Project site security best practise - project server 2010

I have following requirement
environment:
project server 2010
project sites created out of project site templates. So they follow project server security model.
requirement:
the are users who do not needs to see any thing except the content on project site. The user does not need to access project \pwa
Question:
what is the best approach
create sharepoint based groups for the projectsite?
Create project server based group?

pgshah570,
If you are using the automatic synchronization for project site permissions, then the permissions are granted based on the following rules:
Project managers who have published a project or who have Save Project permissions on a project are added to the Project Managers (Microsoft Project Server) site group.
Team members with assignments in a project are added to the Team members (Microsoft Project Server) site group.
Other Project Server users who have View Project Site permission on a project are added to the Readers (Microsoft Project Server) site group.
If you are NOT using the automatic synchronization, then project sites are like any other SharePoint Sites, and you can use SharePoint groups or AD groups. I recommend using AD groups to grant permissions. The Project Server Security groups in this scenario
do not have any impact on Project Site permissions.
Cheers,
Prasanna Adavi, Project MVP
Blog:
Podcast:
Twitter:
LinkedIn:

Similar Messages

Project Server 2010: PWA Removing Default Project Site Security Groups When Creating a New Project

I looked for this specific issue with Project Server 2010/PWA/SharePoint and could not find an exact answer... hopefully someone can help.
We are currently using Project Server 2010 and have a number of project site templates that are used dependent upon the enterprise project type selected. Each of these project site templates have unique permissions which should create the default security
groups on the project site upon publishing/syncing:
<Project Name> Members
<Project Name> Owners
<Project Name> Visitors
<Project Name> Project Managers (Project Web App Synchronized)
<Project Name> Team Members (Project Web App Synchronized)
Web Administrators (Project Web App Synchronized)
Whether a user creates a project through PWA or Project Pro 2010 and imports the project into PWA, we get a weird result in the Site Permissions of the newly created project site. PWA will remove all default security groups from the project site template
and add a whole list of users in the Site Permissions list without groups.
Once the project is published and the project site is created, we can then go back and add those default security groups back in the project Site Permissions and even add a couple of custom groups without them being removed on all subsequent project syncs
or publishing.
How do we get PWA to not overwrite the project site templates' security groups and place each user in the proper default security groups? At the same time, how is PWA adding a number of users into the Project Site Permissions?
Thanks in advance.

Paul,
Thanks for that information. Right now we are using the Test environment to turn the Auto-sync feature back on. I suspect that the reason this is happening is due to PWA groups/categories/security templates. There may be more than one PWA group that is "overwriting"
the default project site groups upon initial creation of the project. We will look further into the security settings to tighten up the policies.

Unable to Open Project Site Access Denied Issue (Project Manager)

Hi
We got an issue that one project manager is having 12 projects, in that she can able to view 5 projects-- project sites but remaining 7 projects --- she is not able to open the project site (access denied) error is throwing when she try to open.
She is the project manager of the 12 projects and having project manager permissions on the project sites.
Please suggest any solution for this.
Geeth If you feel that the answer which i gave you is Helpful please select it as Answer/helpful.

