is not Updating .There is change in AD manager attribute but not reflecting in the SharePoint User profile.
Manger field is mapped to "manager" attribute in SharePoint.
We tried removing the user and Re-Import using Incremental import but no luck.
Thanks for help in advance
Sachin

Moving a user from one OU to another in AD won't normally change the Manager attribute in AD. You would need to edit the user's organization settings to change the manager value in AD. I've also seen these changes not be picked up unless something
other than just the manager field in AD changing. Try changing something like Office location and see if the manager change is picked up by AD Import.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Not able to import User Profile Property via BDC Connection

I want to fill some of the user profile properties via BDC Connection. I already have created more than 50 user profiles which I imported from AD. Now, in order to import profiles properties using BDC, I performed below steps:
a) Ensured Business Data Connectivity and Secure Store are running and used account has Full permission on these services.
b) Created an external content type using SharePoint Designer and created an external list to ensure that data is available:
Set email field as identifier, which is one of the columns in SQL table and is a primary key.
Created Read Item and Read List operations on above ECT.
c) Checked the presence of above ECT in BDC service and ensured it has all necessary permissions i.e. Edit, Execute etc.
d) Configure a new synchronization connection in User profile Service by selecting the same ECT. Here I chose to connect 1:1 mapping and picked up WorkEmail property to return items.
e) Mapped one of the custom property with one of the fields of SQL Server. Here, I ensured they both have same type.
f) Ran Full Synchronize after above steps. On checked, I do not find any data in the mapped properties.
Below are the traces of LOGS:
Profile sync step BusinessConnection (stage BusinessDataCatalogFullImport) finished successfully. 8ecffe9c-6d0a-e0e8-ec25-eb7a5f1c1215
04/21/2015 12:37:00.68 OWSTIMER.EXE (0x337C)                   0x02DC SharePoint Portal Server      User Profiles
ac4iu Medium Profile sync step BusinessConnection (stage BusinessDataCatalogFullSync) started execution.
04/21/2015 12:37:00.68 OWSTIMER.EXE (0x337C)                   0x4CCC SharePoint Foundation         Topology
8xqz Medium Updating SPPersistedObject UserProfileImportJob Name=UserProfileServiceApplication_ProfileImportJob. Version: 2294209 Ensure: False, HashCode: 36728399, Id: 4f037df6-d339-4b5a-8892-ef3699c16b20, Stack:    at
Microsoft.SharePoint.Administration.SPJobDefinition.Update()     at Microsoft.Office.Server.UserProfiles.UserProfileImportJob.SaveStatus()     at Microsoft.Office.Server.UserProfiles.UserProfileImportJob.Execute()
at Microsoft.Office.Server.Administration.UserProfileApplicationJob.Execute(SPJobState jobState)     at Microsoft.SharePoint.Administration.SPTimerJobInvokeInternal.Invoke(SPJobDefinition jd, Guid targetInstanceId, Boolean isTimerService,
Int32& result)     at Microsoft.SharePoint.Administration.SPTimerJobInvoke.Invoke(TimerJobExecuteData& data, Int32& result) 8ecffe9c-6d0a-e0e8-ec25-eb7a5f1c1215
04/21/2015 12:37:01.70 OWSTIMER.EXE (0x337C)                   0x4CCC SharePoint Portal Server      User Profiles
ac4iq Medium Profile sync step BusinessConnection (stage BusinessDataCatalogFullSync) finished successfully. 8ecffe9c-6d0a-e0e8-ec25-eb7a5f1c1215
04/21/2015 12:37:01.70 OWSTIMER.EXE (0x337C)                   0x4CCC SharePoint Foundation         Topology
8xqz Medium Updating SPPersistedObject UserProfileImportJob Name=UserProfileServiceApplication_ProfileImportJob. Version: 2294211 Ensure: False, HashCode: 36728399, Id: 4f037df6-d339-4b5a-8892-ef3699c16b20, Stack:    at
Microsoft.SharePoint.Administration.SPJobDefinition.Update()     at Microsoft.Office.Server.UserProfiles.UserProfileImportJob.SaveStatus()     at Microsoft.Office.Server.UserProfiles.UserProfileImportJob.Execute()
at Microsoft.Office.Server.Administration.UserProfileApplicationJob.Execute(SPJobState jobState)     at Microsoft.SharePoint.Administration.SPTimerJobInvokeInternal.Invoke(SPJobDefinition jd, Guid targetInstanceId, Boolean isTimerService,
