Fim Synchronization service 2010 r2

hello,
I am running FIM Synchronization service with different management agents. sometimes thing goes wrong. how can i monitor those tasks? I want to use powershell for than because i have a lot of other hings that i monitor that way.
is it possible to "GET" the status and dates with some kind of FIM cmdlets? or maybe via event log?
third-party modules is no option.
I hope one of u guys can point me in the right direction.
Kind regards
Harm Schutte

Hi Harm,
In addition to the FIM Cmdlets the FIM Synchronization Service event log also contains log entries when the Management Agent runs have warnings/errors. You would though need to filter down to the find the specific entries that you are after.
If third party products/modules aren't an option you could also look at using a scheduled task that gets triggered based on particular events happening in the Sync Service log - I probably wouldn't recommend it though.
Andrew.

Similar Messages

FIM Synchronization Service Event ID 6050 , 6126

FIM Synchronization Service
Event ID 6050 , 6126
Version : SharePoint 2010 Sp1+ CU12 14.0.6129.5000
i have saw daily in my logs regarding User profile Service and FIM Errror . Daily 1 AM scheduled time for User Profile Incremental Running.
And also.
MsiInstaller Error 1015, 1001,1004,1015,1001,
The management agent "MOSSAD-Sync" failed on run profile "DS_FULLIMPORT" because of connectivity issues.
Additional Information
Discovery Errors       : "0"
Synchronization Errors : "0"
Metaverse Retry Errors : "0"
Export Errors          : "0"
Warnings               : "0"
User Action
View the management agent run history for details.
The management agent "MOSSAD- Sync" failed on run profile "DS_FULLIMPORT" because of connectivity issues.
Additional Information
Discovery Errors       : "0"
Synchronization Errors : "0"
Metaverse Retry Errors : "0"
Export Errors          : "0"
Warnings               : "0"
User Action
View the management agent run history for details.
The management agent "MOSSAD- Sync" failed on run profile "DS_FULLIMPORT" because of connectivity issues.
Additional Information
Discovery Errors       : "0"
Synchronization Errors : "0"
Metaverse Retry Errors : "0"
Export Errors          : "0"
Warnings               : "0"
User Action
View the management agent run history for details.
The management agent "MOSS-7ffc718e-5920-45ab-9cae-5c435e3769c0" completed run profile "MOSS_DELTAIMPORT_b23eb677-e1bd-4079-9feb-b769fd6ff90a" with a delta import or delta synchronization step type. The rules configuration has changed
since the last full import or full synchronization.
User Action
To ensure the updated rules are applied to all objects, a run with step type of full import and full synchronization should be completed.
Please suggest .
Deepesh Yevle - MCTS MCITP

Hi
Deepesh,
Please confirm that the Service Account you used to run the Forefront Identity Manager Synchronization Service(FIM Synchronization
Service) has the Active Directory Security Rights for “ Replicating Directory Changes”.
For more detailed information, see
http://themossblog.com/sharepoint-2010/sharepoint-2010-user-profile-synchronization-failing-event-id-6050
Best Regards.
Kelly Chen
TechNet Community Support

FIM Synchronization Service Manager Service Stopped infrequently

Hi All,
FIM Synchronization Service Manager Service Stopped infrequently, When run the Full Sync of the SQL Management Agent, the service stopped automatically.The issue occur randomly, there are instance when the Full Sync run successfully. Kindly advice
Thanks and Regards,
RajaVillage Sync

Please look in the Application Event log for more data. Post what you find here and the community will help out. Also tell us what version of FIM, what version of SQL is hosting FIM and what version of SQL your MA is talking to.
David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html

FIM Synchronization Service doesn't start

Hi,
Recently we have migreated FIM database from the local SQL server to an SQL 2012 Cluster. I used the following guide to configure DB related settings. Things worked fine.
http://social.technet.microsoft.com/wiki/contents/articles/5465.fimilm-how-to-move-the-backend-sql-server-synchronization-service-database.aspx
However after I uninstalled local SQL and rebooted the server FIM service doesn't start. The error message is:
The Forefront Identity Manager Sychronization Service depends the following service: MSSQLSERVER. This service might not be installed. (Event ID 7003).
How to fix this problem?
Thank you for your help.