I believe I've found the fix for this issue. After opening a ticket with MS support and not getting anywhere with this issue I decided to do an in-depth review of all the Project and SharePoint 2013 CU's starting with December 2013 to September 2014.
To my amazement buried inside the July 2014 CU was a hotfix for this issue described almost word for word. (I will list all the relevant KB's at the end) I contacted my support engineer inquiring about this hotfix and he stated it wasn't relevant because
the "Synchronize Project Web App permissions to Project Site" was not failing or even generating any warnings in our Prod or Test environments. I stated that is not always an indicator as ULS doesn't always catch all relevant errors.
I informed him that I also found a second hotfix pertaining to the same issue released August 2014, apparently the first hotfix in July didn't totally resolve the issue and a second hotfix was released. He was adamant that this would not resolve
our issue and he requested or production databases because he was unable to replicate the issue in his test environment. The reason, you may wonder, is because he was at a higher patch level that our farm.... Obviously! His farm had the most current
CU which included the hotfixes from July and August. Apparently he didn't see the flaw in his logic.
I decided to install the September CU on our test farm. Low and behold that fixed the problem, even though MS support stated the hotfix was not relevant to our issue. I learned a long time ago to take MS support comments as suggestions instead
of gospel truth, this isn't the first time they have confidently given me erroneous information.
We are currently doing further testing to verify that this CU didn't break something else. Unfortunately these rollups are not GA and Microsoft is very clear that you should only install them if the hotfixes pertain directly to your issue.
Finding the hotfixes was a chore as Microsoft loves to create multiple KB's for the same thing and then nest (bury) them so you have to dig through four or five KB's to find the relevant fix. I'll save you the trouble and list them below.
Watch the
September CU Webcast Brian Smith and team go into depth explaining why this issue has been happening and how they fixed it.
September 2014 CU http://support.microsoft.com/kb/2882990 (the one I installed)
August 2014 CU https://support.microsoft.com/kb/2989078
August Project site sync hotfix
https://support2.microsoft.com/kb/2883083
July 2014 CU http://support.microsoft.com/kb/2882990
July Project Site Sync hotfix http://support2.microsoft.com/kb/2882995
Microsoft Project Server Blog
http://blogs.technet.com/b/projectsupport/ (I find this to be more helpful than the TechNet site)
Frank Miranda Florida Hospital MIS

Oracle Tuxedo Security Best Practises

Hi,
I am new in Oracle Tuxedo. I searching about Tuxedo Security best practises. I found many informations in Tuxedo Documentation but if anybody have more informations, i am very interested.
Such as:
- ULOG files permissions => The Tuxedo administrator must not have write acces on this files but if I remove this right, does Tuxedo can write in this files ?
- tlisten.pw => What is the encryption type and can i add only one user password or more ? It's true that there is no user login ?
- tpsysadm and tpsysop => What do they serve ? and where are stored their passwords ant how can i change it ?
- Use of LLE/SSL => What is the best practise, use of LLE and SSL or just LLE, just SSL ?
Thanks a lot !
Best regards

Hi,
welcome to the wonderful (and sometimes byzantine) world of Tuxedo!
You have a couple of interesting questions and I'll try to shed some light on some of them. Disclaimer: I'll assume that you run Tuxedo on some flavor of Linux or Unix. If you're running on Windows, some of these thoughts won't make much sense to you, sorry about that.
When I install the Tuxedo software, I usually let a dedicated user (e g "tuxedo") be the owner of the installed software and files (include files, FML field definitions and so on).
When I create a Tuxedo application, I have a separate user account (e g "some_application") running each application. In this way, an application running wild cannot overwrite or delete any Tuxedo system files, neither another application's files, only its own files, due to file system permissions. In this case, "some_application" will execute your Tuxedo servers and also need to be the owner of the directory where the ULOG will reside (remember that the application need to be able to create a new file every new day).
The tlisten.pw file is not for "user" passwords, it's primary use is to authenticate the different (physical) machines working together in a bridged (clustered) Tuxedo application. It is also used in conjunction with TSAM monitoring, although I have no first-hand experience with that (yet). I've had problems trying to have more than one secret in the tlisten.pw file, your mileage may vary...
When it comes to tpsysadm and tpsysop, you should think of them more as roles rather than actual users. These roles may perform special actions (such as starting/stopping/re-configuring) in your application. Depending on your security settings, any user may (try to) act as tpsysadm and/or tpsysop. Any user passwords you may have are connected to the actual users rather than the roles tpsysadm or tpsysop. All this depends on your settings for SECURITY and AUTHSVC in your ubbconfig. There is no simple/easy answer here, I'm afraid... it all depends on how you have set up your security (USER_AUTH is a good start, but you need to supply an AUTHSVC in that case).
When it comes to encryption, my experience is only with LLE. It simply works. Using SSL I suspect there will be more challenges setting up certificates and such things. The way I understand it you either use LLE or SSL for a given type of communication (i e WSL or TDOMAIN), you can't use both simultaneously.
Hope this helps and I may be able to elaborate further if there's a particular area that seems particularly foggy :-)
/Per

HTTPS sites are not blocking TMG server 2010

Hi
I 've create a rule from URL Set . in this I 've put the address
1. *.example.com/*
2. https://www.example.com/*
3. http://example.com/*
but here http://example.com/* is blocked by TMG server 2010 and "https://www.example.com/* " is not blocking.
kindly help me out that how to block particular https website.