Int32& result)     at Microsoft.SharePoint.Administration.SPTimerJobInvoke.Invoke(TimerJobExecuteData& data, Int32& result) 8ecffe9c-6d0a-e0e8-ec25-eb7a5f1c1215
04/21/2015 12:37:02.53 OWSTIMER.EXE (0x337C)                   0x319C SharePoint Foundation         Monitoring
nasq Medium Entering monitored scope (Timer Job job-upgrade-sites). Parent No 9f354308-7b18-40f3-80d6-c7d0616cd9e5
04/21/2015 12:37:02.53 OWSTIMER.EXE (0x337C)                   0x319C SharePoint Foundation         Logging
Correlation Data      xmnv Medium Name=Timer Job job-upgrade-sites a0cffe9c-7d80-e0e8-ec25-e024bd692f28
04/21/2015 12:37:02.67 OWSTIMER.EXE (0x337C)                   0x319C SharePoint Foundation         Monitoring
b4ly Medium Leaving Monitored Scope (Timer Job job-upgrade-sites). Execution Time=136.402252241556 a0cffe9c-7d80-e0e8-ec25-e024bd692f28
04/21/2015 12:37:04.94 w3wp.exe (0x4440)                       0x4070 SharePoint Portal Server      Runtime
8gp7 Medium Topology cache updated. (AppDomain: /LM/W3SVC/1712947452/ROOT-1-130740700225995467)
04/21/2015 12:37:05.00 OWSTIMER.EXE (0x337C)                   0x1FA0 SharePoint Foundation         Monitoring
aeh57 Medium Sql Ring buffer status eventsPerSec = ,processingTime=0,totalEventsProcessed=0,eventCount=0,droppedCount=0,memoryUsed=0
04/21/2015 12:37:05.52 w3wp.exe (0x4440)                       0x3DD8 SharePoint Foundation
Topology                      e5mc Medium WcfSendRequest: RemoteAddress: 'http://172.20.21.163:32843/af95f58c149b4b61b13c0d0250479beb/MetadataWebService.svc'
Channel: 'Microsoft.SharePoint.Taxonomy.IMetadataWebServiceApplication' Action: 'http://schemas.microsoft.com/sharepoint/taxonomy/soap/IDataAccessReadOnly/GetChanges2' MessageId: 'urn:uuid:324f52f2-8c3a-49e3-9d2c-6119776db97b' 08d6992a-9413-4d09-b8f9-bcfb08266cc7
04/21/2015 12:37:05.52 w3wp.exe (0x4848)                       0x3D98 SharePoint Foundation
Monitoring                    nasq Medium Entering monitored scope (ExecuteWcfServerOperation). Parent No
04/21/2015 12:37:05.52 w3wp.exe (0x4848)                       0x3D98 SharePoint Foundation
Topology                      e5mb Medium WcfReceiveRequest: LocalAddress: 'http://ispantest.domainname.local:32843/af95f58c149b4b61b13c0d0250479beb/MetadataWebService.svc'
Channel: 'System.ServiceModel.Channels.ServiceChannel' Action: 'http://schemas.microsoft.com/sharepoint/taxonomy/soap/IDataAccessReadOnly/GetChanges2' MessageId: 'urn:uuid:324f52f2-8c3a-49e3-9d2c-6119776db97b' 08d6992a-9413-4d09-b8f9-bcfb08266cc7
04/21/2015 12:37:05.52 w3wp.exe (0x4848)                       0x3D98 SharePoint Server
Taxonomy                      fuc5 Medium MetadataWebServiceApplication.GetChanges called on 'Managed Metadata Service' starting. 08d6992a-9413-4d09-b8f9-bcfb08266cc7
04/21/2015 12:37:05.53 w3wp.exe (0x4848)                       0x3D98 SharePoint Server
Taxonomy                      fuc6 Medium MetadataWebServiceApplication.GetChanges called on 'Managed Metadata Service' completed. 08d6992a-9413-4d09-b8f9-bcfb08266cc7
04/21/2015 12:37:05.53 w3wp.exe (0x4848)                       0x3D98 SharePoint Foundation
Monitoring                    b4ly Medium Leaving Monitored Scope (ExecuteWcfServerOperation). Execution Time=2.03964470344695 08d6992a-9413-4d09-b8f9-bcfb08266cc7
04/21/2015 12:37:05.53 w3wp.exe (0x4440)                       0x3DD8 SharePoint Foundation
General                       aipzw High    An exception occurred while writing a service call usage
entry. Exception details: System.ObjectDisposedException: Safe handle has been closed     at
System.Runtime.InteropServices.SafeHandle.DangerousAddRef(Boolean& success)     at Microsoft.Win32.Win32Native.GetTokenInformation(SafeTokenHandle TokenHandle, UInt32 TokenInformationClass, SafeLocalAllocHandle TokenInformation,
UInt32 TokenInformationLength, UInt32& ReturnLength)     at System.Security.Principal.WindowsIdentity.GetTokenInformation(SafeTokenHandle tokenHandle, TokenInformationClass tokenInformationClass)     at System.Security.Principal.WindowsIdentity.get_User()
at System.Security.Principal.WindowsIdentity.GetName()     at System.Security.Principal.WindowsIdentity.get_Name()     at Microsoft.SharePoint.Utilities.SPUtili... 08d6992a-9413-4d09-b8f9-bcfb08266cc7