I assume that you have uninstalled MS SQL Server, right? If so, please try the following:
Remove MSSQLServer from the DependOnService Value Name, a REG_MULTI_SZ data type
at HKLM\System\CurrentControlSet\Services\<ServiceKey>
Run as admin - it would remove dependency from FIMSynchronizationService.
Keep trying If you found my post helpful, please give it a Helpful vote. If it answered your question, remember to mark it as an Answer.

FIM Synchronization Service - How to provsion a group to another object type

Hi,
i'm new to fim and use just the fim2010 synchronization engine with some rules extensions.
I have 2 ActiveDirectories and want to Provision a Group(used as Distribution list) from ActiveDirectory A as a contact object in ActiveDirectory B with the SMTP address of the Group as the targetaddress of the contact.
Can you give me a hint how to accomplish that?
Should i use the ShouldProjectToMV() Method in the rulesextension from the AD Connector of Domain A and out the Group as a Special mvtype? How do i join (what anchor to use) the Group to Domain B if i also sync normal contact objects as well?
Thanks you for your help!

If you want to decide that object is deleted you need to implement your de-provisioning logic.
De-provisioning logic should be implemented in Provision method as well. You need there something like:
if(I_dont_have_contact_for_group)
Provison_new_one
} else
if(do_I_Have_email_on_my_group_in_mv)
No -> delete_contact_in_other_forest
Depends on the target agent scope, if you have there other object types than contacts, you may want to implement Deprovision() method in agent extension to decide that contact should be deleted but other type of objects not.
Tomek Onyszko, memberOf Predica FIM Team (http://www.predica.pl), IdAM knowledge provider @ http://blog.predica.pl

FIM EVENT ID 3 when starting User Profile Synchronization service

I am having issues getting the USP Sync Service to start correctly in our 2013 Farm.
We are using a named instance for this install and from what I have read, it looks like that is the issue.
In the ULS I find this error "ERROR ILMPostSetupConfiguration: ILM Configuration: Validating installation of SQL Service FAILED ."
The event log shows this error:
.Net SqlClient Data Provider: System.Data.SqlClient.SqlException: HostId is not registered
at Microsoft.ResourceManagement.Utilities.ExceptionManager.ThrowException(Exception exception)
at Microsoft.ResourceManagement.Data.Exception.DataAccessExceptionManager.ThrowException(SqlException innerException)
at Microsoft.ResourceManagement.Data.DataAccess.RetrieveWorkflowDataForHostActivator(Int16 hostId, Int16 pingIntervalSecs, Int32 activeHostedWorkflowDefinitionsSequenceNumber, Int16 workflowControlMessagesMaxPerMinute, Int16 requestRecoveryMaxPerMinute,
Int16 requestCleanupMaxPerMinute, Boolean runRequestRecoveryScan, Boolean& doPolicyApplicationDispatch, ReadOnlyCollection`1& activeHostedWorkflowDefinitions, ReadOnlyCollection`1& workflowControlMessages, List`1& requestsToRedispatch)
at Microsoft.ResourceManagement.Workflow.Hosting.HostActivator.RetrieveWorkflowDataForHostActivator()
at Microsoft.ResourceManagement.Workflow.Hosting.HostActivator.ActivateHosts(Object source, ElapsedEventArgs e)
The server was set up with a sql alias and we also added an alias for the server itself. Based on the below links, I did verify that the SQLInstance is empty in the registry.
I am at a loss on what to try next to get this working. As a side note, I just noticed the dev farm we have (which I didn't set up) does not have the UPS configured. I have seen references that state the only FIM 2010 SP1 works with SharePoint
2013 and am currently investigating updating the version on our server to SP1.
all help is appreciated!
Thanks,
Natalie
References:
https://translate.google.com/translate?sl=es&tl=en&js=y&prev=_t&hl=en&ie=UTF-8&u=http%3A%2F%2Fmsmvps.com%2Fblogs%2Fhaarongonzalez%2Farchive%2F2013%2F03%2F07%2Funa-raz-243-n-mas-por-la-cual-no-inicializa-la-aplicaci-243-n-de-servicio-de-perfiles-de-usuario-de-sharepoint-2010.aspx&edit-text=
http://sharepoint.licomputersource.com/2010/07/23/installing-and-configuring-user-profile-synchronization-service-in-sharepoint-2010-2/
NLewis