Hi,
Did you mean that you cannot block that HTTPS site by using
https://www.example.com? If yes, please try to
include the port in the URL Set to block HTTPS.
If the issue persists, maybe it is due to the client workstation was configured as Secure NAT client and no web proxy configuration, then URL Filtering doesn’t do
HTTPS categorization for Secure NAT requests. You can enable HTTPS inspection or use Web Proxy client, for more detailed information, please refer to the link below:
Unable
to block access for a web site using URL Filtering Override option on TMG 2010
Best regards,
Susie

Unable to Open Project Site Access Denied Issue Project 2013

This issue is happening to select projects and select project managers, they can view certain project sites but receive the error on other projects. After some extensive testing
it looks like if the PM is the owner of the project plan they are not getting added to any of the synced groups for the project site. I can change the project owner to any another PM and it processes correctly and adds them to the PM synced group on
the Project site. As soon as I make the original PM the Project plan owner again the previous PM gets removed from the PM synced group and added to the Team member synced group, the way its supposed to work. However the PM with the problem never
gets added to any group. I have to manually add them to the non-synced Owner group on the project site so they don't get removed from the synced PM group the next time the sync runs at midnight.
As I stated it is happening on select project plans and select PMs. I have tried replublishing the project plan via Project professional and the web and the results are the same.
If I create a new project plan and assign one of the PMs with the issue to the plan everything works correctly. We noticed the issue a few weeks ago; most of the plans with the issue are several months to a year old so they were working correctly until
recently. They had also made PM owner changes prior to the issue on most of those plans and everything worked correctly.
If anyone is experiencing this issue and has a fix please let me know. I am trying not to open an MS support ticket if possible.
Frank Miranda Florida Hospital MIS

I believe I've found the fix for this issue. After opening a ticket with MS support and not getting anywhere with this issue I decided to do an in-depth review of all the Project and SharePoint 2013 CU's starting with December 2013 to September 2014.
To my amazement buried inside the July 2014 CU was a hotfix for this issue described almost word for word. (I will list all the relevant KB's at the end) I contacted my support engineer inquiring about this hotfix and he stated it wasn't relevant because
the "Synchronize Project Web App permissions to Project Site" was not failing or even generating any warnings in our Prod or Test environments. I stated that is not always an indicator as ULS doesn't always catch all relevant errors.
I informed him that I also found a second hotfix pertaining to the same issue released August 2014, apparently the first hotfix in July didn't totally resolve the issue and a second hotfix was released. He was adamant that this would not resolve
our issue and he requested or production databases because he was unable to replicate the issue in his test environment. The reason, you may wonder, is because he was at a higher patch level that our farm.... Obviously! His farm had the most current
CU which included the hotfixes from July and August. Apparently he didn't see the flaw in his logic.
I decided to install the September CU on our test farm. Low and behold that fixed the problem, even though MS support stated the hotfix was not relevant to our issue. I learned a long time ago to take MS support comments as suggestions instead
of gospel truth, this isn't the first time they have confidently given me erroneous information.
We are currently doing further testing to verify that this CU didn't break something else. Unfortunately these rollups are not GA and Microsoft is very clear that you should only install them if the hotfixes pertain directly to your issue.
Finding the hotfixes was a chore as Microsoft loves to create multiple KB's for the same thing and then nest (bury) them so you have to dig through four or five KB's to find the relevant fix. I'll save you the trouble and list them below.
Watch the
September CU Webcast Brian Smith and team go into depth explaining why this issue has been happening and how they fixed it.
September 2014 CU http://support.microsoft.com/kb/2882990 (the one I installed)
August 2014 CU https://support.microsoft.com/kb/2989078
August Project site sync hotfix
https://support2.microsoft.com/kb/2883083
July 2014 CU http://support.microsoft.com/kb/2882990
July Project Site Sync hotfix http://support2.microsoft.com/kb/2882995
Microsoft Project Server Blog
http://blogs.technet.com/b/projectsupport/ (I find this to be more helpful than the TechNet site)
Frank Miranda Florida Hospital MIS