Thanks for the very clear answer back. You're a star. Much appreciated and better to know where you stand directly. Have called the helpdesk and are willing to solve and take this one back in, although it will hurt. The macBook Pro continues to be out of reach economically, so it would need to be the white macBook...
Just wanted to check some last items before making final decisions as I am checking an alternative workaround
- my camcorder supports recording on memory stick which can then be read into iMovie without problem. Any idea if memory stick is lower in resolution as normal DV tape recording? If this is comparable I can choose to from now on switch to memory stick. When I record on the stick it is then recognised as MOV.
- is there any other (non apple made) OSX software on the market to facilitate only the USB driven capturing? Hence did any other SW supplier plug this hole? The old windows pc has proven that the camera streams images via the USB port (hence don't at all understand why iMovie cannot just support capturing via USB streaming...!!!!) and I understand it is more that iMovie doesn't support capturing images via USB, but does anybody else at least for the capturing bit?
- You read about Firewire - USB adapters/hubs/convertors. It is however never clear if it would solve this issue. Dead-end street or an option?
- I can capture my archive of old tapes on my old PC and then put them into my Mac. However the capturing SW makes one large file of it and no event is split. Any idea if on import iMovie could automatically split this into different events (based on date or start/stop?)
- final question: does iMovie when capturing video from tapebased camcorder automatically split events based on date or start/stop? Would be silly to make switch and then still find out I need to manually make the cuts.
Very grateful for your support. Just a couple of days left to make final decision...

ADFS- SharePoint 2013 ( Active Directory federation Services)

Can you please brief me in what scenarios we go for ADFS in SharePoint 2013.
We have external users for them we create accounts in our AD and then provide access to SP. I am not sure if external users directory is LDAP or Windows AD. Please explain in detail if ADFS can be leveraged in this scenario to provide access to external
users to our internal domain SharePoint site. Or in other words in which scenario ADFS will come into picture.
Most of the blogs talks about how to configure ADFS but not explained in what scenario and why it has been implemented.
Thanks, Ram Ch