Have you tried restarting the server hosting the FIM instance?
http://blogs.msdn.com/b/akhawaja/archive/2010/03/24/forefront-identity-manager-hostid-is-not-registered.aspx
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

FIM Object Visualizer for Synchronization Service

Does this tool work if all we are running is the Synchronization Service? It appears that it looks for the FIM Portal:
$uri = "http://" + $args[0] + ":5725/resourcemanagementservice"
I need to be able to extract my IAF and EAF settings. There used to be a set of utilities for MIIS/ILM, but I can't find them on the web now and lost my copy of them when I migrated to FIM.
Thanks.
Ed Bell - Specialist, Network Services, Convergys

That might help except that none of the download links work:
"The Archive Gallery has been retired."
When did MS start getting so sloppy about this stuff? They use to have one of the best support sites in the business, but it is really falling apart...
I posted a comment (
Powershell MA (Microsoft) missing documentation) in July that the documentation for the PowerShell MA (http://social.technet.microsoft.com/wiki/contents/articles/23647.windows-powershell-connector-for-fim-2010-r2-sample-connector-collection.aspx)
was incomplete; it is like no one cares.
Ed Bell - Specialist, Network Services, Convergys

FIM Synchronization Repeat Contacts Exchange 2013 and 2010

Hey how are you?
actualemnte story with FIM
Synchronization 2010 R2
I have two organizations:
Oraganizacion 1:
Exchange 2013 S1
FIM Server
organization 2
Exchange 2010 Sp3
contacts organization number two
is possible to see them in organizavion
number one
the downside is trying to sincornizar
repeatedly contacts the organization towards each
organization's number two being
repeated and causes problems with users.
repeated contact:
contact.dominio.com
contact1.dominio.com
contact3.dominico.com
I can do ??

Hi Dominik,
thanks for pointing number 2 out :)
For my Problem on the Exchange:
I get the Event ID 12 in the Application log with:
The Forefront Identity Manager Service cannot connect to the Exchange Web Service.
In the FIM Log I find:
System.Web.Services: System.Net.WebException: The underlying connection was closed: An unexpected error occurred on a send. ---> System.IO.IOException: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote
host. ---> System.Net.Sockets.SocketException: An existing connection was forcibly closed by the remote host
This leads me to
http://social.technet.microsoft.com/Forums/en-US/7697048b-3cf1-48ce-a8eb-b5c51104c279/error-connecting-to-exchange-2010?forum=ilm2 . This guy seems to have the same error. But I don't know exactly what he changed in IIS. As a said, my Certificate chain
is OK.
Do you have some resource for me, where to start to get rid of this?
Thanks a lot,
Martin
www.sccmfaq.ch

How do I manually uninstall FIM Portal and Service 2010

I installed Forefront Identity Manager 2010 as follows:
Server 1: FIM Sync Service
Servers 2, 3: SharePoint Farm, FIM Portal and Service
I've had issues from the installation. When installing FIM Portal and Service on Server 2 it failed to recognize fim sync service on server 1. We had FIM service unavailable errors in most usage scenarios (even though asmx returned service description).
I was able to use RunAs different user to start browser as the service account used to install and run the FIM service, browse to the identity management site using
http://localhost and saw the fim portal. I was never able to see the portal using DNS address or server name from the server 2 or any other computer on the network, or using any other account (although I checked the option to
enable portal access for authenticated users).
I tried to uninstall - this went through all the steps but failed during apply and did a rollback. However, subsequent attempts to change, repair or uninstall all fail with message that the site was not found, please create it...
I would like to manually remove FIM Service and Portal and begin again. How do I manually remove FIM Service and Portal when uninstall fails?
Thanks,
David Saylor