Tring to install Security Update for Lync Server 2010 (KB2982388) ...patch failed to install

Hi
Idenitfied the lync security update issue below on server....
Worker process exited prematurely. The process will be automatically restarted.
Process: 'C:\Program Files\Microsoft Lync Server 2010\Server\Core\RtcHost.exe' Exit Code: E0434F4D!_HRX! (No Message Text Found!_HRM!).
The KB2982385 has tried to installed and failed 7 times....and as such my lync edge server is down.
Found solution:
http://www.microsoft.com/en-us/download/details.aspx?id=44080&fa43d42b-25b5-4a42-fe9b-1634f450f5ee=True
Downloaded patch and then ran lyncserverupdateinstaller...however it doesnt recognise that there is a patch to be deployed or a component to update.
Further running the msp by itself results in:
The upgrade patch cannot be installed by the windows insteller service because thje program to be upgraded may be missing or the upgrade patch may be a different version...
Please advise how i can get this issue resolved.

Hi,
Did you try to download and install the update manually?
Here is a similar case below, it seems something wrong when updating through Windows Update automatically.
http://social.technet.microsoft.com/Forums/en-US/dea0e9e2-8375-4599-b4cc-7a0cd45cd9de/kb-2982385-has-broken-my-edge-servers?forum=ocsedge
You can refer to the step of “Step 1: Install the cumulative updates”, choose “Method 3 Manual install” in the link below:
http://support.microsoft.com/kb/2493736
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Project Server 2010 / Sharepoint 2010 Permissions not syncing to Project Site

Project Permissions not syncing to Project Site
Project Manager Group
New project is created and published project server sends permissions to Sharepoint which puts users into the following groups:
<dir><dir></dir></dir><dir><dir>
Web Administrator (Microsoft Project Server)
Project Managers (Microsoft Project Server)
Team members (Microsoft Project Server)
Readers (Microsoft Project Server)
At this time the creator/owner, owner’s management, portfolio managers, and executives should all have Project Manager rights on the sharepoint site, and Admins will have Web Admin permissions.
Issue #1: Only the Web Admin permissions and creator/owner permissions are being added to the Sharepoint permission groups
Workaround #1: Going into the project site permissions and adding the
Project Managers (Microsoft Project Server) group manually and the sync will keep the permissions
Workaround #2: Going into the Server Settings, Manager Groups then removing or add all users to the No Permission Group, which forces an sync to all workspaces. Con: This workaround can only be down at night when users are not active since it will
block the queue for at least an hour.
Project Owner Transfer
Previously created project has owner change, once saved and published project server sends permissions to update user’s permission to
Project Managers (Microsoft Project Server) on Sharepoint project site.
Issue #2: When Project owner is changed and project is published the owner is not getting permissions to the Sharepoint project site. However, if owner is also added to the team using the Build Team Feature the sync will give the owner Project
Manager permissions on the Project Site.
Workaround #1: Going into Server Settings, Project Sites, select project and Synchronize. Once this is done, the owner will have Project Manager Permissions without being added to the team.
Users who have been added to this project in Project Server 2010, but not assigned to tasks. Users who have assignments in this project in Project Server 2010 and are contributors to the project workspace site,
meaning that they can create and edit documents, issues, and risks. Users who have published this project or who have
Save Project permission in Project Web App and are contributors to the project workspace site, meaning that they can create and edit documents, issues, and risks. Users who have
Manage SharePoint Foundation permission in Project Web App and are contributors to the project workspace site, meaning that they can create and edit documents, issues, and risks.</dir></dir>