Hi
You can use AD FS with the Windows Server 2012, Windows Server 2008, or Windows Server 2008 R2 operating systems to build a federated identity management solution that extends distributed identification,
authentication, and authorization services to web-based applications across organization and platform boundaries. By deploying AD FS, you can extend your organization’s existing identity management capabilities to the Internet.
AD FS 2.0 enables identity federation, extending the notion of above centralized authentication, authorization, and single sign-on to Web applications and services located virtually anywhere.
As previously introduced, identity federation relies on standards-based protocols to establish federation trusts between claims providers and relying parties, facilitating secure access to Web
applications and services across security boundaries.
For an organization, AD FS 2.0 provides corporate users with a rich federated experience and seamless access to resources located:
- Inside the corporate intranet;
- Outside the corporate network in a corporate perimeter network, extranet and/or in the Cloud, for example in the Microsoft Windows Azure platform, the Microsoft’s Platform as a Service (PaaS)
offering;
- At the perimeter networks of partner organizations that have made resources available to the considered organization’s users;
- In the Cloud with Software as a Service (SaaS) vendors that support federated identity
More Information:
http://blogs.technet.com/b/abizerh/archive/2013/04/11/more-information-about-sso-experience-when-authenticating-via-adfs.aspx
Please follow below mentioned article to configure ADFS for your scenario:
https://samlman.wordpress.com/2015/02/28/configuring-sharepoint-2010-and-adfs-v2-end-to-end/

SharePoint 2013 Active Directory Groups represented as c:0+.w| SID in UserInformation list instead of c:0+.w|Domain\Groupname

Hi
We are running on SharePoint Server 2013.When we add AD groups as permissions, we see that the group name is being displayed properly in the permissions. Whereas when I click on the groupname I see the SID with the Sharepoint specific claims characters,
instead of domain\groupname. I understand that the claims characters are because of claims mode. But I expected domain\groupname instead of SID. Is this the right behaviour.
When I call SiteData.GetContent web service, I get the SID of the group name instead of the domain\groupname.
Can someone please clarify?
Thanks
Naga

Hi,
Yes, the identity claim for an AD group is based on the SID of the group. The claim encoding for an Active Directory group consists of the following sections:
c:0+.w|<SID>
•"c" for a claim other than identity
•"+" for a group SID
•"." for a string
•"w" for a Windows claim
More information:
http://www.sharepointfire.com/MyBlog/2013/11/get-ad-group-identity-claim-in-sharepoint-2013/
Thanks,
Dennis Guo
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
Dennis Guo
TechNet Community Support

Sharepoint 2013 ADFS Integration duplicates User Profiles for each Authentication Type

Hello everyone
i am building up a sharepoint farm which is hosting some of our corporate web sites. before integration Adfs and using SAML-Based Authentication every user had a single User Profile and were happy.
when i integrated adfs 3.0 and sharepoint 2013 SP1 i found whoun a user logs into sharepoint by using trusted identity token issuer (adfs 3.0) they get redirected to a new profile which is totally different from their old Profile. what is the problem ?

The problem is that SharePoint does not support Multilogon accounts. I asked for that here -
http://sharepoint.uservoice.com/forums/282887-customer-feedback-for-sharepoint-server/suggestions/7085002-multilogon-accounts
If you're just moving to ADFS only, then you can migrate users with Convert-SPWebApplication -
https://technet.microsoft.com/en-us/library/jj219696(v=office.15).aspx or with a script provided here:
http://blogs.msdn.com/b/sambetts/archive/2014/09/03/how-to-migrate-sharepoint-users-to-adfs.aspx (uses Move-SPUser).