Are you getting this error message while uninstalling FIM?
FIM Portal and Service is trying to find a site which is not there anymore. Just add the url which FIM was looking into the Central Administration >> Alternate Access Mappings
Save and exit out from Central Administration and try to uninstall now and it should work. It worked for me.
http://aryannava.com/2014/03/26/how-do-i-manually-uninstall-fim-portal-and-service-2010/
Aryan Nava | Twitter: @cloudtxt | Blog:
http://virtualizesharepoint.com
Please click "Propose As Answer" if a post solves your problem or "Vote As Helpful" if a post has been useful to you.
Disclaimer: This posting is provided "AS IS" with no warranties.
Aryan, you should convert your blog post into a Wiki article:
http://social.technet.microsoft.com/wiki/contents/articles/23330.technet-guru-contributions-for-march.aspx
Thanks!
Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it!

SQL Features for FIM Synchronization Server

Hi,
As we need to Install the FIM Synchronization server of FIM 2010 R2 SP-1 only. Could you please suggest if all the below sql server features are mandatory to install for FIM synchronization Server.
Database Engine Services
Full-Text Search
Analysis Services
Reporting Services
Business Intelligence Development Studio
Integration Services
Management Tools - Basic
Management Tools - Complete
Thanks
Harry

Hi Harry,
According to
this article, the SQL Server features that are required for a Sync Services installation are the Database Engine Services and (optionally) the Management Tools - Basic.
Cheers,
Tom Houston, UK Identity Management Practice

FIM Synchronization Server Migration

HI,
In our environment FIM Synchronization Server is used to synchronise the user attributes and creation of mailbox on exchnage server. 4 AD MA are configured to sync the configured to sync the user attributes and rule extension(.net source code) is used
to create a mailbox on exchnage server.
Existing infrastructure:FIM 2010 R2 SP-1 and OS is 2008 and database SQL Server 2008.
We are migrating the existing FIM environment to new plateform windows 2012 and database 2012.
There are two approach as below.Please confirm which will be better and any other points to be taken care.
Approach 1:
1. Create new service account and security groups before new installation.
2. Install the FIM Synchronization server using the new database sql 2012.
3. Export the schema from old FIM environment and import to new environment.
4 Export the all the MA from old environment and import in new environment.
5. Uncheck the deprovision option and check the precedence of attributes.
6. Move the rule extension dll files from old env to new env.
7. Change the service account used in the MA.
8. Run the full import of the 4 AD MA.
9. Run the Full sync of 4 AD MA.
10.RUN the export for 4 AD.
11.Once it works fine, schedule the task scheduler.
Approach 2:
1. Move the old FIM database to new sql server 2012.
2. Install the FIM Synchronization and select option reuse existing database.
3. Uncheck the deprovision option.
4. Move the rule extension dll files from old environment to new server.
5. Run the full import,sync and export profile.
However,I don't know the credentails of old MA, encryption key. So password of the service account can be reset directory on the AD and then reset the password in the configured MA.
Thanks
Harry

Thanks you so much for your response.
I found the encryption key. It was stored on the server.
Now, I can use the this encryption key during the installation of FIM Synchronization Server on the new platform using the new service account and 5 security groups.
Steps are as below.
1.Create new service account and security groups before new installation on AD.
2.Move the old FIM database to new sql server 2012.
3. Install the FIM Synchronization and select option reuse existing database,new service account and use the old encryption key which was taken during the installation time. .
4. Login the Sync console and uncheck the deprovision option.
5. Move the rule extension dll files from old environment to new server.
6. Run the full import,sync and export profile.
Thanks
Harry

User profile synchronization service wont start after SharePoint Service pack SP2