By default when you create project build team add users in the task and publish the project plan then All the User which are available in the project plan including Project owner will go to below mentioned group in project site:
1. creator/owner, owner’s management, portfolio managers, and executives should all have Project Manager will get access to Project Managers (Microsoft Project Server)
2. User who are having team member access to PWA will get Team members (Microsoft Project Server) access if they are assigned to the project task.
3. User who are having team member access to PWA will get Readers (Microsoft Project Server) access if they are not assigned to the project task.
4. Only PWA Administrator will get the access to Web Administrator (Microsoft Project Server)
Sharepoint permission you have to use when you want to give permission manually to users on project site
In the Project Site provisioning setting under Server setting if you have Check to automatically synchronize Project Web App users with Project Sites when they are created, when project managers publish projects, and when user permissions change in Project
Server.
Then all the user get access as per describe above and if you will give access manually to any of the user either in project server group or in Sharepoint group once you will publish the project next time all the manually given permission will go away.
IF you want to give permission to user manually to sharepoint group or project server group then uncheck automatically synchronize Project Web App users with Project Sites when they are created, when project managers publish projects, and when user permissions
change in Project Server.
You check PWA site setting --> Site permission then member of Sharepoint group user who will have access to sharepoint group in PWA site setting site permission will have access to all the project site sharepoint group as Project site inherit permission
from PWA root site.
Both the issue which you have described is behavior of project site.
For issue 2 when first time project owner create and publish the project and projectsite is getting created then porject owner name gets access in the porject manager (project server group) nect time if you will change the owner and publish the project
until he will not present in the project plan will not get the permission.
If you want to give sharepoint permission to users then uncheck automatically synchronize Project Web App users with Project Sites when they are created, when project managers publish projects, and when user permissions change in Project Server and give
the permission manually.
Project site in 2010 has some issue and not full filling customer need some time ,Ms has came up with 2013 which is having tight integration with project sites .
Project workspace security groups are equal to the SharePoint Server 2010 security groups.
Web Administrator equals Full Control
Project Managers equals Design
Team members equals Contribute
Readers equals Read
Users who have Manage
SharePoint Foundation permission in Project Web App and are contributors to the project workspace site, meaning that they can
create and edit documents, issues, and risks will get access to Web Administrator (Microsoft Project Server)
http://technet.microsoft.com/en-us/library/cc197668(v=office.14).aspx
kirtesh

Project Server 2010 permissions granted through RBS are not flowing through to Project Sites.

Hi,
I have configured RBS as "The Project Owner is a descendant of the user via RBS" its working fine for Projects.
But users are facing access denied issue when working with project sites RBS is not working for project sites.
Can any one Help me How can i grant permissions Automatically for project sites also as same like projects is it possible ?
The Members in Executives group can see all projects in organization but same like can they see all project sites ?
I have found one blog of
RaymondRis he is recommending to do it manually as its not possible to grant Project site permissions Automatically.
http://blogs.technet.com/b/raymond_ris/archive/2013/05/09/project-server-2010-permissions-granted-through-rbs-are-not-flowing-through-to-project-sites.aspx
Thank You, Kumar KSV

Kumar,
The permissions to project sites is not cotrolled by the RBS, as you have discovered. It is controlled by the Security Category permisisons, and the settings if the permssions are auto synced. The permissions work like this:
Project managers who have published a project or who have Save Project permissions on a project are added to the Project Managers (Microsoft Project Server) site group.
Team members with assignments in a project are added to the Team members (Microsoft Project Server) site group.
Other Project Server users who have View Project Site permission on a project are added to the Readers (Microsoft Project Server) site group.
As long as you use the Auto Sync of permisisons for project sites, i do not think there is any work around.
Cheers,
Prasanna Adavi, Project MVP
Blog:
Podcast:
Twitter:
LinkedIn:

Need solution to make changes in existing project sites in Project Server 2010 environment

Dear Folks,
Hope you all are doing good and ready to give a way for this requirement. :)
In project server 2010 environment, I am using InfoPath documents library, Issues, Risks etc in each and every project sites.
Say, after creation of 100 projects/project sites, I have got a requirement to make some changes in the InfoPath document library and in Issues, Risks list, so I have decided to use the following solution which is actually weird:
Make the changes in InfoPath document library, Issues/Risks list for 1 of the project site and save that site as template and associate it with running EPT.
Then, delete the existing project sites (after taking backup) and start recreating it from PWA/Server Settings/ Operational Policies/ Project Sites, so that it will take the latest template. But, seems like it is time taking and handy and actually it's not
working for some of the projects.
Request all of you to provide some solution for this.
Ask more, if my explanation is not clear.
Regards,
Shravan

Hello,
Regarding mass deleting and recreating Project Sites via the PSI, firstly delete the project sites then run the following PowerShell script to bulk create project sites:
https://gallery.technet.microsoft.com/Bulk-create-Server-Sites-784f7b29
I have got a script that bulk deletes projects but this is not published as this could be a dangerous script to run if you did know what to update etc. To give you an idea of how to delete project sites via the PSI see a code snippet below:
$EPMTYGUID = [system.guid]::empty
$projectOwnerID = 'd6a0a720-12ac-e211-93f9-00155d153dd4'
$ProjectList = $svcPSProxy.ReadProjectStatus("$EPMTYGUID","PublishedStore","", "0").Project | format-table proj_uid -hidetableheaders | out-string -stream
foreach ($projectUid in $projectList)
if ($projectUid -ne "")
$projectsforDeletions = $svcPSProxy.ReadProject($projectUid, "PublishedStore").Project | where {$_.projectOwnerID -eq $projectOwnerID} | format-table proj_uid -hidetableheaders | out-string -stream
foreach ($projUid in $projectsforDeletions)
if ($projUid -ne "")
$svcWSSProxy.DeleteWSSSite($projUid)
Write-host 'Project UID for deleted site' $projUID
That particular example deletes the project sites for a particular project owner, you could easily modify that to remove the project owner filter if needed.
Regarding your query about having to delete the project sites to get the changes to take affect, there is no easy option to get the issues and risks list changes to filter though, this would either be manual on each existing site or using code to iterate
through each existing site and apply the changes programmatically. Depending on if you used site collection content types to set up the Issues and Risks lists, it might be simple to add a new column etc. as you could do this centrally and it will cascade
down. If you didn't use content types and or its view changes etc. this is a per site change that can be manual or programmatically done. The same applies to the document library, if this was set up using a site collection content type, the changes can
be modified on the content type and cascaded down. If the library was set up with just a library that used local columns / templates then it will be a per site change - the same as the issues and risks.
The company I work for (CPS) does have a site sync tool that will programmatically update existing sites based on a specified site so I know it is all possible to do in code!
Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS |
MVP

Manual creation of Project Site for a project is taking old project site template.

Dear All,
I have modified the project site and save it as a template to associate it with an EPT so that the modification will reflect in new project sites.
For existing projects, I am deleting the old project sites (after taking backup) and recreating so that new modifications will be there for existing projects and I am able to do so.
But, for 1 of the project, when I have deleted the project site and recreated, still it is taking the old template (i.e. new modifications has not been seen).
Kindly advice in some areas so that I can jump in and around and can find out a solution so that the project site will take modified project template.
Example to get the issue in an easy way:
ProjectA:
Project Site: http://epm/pwa/ProjectA
Issue List:
Column: Category [data type as Choice: Cat1, Cat2, Cat3]
Have saved 1 project site as a template and associated with an EPT with the following changes:
Column: Category [data type as Choice: Choice1, Choice2, Choice3]
Then, deleted the project site: http://epm/pwa/ProjectA and recreated.
So, it should take the modifications in the project site.
But, it is showing as Column: Category [data type as Choice: Cat1, Cat2, Cat3].
Regards,
Shravan