Problem active directory importing users at ix4-300d sw ver 4.1.108.32627

Installed new ix4-300d onto network, added to SBS 2008 domain and can log into NAS with domain\administrator account . In users & groups can see domain\administrator account along with local admin account. Click on sync with AD, no errors, but never get any users in the list
Whats the problem ? I need to get users from AD imported to get shares working.
Please help as customer is not happy.
regards
Peter

Hello blue256
If you entered a Organisational Unit in the Domain Management page, please try clearing the OU field and try re-adding the unit to the domain.
After that is done, please try checking if the domain user and groups are accessible from User and Groups page.
LenovoEMC Contact Information is region specific. Please select the correct link then access the Contact Us at the top right:
US and Canada: https://lenovo-na-en.custhelp.com/
Latin America and Mexico: https://lenovo-la-es.custhelp.com/
EU: https://lenovo-eu-en.custhelp.com/
India/Asia Pacific: https://lenovo-ap-en.custhelp.com/
http://support.lenovoemc.com/

SharePoint 2013 profile service account requirements when using "Use SharePoint Active Directory Import" option

Hi All,
I am trying to configure SharePoint Profile service. We would like a straightforward profile import from Active Directory.
On the "Configure Synchronization Settings" page, we have chosen the option "Use SharePoint Active Directory Import" option.
We have created a connection to the Active Directory using Configure Synchronization Connections page. We have specified the account that would be used for the import process.
Question:
I would like to confirm whether the account configured for the profile import need any special privileges when using "Use SharePoint Active Directory Import" option ?
Thanks,
Saurabh

Grant Replicate Directory Changes permission on a domain
To do this please follows below procedure
On the domain controller, click Start, click Administrative Tools, and then click Active Directory Users and Computers.
In Active Directory Users and Computers, right-click the domain, and then click Delegate Control.
On the first page of the Delegation of Control Wizard, click Next.
On the Users or Groups page, click Add.
Type the name of the synchronization account, and then click OK.
Click Next.
On the Tasks to Delegate page, select Create a custom task to delegate, and then click Next.
On the Active Directory Object Type page, select This folder, existing objects in this folder, and creation of new objects in this folder, and then clickNext.
On the Permissions page, in the Permissions box, select Replicating Directory Changes (select Replicate Directory Changes on
Windows Server 2003), and then click Next.
Click Finish.
Thanks & Regards
ShivaPrasad Pola
SharePoint Developer

Issue in mapping custom user profile property with AD field in SharePoint 2013

Hello,
I am trying to map a custom user profile property i created "ADSecurityGroups", type - String, Multivalue with the AD propoerty named "memberOf" via powershell.
UserProfile Service is up and running, and so is the Synchronization Service. User executing the powershell has full control on the User Profile Service and is the farm administrator.
Following is the code snippet i grabbed from the internet which i am trying to execute.
Add-PSSnapin Microsoft.SharePoint.Powershell -ErrorAction "SilentlyContinue"
$url = "http://<servername:port>/" #URL of any site collection that is associated to the user profile service application.
$spsProperty = "ADSecurityGroups" #Internal name of the SharePoint user profile property
$fimProperty = "memberOf" #Name of the attribute in FIM/LDAP source
$connectionName = "UserProfileSyncConnection" #Name of the SharePoint synchronization connection
$site = Get-SPSite $url
if ($site)
Write-Host "Successfully obtained site reference!"
else
Write-Host "Failed to obtain site reference"
$serviceContext = Get-SPServiceContext($site)
if ($serviceContext)
Write-Host "Successfully obtained service context!"
else
Write-Host "Failed to obtain service context"
$upManager = new-object Microsoft.Office.Server.UserProfiles.UserProfileConfigManager($serviceContext)
if ($upManager)
Write-Host "Successfully obtained user profile manager!"
else
Write-Host "Failed to obtain user profile manager"
$synchConnection = $upManager.ConnectionManager[$connectionName]
if ($synchConnection)
Write-Host "Successfully obtained synchronization connection!"
else
Write-Host "Failed to obtain user synchronization connection!"
Write-Host "Adding the attribute mapping..."
$synchConnection.PropertyMapping.AddNewMapping([Microsoft.Office.Server.UserProfiles.ProfileType]::User, $spsProperty, $fimProperty)
Write-Host "Done!"
The script is failing with the following error -
new-object : Exception calling ".ctor" with "1" argument(s): "UserProfileApplicationNotAvailableException_Logging ::
UserProfileApplicationProxy.ApplicationProperties ProfilePropertyCache does not have 2f9bece3-f39a-498d-874f-145b1470e49c"
At E:\ADSync.ps1:29 char:14
+ $upManager = new-object Microsoft.Office.Server.UserProfiles.UserProfileConfigMa ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [New-Object], MethodInvocationException
+ FullyQualifiedErrorId : ConstructorInvokedThrowException,Microsoft.PowerShell.Commands.NewObjectCommand
Please let me know if i am missing anything.
Also advise if this is the correct way to map user profile attribute in SP 2013 ?
Thanks -
Girish