Hi
-Using SharePoint 2010 with 1 appserver and 2 frontend webservers on Service Pack2. (ms server 2008r2, SQLServer2008r2).
-Farmaccount has been set to local admin on all sp servers.
-Firstly, the User Profile Service Application runs fine and is started. Dont mix it with the User profile synchronization Service.
Prior to installing SP2 User profile service application and user profile synchronization service were running fine.
The first thing I did after the installation of SP2 was running the:
-psconfig -cmd upgrade -inplace b2b -wait
As SharePoint setup user (spadmin).
This ran fine on the 2 front end web servers.
However i got one fault on the Appserver:
I have also tried:
PSConfig.exe -cmd upgrade -inplace b2b -force -cmd applicationcontent -install -cmd installfeatures
which led to same resulting error.
So I tried to start the Use profile synchronization service as suggested manually by logging on with the Farmaccount, starting the user profile synchronization service through Central Administration. This led to Stuck on Starting status.
The windows services Forefront had status starting, then stopped.
One question:
Prior to starting the User profile synchronization service through Central Administration. What account and startup status should the 2 Forefront Windows Services have? (Automatic and local system?) or (Automatic and Farmaccount?) or (Disabled and Local
system?) or (Disabled and farmaccount?). Because i know that SharePoint UPA will provision these services though Central Administration. However what is the default state prior to starting the Synchronization service?
So i continue...
Since it was stuck on starting i stopped it with:
stop-SPServiceInstance -identity <upaSyncguid>
which gave me:
Stop-SPServiceInstance : An object of the type Microsoft.SharePoint.Administrat
ion.SPServiceInstanceJobDefinition named "job-service-instance-36bdf2ef-58f2-45
e5-8f78-ab75f646611a" already exists under the parent Microsoft.SharePoint.Admi
nistration.SPTimerService named "SPTimerV4". Rename your object or delete the
and i could fix with:
#Stop the stopping:
stsadm -o provisionservice -action stop -servicetype "Microsoft.Office.Server.Administration.ProfileSynchronizationService, Microsoft.Office.Server.UserProfiles,
Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" -servicename FIMSynchronizationService
I also removed the forefront certificate from personal - certificate store, as this is provisioned when user profile synchronization service is provisioned.
That set the Central Administration Status on the User profile synchronization Service to disabled. Fine.
Everytime i tried to start the user profile synchronization service (logged on as farmaccount), left it for 10-15 min and did iisreset and restart sharepoint timer service, and also tried rebooting the appserver. No change.
A thought, is it important to restart timer service and do iisreset on the two frontend servers after trying to start the user profile synchronization service on the appserver?
I'm getting to the point were i just want to delete the whole service application and set it up anew...
any tips will be greatly appreaciated.
brgs
Bjorn

You're very welcome, hope it helped, if not the I suggest you clear the configuration cache as follows.
The config cache is where config settings are stored locally on the Microsoft SharePoint server, so a SQL call isn’t required.
To clear the cache:
Stop the SP Timer service. To do this, follow these steps:
Click Start, point to Administrative Tools, and then click
Services.
Right-click SharePoint 2010 Timer, and then click Stop.
Close the Services console.
On the computer that is running Microsoft SharePoint Server 2010 and on which the Central Administration site is hosted, click
Start, click Run, type explorer, and then press ENTER.
In Windows Explorer, locate and then double-click the following folder:
%SystemDrive%\ProgramData\Microsoft\SharePoint\Config\GUID
Notes
The %SystemDrive% system variable specifies the letter of the drive on which Windows is installed. By default, Windows is installed on drive C.
The GUID placeholder specifies the GUID folder. There may be more than one of these.
The ProgramData folder may be hidden. To view the hidden folder, follow these steps:
On the Tools menu, click Folder Options.
Click the View tab.
In the Advanced settings list, click Show hidden files and folders under
Hidden files and folders, and then click OK.
You can also simply type this directly in the path if you do not want to show hidden files and folders.
Back up the Cache.ini file. (Make a copy of it. DO NOT DELETE THIS FILE, Only the XML files in the next step)
Delete all the XML configuration files in the GUID folder (DO NOTE DELETE THE FOLDER). Do this so that you can verify that the GUID folders content is replaced by new XML configuration files when the cache is rebuilt.
Note When you empty the configuration cache in the GUID folder, make sure that you
do NOT delete the GUID folder and the Cache.ini file that is located in the GUID folder.
Double-click the Cache.ini file.
On the Edit menu, click Select All.
On the Edit menu, click Delete.
Type 1, and then click Save on the
File menu. (Basically when you are done, the only text in the config.ini file should be the number 1)
On the File menu, click Exit.
Start the Timer service. To do this, follow these steps:
Click Start, point to Administrative Tools, and then click
Services.
Right-click SharePoint 2010 Timer, and then click Start.
Close the Services console.
Note The file system cache is re-created after you perform this procedure. Make sure that you perform this procedure on all servers in the server farm.
Make sure that the Cache.ini file in the GUID folder now contains its previous value. For example, make sure that the value of the Cache.ini file is not 1.
Check in the GUID folder to make sure that the xml files are repopulating. This may take a bit of time.
BRGS
Mishagri