Dear Guillaume,
Thanks for your response.
Please seem my comments inline:
Which Project Server version do you use?
PS 2010
It is working well and as expected for all projects except for 1 specific project?
Yes. It is working well for other projects except 1 project.
Has this project something particular?
Nope. It is similar as other projects.
How do you proceed to create the new project site? Do you go to the site actions, then new site and pick up your new template?
First I have modified 1 of the project site and saved that site as a template.
Then, I have deleted the existing project site (from Project Sites under Operational Policies) and recreated so that project site will gets created from the new template. But, it's not happening.
Regards,
Shravan

Unable to find top level site associated with project site

Hello!
SP and PS 2013. I faced the problem with one project and its site synchronization.
When user published this project at 1st time, the site wasn’t created (there were some errors), but user didn’t notice that. So, after few days when he couldn’t open
the site, he ask me for help.
I did my usual operations in such cases – I open “Connected sites” and create the site myself.
Earlier there was not any problem with that. But now this project experiences some troubles with permissions sync for
it’s site – there is no synchronization.
I connected this problem with November CU, which has been installed couple of weeks ago.
I have read about the same problems after upgrade, so I want to emphasize that site was created on the root site collection (Project Web App) and it is not a subsite
of another project site.
If there is no solution until next update, maybe there is some way to turn off permission synchronization only for this site?
Any help will be appriciated!!!
Kate
Queue error:
GeneralQueueJobFailed
(26000) - PreparePSProjectPermissionSynchronization.PreparePSProjectPermissionSynchronizationMessage.
Подробные
сведения: id='26000' name='GeneralQueueJobFailed'
uid='231b2c2c-fc8b-e411-942d-0050569d3fac' JobUID='79031b2c-fc8b-e411-942d-0050569d3fac' ComputerName='7d8a1473-f6a8-4a8e-b7fb-1bdd868c7e20' GroupType='PreparePSProjectPermissionSynchronization' MessageType='PreparePSProjectPermissionSynchronizationMessage'
MessageId='1' Stage='' CorrelationUID='a923d99c-8e88-c0e8-c7e2-08a980da8c96'.
Для получения дополнительных сведений проверьте журналы ULS на компьютере
7d8a1473-f6a8-4a8e-b7fb-1bdd868c7e20 для записей с JobUID
79031b2c-fc8b-e411-942d-0050569d3fac
In logs:
12/25/2014 12:42:45.85        Microsoft.Office.Project.Server (0x07E4)        0x5E10
Project Server                            Sharepoint Integration
amed3 Exception        Unable to find top level site associated with project site Site1 System.IO.FileNotFoundException: <nativehr>0x80070002</nativehr><nativestack></nativestack>Нет
веб-сайта
с
именем "/Site1".     at Microsoft.SharePoint.Library.SPRequestInternalClass.OpenWebInternal(String
bstrUrl, Guid& pguidID, DateTime& pdtTimeCreated, String& pbstrRequestAccessEmail, UInt32& pwebVersion, String& pbstrServerRelativeUrl, UInt32& pnLanguage, UInt32& pnLocale, String& pbstrDefaultTheme, String& pbstrDefaultThemeCSSUrl,
String& pbstrThemedCssFolderUrl, String& pbstrAlternateCSSUrl, String& pbstrCustomizedCssFileList, String& pbstrCustomJSUrl, String& pbstrAlternateHeaderUrl, String& pbstrMasterUrl, String& pbstrCustomMasterUrl, String& pbstrSiteLogoUrl,
String& pbstrSi...   2a29d99c-9ecc-c0e8-c7e2-037970debfdf