ok no worry,
try to run the below as it is, i m just copying code from your post.
Add-PSSnapin Microsoft.Sharepoint.Powershell
[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.Office.Server")
[System.Reflection.Assembly]::LoadWithPartialName("Microsoft.Office.Server.UserProfiles")
#Function to get servicecontextfunction Get-SPServiceContext([Microsoft.SharePoint.Administration.SPServiceApplication]
$profileApp)
$profileApp = @(Get-SPServiceApplication | ?
{$_.TypeName -eq "MR_DEV_UserProfileServiceApplication"})[0]
return [Microsoft.SharePoint.SPServiceContext]::GetContext
($profileApp.ServiceApplicationProxyGroup,
[Microsoft.SharePoint.SPSiteSubscriptionIdentifier]::Default)
$url = "http://sp-appdev:2013" #URL of any site collection that is associated to the user profile service application.
$spsProperty = "RoomNumber" #Internal name of the SharePoint user profile property
$fimProperty = "extensionAttribute2" #Name of the attribute in FIM/LDAP source
$connectionName = "LDAP Sync" #Name of the SharePoint synchronization connection
#Get UserProfileManager
$serviceContext = Get-SPServiceContext
if ($serviceContext)
{Write-Host "Successfully obtained service context!"}
else
{Write-Host "Failed to obtain service context"}
$upManager = new-object Microsoft.Office.Server.UserProfiles.UserProfileConfigManager($serviceContext)
if ($upManager)
{Write-Host "Successfully obtained user profile manager!"}
else
{Write-Host "Failed to obtain user profile manager"}
$synchConnection = $upManager.ConnectionManager[$connectionName]
if ($synchConnection)
{Write-Host "Successfully obtained synchronization connection!"}
else
{Write-Host "Failed to obtain user synchronization connection!"}
Write-Host "Adding the attribute mapping..."
$synchConnection.PropertyMapping.AddNewMapping([Microsoft.Office.Server.UserProfiles.ProfileType]::User, $spsProperty, $fimProperty)
Write-Host "Done!"
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

How to import user profiles from external sources(other than AD) into SharePoint

Hi,
I want to import user profiles from external sources other than AD.
Badri

You have to use BCS for importing the profiles,
Check the following link with explanations
http://msdn.microsoft.com/en-us/magazine/ee819133.aspx
Please Mark it as answer if this reply helps you in resolving the issue,It will help other users facing similar problem

Hide/remove "memberof" data in hover preview sharepoint 2013 simple directory

I have a simple people directory set up all is working fine as described here: http://www.sharepointconfig.com/2013/05/how-to-create-a-simple-sharepoint-2013-people-directory/
i would like to remove the hover window to the right or the Member Of info:
the data seems to pull from the "MemberOf" attribute" located in Manage User Properties as well as in Manage Policies. The policy setting for this field is grayed out and disabled. It is the only attribute set to disabled by default and cannot
figure out how to change this.