FIM Web Service not starting

Hello,
Recently our FIM web service quit starting in our dev environment. I notice the change when the domain controllers were re-ip'd. When we try to start them manually we receive the following error.
"The Forefront Identity Manager Service service on Local Computer started and then stopped. Some services stop automatically if they are not in use by other services or programs."
I am baffled at this point as we did not reference the IPs of AD when we configured our dev-environment, so nothing should have changed. At this point I'm not really sure where to begin looking; would this be an issue with the SharePoint configuration,
access for the service account on the server, or something else. I have validated that the service account we are using is unlocked and it has the correct password. Unfortunately there is nothing in event viewer when the error is thrown.

I found that a config file was somehow renamed and had an extra .config at the end of it. After fixing the file name the service started up no problems. Path to config file below:
C:\Program Files\Microsoft Forefront Identity Manager\2010\Service\Microsoft.ResourceManagement.Service.exe.config

Error 25009 Install FIM Synchronization

Hello,
i try to install FIM Sync and i have a remote sql server but i have this error
Product: Forefront Identity Manager Synchronization Service -- Error 25009.The Forefront Identity Manager Synchronization Service setup wizard cannot configure the specified database. OLEDB Provider Information:
Description = 'Login failed. The login is from an untrusted domain and cannot be used with Windows authentication.'
Failure Code = 0x80004005
Minor Number = 18452
<hr=0x80230406>
Any idea ?
Thanks

Yes i tried with a domain account but nothing.
Actually the installation of FIM portal is OK but not FIM synchronization !!!
it's ok now, it was an error on permission configuration for fim service account
Hi,
I don't suppose you could please elaborate on which permission configuation error was encountered, and how it was resolved?
I'm running into the same issue while trying to install the FIM sync service component.
Thanks in advance!
Farrell

FIM Sync service keeps restarting after being disabled

Hi - We are deploying the SharePoint User Profile Store connector and I have followed all the steps here:
http://technet.microsoft.com/en-us/library/dn511003(v=ws.10).aspx
However the FIM Sync service keeps enabling and restarting itself - can't see anything in the event logs except a Evt ID: 2001 - Service was started successfully
What is starting this service? How can I stop so that it remains in the disabled state?
Thanks
J

Hi,
Based on your description, my understanding is that you want to disable the FIM Sync service, but FIM Sync service keeps restarting after being disabled.
I suggest you start the FIM Sync service again and stop it, then disable it.
You shouldn't need to start those services manually - SharePoint will do everything itself when you start the User Profile Sync service in Central Administration.
Restarted the User Profile Synchronization Service in Central Administration.(Central Administration -> System Settings -> Manage services on server -> User Profile Synchronization Service.)
Stop the FIM Sync service and then disable it.
Here are two links, you can use as a reference:
http://serverfault.com/questions/147738/not-able-to-start-forefront-identity-manager-service
Best Regards,
Lisa Chen
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

Fim Synchronization service 2010 r2

Similar Messages

Maybe you are looking for