Hi Kate_S,
since you are already aware that its a known issue caused Sep 2014 CU i believe, and an official fix has yet to release.
but i would like to clarify here that this issue doesn't have anything to do with project site creation, because sync queue job while creating project site fails but does not block other queues activities. so your project site should be created in a normal
way.
and until official fix will arrive, 1 of the option is to change your project sites to provision under root site collection instead of PWA site collection. But be aware that this will fix sync issue only for new project sites.
Go to Central Administratio -> PWA settings -> open site provision settings menu and made changes.
2nd option is, since Project Owner always get access to Project site, to teach your project owners to include project team members manually to project site permission group to allow them to have access. this option can help you with both new and existing
project sites, and i personally prefer this and did the same for my affected customers.
Hope these 2 options will help you.
Khurram Jamshed - MBA, PMP, MCTS, MCITP (
Blog, Twitter, Linkedin )
If you found this post helpful, please “Vote as Helpful”. If it answered your question, please “Mark as Answer”.

Project Site not showing task as milestone

Hi,
When creating a project site and adding task from Microsoft Project 2013, the task selected as milestones shows on the SharePoint site as a normal task. Is there something that I'm missing on the site?

Hi Garlos,
Your Project Site shows the milestone correctly. As I can see from the picture, the milestone start on 3/14/14 and finish on 3/14/14 and is showed correctly in your Project Site.
Best Regards,
Eric
Eric Tao
TechNet Community Support

Allocating and delegating permissions in Exchange Server 2010 between two AD security group.

People,
Can anyone please assist me in where and how to assign the following two AD security group in Exchange Server 2010?
IT Admin group (Full access and permission for all AD and Exchange related).
IT Helpdesk group (can only create mailbox and modify the mailbox properties including AD distribution group and contacts).
Because in Exchange Server 2007, everything can be managed easily through the AD security group that is created during the installation such as
Exchange Organization Administrators group for full access for IT Admin team and Exchange Recipient Administrators group for managing the mailbox user for Help Desk team.
/* Server Support Specialist */

Hi,
Based on my knowledge, Exchange 2010 has an Organization Management group instead of the Exchange Organization Administrators group. Use the Recipient Management group instead of the Exchange Recipient Administrators group. In your case, you can add the
IT Admin group to the Organization Management group, add the IT Helpdesk group to the Recipient Management group.
Hope this can be helpful to you.
Best regards,
Amy Wang
TechNet Community Support
Thanks, Amy,
But for some reason I cannot see those built in AD security group in my ADUC?
So should I recreate it manually by right clicking on the AD user and Console ?
/* Server Support Specialist */

Record Center Archival Strategy/Best Practise

I am familiar with record center but I would like some guidance on how to do some of the things.
Scenario : We have 4 site collections, 2 site collections are containing team sites which are built for different departments and one site collection is project site collection which contains sites for on going project and last site collection is for record
center. There are different content types associated with each of libraries in above sites.
-- From the team sites in those two site collections, only few documents from document libraries need to be archived (Here I would like to know, should I create a separate library in record center for each library in source site -- in this approach record
center will have numerous libraries or just create one library for each team site and archive all documents in it -- this approach has drawback of finding document)
Same way for project site collection where once project is ended they would like to archive all libraries : should I archive each separate library or archive all project libraries for that project into one library on record site.
Dhaval Raval

Hi Dhaval,
I found articles for different aspects of Record Management in SharePoint 2010 for your reference:
Introducing Records Management in SharePoint 2010
http://blogs.msdn.com/b/ecm/archive/2010/02/13/introducing-records-management-in-sharepoint-2010.aspx
Estimate performance and capacity requirements for large scale document repositories in SharePoint Server 2010
http://technet.microsoft.com/en-us/library/hh395916(v=office.14).aspx
Choose how to store and manage records
https://support.office.com/en-us/article/Choose-how-to-store-and-manage-records-5299e96c-00ea-47dc-a711-f21b3cea00d3?ui=en-US&rs=en-US&ad=US
To design the record management plan, we need consider about govermance, performance, security and etc.
Regards,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] .
Rebecca Tu
TechNet Community Support

Project site security best practise - project server 2010

Similar Messages

Maybe you are looking for