Hi ian,
Could you provide more information about how to set up a simple directory?
Where is "memberof" data?
Whether you set up a simple people directory, and search people in SharePoint serach center, then you want to customize the hover panel of a poeple.
Please provide a screenshot about this issue, it will make others easy to find a solution for your issue.
There are some articles about how to customize hover panel in search center, please check if they are useful for you:
http://blogs.technet.com/b/tothesharepoint/archive/2013/09/17/how-to-display-values-from-custom-managed-properties-in-the-hover-panel-in-sharepoint-server-2013.aspx
http://www.sharepointnutsandbolts.com/2014/01/extending-SP2013-Office-365-search-hover-panel.html
http://sharepoint.stackexchange.com/questions/95243/modify-the-hover-panel-on-the-search-page
Best Regards,
Wendy
Wendy Li
TechNet Community Support

Edit User profile Property - grayed out buttons

I am trying to change the mapping for the Work email property in the User Profile but when I edit the property on the "Edit User Profile Property" page, the Property Mapping for Synchronization's "Remove" button is grayed out as well
as Add New mappings "Add" button. I am logged on with the Farm account which has admin rights to the UP.
ITGirl

Hi ,
For the Add New Mapping's "Add" button grayed out, when I change to another/second "Synchronization Connection" from "Source Data Connection" dropdown, then "Add" button will be available.
For the Property Mapping for Synchronization's "Remove" button grayed out,
please make sure your Farm account or user account has the following permissions, then check results again.
http://technet.microsoft.com/en-us/library/ee721049(v=office.15).aspx#MapUserProc
The user account that performs this procedure is a farm administrator or an administrator of the User Profile service application.
The user account that performs this procedure is a member of the Administrators group on the computer that is running SharePoint Server.
Thanks
Daniel Yang
TechNet Community Support

How to modify the length of a user profile property

I need to increase the length of a custom user profile property, but the length looks disabled when I try to edit and modify. Is there any way i could modify this by powershell or some other work around where I can increase the lenght of the script?

You can't increase or decrease the size of one of the properties after they have been created. You'll need to create a new property and programmatically copy the values from the other property to the new one. Once that is done you can
delete the old property.
Paul Stork SharePoint Server MVP
Principal Architect: Blue Chip Consulting Group
Blog: http://dontpapanic.com/blog
Twitter: Follow @pstork
Please remember to mark your question as "answered" if this solves your problem.

Active Directory Permissions to Profile Manager

Hopefully this will help anyone else who runs into this trouble.
OSX 10.9
Server App 3.0.1
We have a profile manager server setup using our Active Directory. After initial setup the system was working fine and all users could access the services.
In attempting to adjust the web service the permissions for service was turned on and domain users could no longer log in to enroll devices.
To resolve this issue I worked through the following steps.
In Server App > Groups found Domain Users (The group containing all users in the domain)
Clicked the Gear and choose Edit Access to Service
Checked off Profile Manager.
I then added Domain Users to the Local Workgroup and allowed the same access to services. This could be done with a different group if needed.
It may work at this point but as an additional step you can install the Workgroup manager tool from Apples Download site. http://support.apple.com/kb/DL1698
Log int to your Local Directory, I used /LDAPv3/127.0.0.1
Find the group you added the permissions to in the local domain and add your Active Directory Domain Users to that group.
Hope this saves someone else the annoyances I went through.

So after a little more trouble shooting as well I ended up using ths post after a backup of the database.
To backup the database I use this Post - https://discussions.apple.com/thread/3791994
pg_dump -U _devicemgr -h /Library/Server/ProfileManager/Config/var/PostgreSQL/ -c device_management > $HOME/device_management.sql
And resetting the server app and database.
https://discussions.apple.com/message/23925691?tstart=15#23925691?tstart=15
Interstingly this pulled my old database info back in and restored some settings that had been lost. I'm not really sure why and wouldn't trust it to happen again.
My issue is now that AD users have to log in twice. The first time they get a denyed error. Then they log out and login on the same browser or a differnt computer al together and they can get in.

Set default value for a custom user profile property

Hello,
I have a custom user profile property of type boolean. How can I by default set the value to true? OOB the checkbox remains unchecked.
Any help on this would be appreciated.
Thanks,
Neha

Hi,
It is not possible out of the box. You can try to create a custom user profile propery programmatically, this article can help you to get started:http://msdn.microsoft.com/en-us/library/ms519896.aspx
Xue-Mei Chang

Sharepoint 2013 - Active Directory Import User Profile Property manager fields

Similar Messages

Maybe you are looking for