User Profile DS_Export

I have been following
this guide. Unfortunately, I am unable to get the sync from SharePoint to Active Directory. I get the following error in FIM: permission-issue, Insufficient access rights to perform the operation.
I get successes for MOSS_EXPORT, MOSS_DELTASYNC, DS_DELTASYNC, MOSS_DELTAIMPORT, DS_DELTAIMPORT. I am sure it has something to do with my sync account. Any help would be much appreciated!

Write all properties on what type of objects? :-) Go through the Delegation Control wizard...
Create a custom task to delegate
Only the following objects in the folder: User objects
Show these permissions: Property-specific; Write thumbnailPhoto
That should be it. Make sure the user you're writing back is covered by this permission set, and of course you're delegating permission to the service account performing the sync (and not say, the farm admin account).
Trevor Seward
Follow or contact me at...
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.
Why isn't this listed on TechNet? It seems like the addition of this step would be nice, or at least, a clarification. Thanks for your help!

Similar Messages

I am having a serious issue with all my apps disappearing/not working- user profiles

i will list the things i have done in the past 24 hours, hopefully one of you knows what happened...thank you in advance
first off, my situation- was that i bought a macbook pro(about a year ago) with lion or snow leopord it is software 10.7.5 i dont know what the guy did but when he sent me the computer the username was off and so was the home folder, i changed the username with ease but the home folder stayed tbd and i couldnt figure out how to change it. well it finally got on my nerves enough from looking at it that i wanted to change it today that put me into the situation i am in. Here is what i have changed:
-I added a second profile as to see if i could change the home emblem file named tbd to what i wanted. This worked or so i thought.
- then shared and permissions showed tbd(me) so i wanted to change that also so i went into systempreferences>users and groups>login options>network account server and clicked join/open directory utility. this is where i believe i went wrong i read in a forum that this is what you needed to change to make it look how i wanted it to. under active directory it still had this guys name gtmb04_evan so i changed it to my name like the forum said, well his name is back up even though i changed it. and this is when everything stopped working.
symptoms: all my applications act like they are newly downloaded and make me set them up.
- my home screen is nothing like it was before, no apps are on the desktop and the bar along the bottom only has the basic ones
- i tried to take the second username off of administrater which made me restart my cp(all my stuff looked normal until this, but didnt work)
-my launchpad wasnt showing any apps they simply looked blank
- my firefox along with many other apps wouldnt even start prior to reseting and gave me a message with something like couldnt find or access user profile( i forget the entire message)
please please help me, i hate this right now and have no idea what to do, all my files are still under my name, that when i thought i changed tbd- it apparently just made a new folder under users which didnt show up until the restart, i do not have a time machine set up on this computer because i hated the lion setup and couldn't get it to operate correctly

i had one mac and spilt water on it, the motherboard fried so i had to buy a used one...being in school and all. it is a MC375lla
Model Name:
MacBook Pro
Model Identifier:
MacBookPro7,1
Processor Name:
Intel Core 2 Duo
Processor Speed:
2.66 GHz
Number of Processors:
1
Total Number of Cores:
2
L2 Cache:
3 MB
Memory:
8 GB
Bus Speed:
1.07 GHz
Boot ROM Version:
MBP71.0039.B0E
SMC Version (system):
1.62f7
Hardware UUID:
A802DE22-1E57-5509-93C5-27CEF01377B7
Sudden Motion Sensor:
State:
Enabled
i do not have a backup of it, so i am thinking about replacing my old hard drive from the water damaged into this one, not even sure if that would work, but it did not seem to be damaged, as i recovered all the files i wanted off of it to put onto this mbp
the previous owner didnt have it set to boot, they had all their settings left on it and tried to edit all the names on it, had a bunch of server info and printers etc crap on it. i do not believe he edited the terminal system though--he doesnt seem to terribly bright(if thats possible)
tbh i hate lion compared to the old one i had, this one has so many more issues-overheating,fan noise, cd dvd noise
if you need screenshots or data of anything else as away
[problem is i do not want to start from scratch if there is a chance of fixing it, this one did not come with disks or anything like my first. so i dont even know if i could, and how it sets now i am basically starting from scratch, because now all my apps are reset but working, i am hoping to get my data back somehow though, i lost all of my bookmarks and editing all my apps and setting again would be a pain

How do my GF and I share our iTunes library across our user profiles?

I'm sure this question has been asked a million times but here goes.
My GF and I both have a user profile on our Mac Mini. She is just now setting up her new iPhone and wants to be able to get music on it and such from her own profile.
All of the iTunes (and iPhoto) media sits on an external 2TB hard drive. I can see everything free and clear in my profile. When I log into her profile she's got nothing in her music library. How can we get her to be able to access the same library? Also, is there a way to ensure that if she were to add new music to her folder that I would see it in mine?
Your big brains appreciated on this. I'm sure there's a simple solution, no?

perhaps the following kb article will help:
http://support.apple.com/kb/HT1495

Use one profile for all user profiles in Server 2012 R2

Hi
I am setting up an Windows Server 2012 R2 Template on VMware.
I will do som changes with the local admin user, and want all user that will log in to servers made from this Template, get the user profile I have set up for the admin account.
How to I do that?
Regards
StigKSand

the way I used to do this was to create a new profile the way I wanted with any shortcuts applications etc installed. then I would create another user account on the PC and make it an admin.
reboot the pc to ensure it hasn't got the pre-configured profile loaded and login with your newly created admin account.
then right click This PC in windows explorer and select properties, then select advanced system settings, and select user profiles on the advanced tab. You can then select the profile you made all the configuration to, and click copy and then select default
profile.
this should then mean any new users who login get this default profile on this server.
hopefully that is what you were referring to.
Regards,
Denis Cooper
MCITP EA - MCT
Help keep the forums tidy, if this has helped please mark it as an answer
My Blog
LinkedIn:

How can I Import CA Certificate into a new user profile when it's created

I need to deploy a CA Root Certificate to new firefox user profile when it is created in windows. I Seen somewhere that you could place a working copy of cert8.db in %programfiles%\firefox-installation-folder\defaults\profile and this would get added when a new firefox profile is created. However, the profile directory doesn't exist in the defaults folder and when I created it this method still didn't work.
Is there a way to get firefox to create new profiles with preconfigured Certificates?
Right now when new users open firefox for first time it is unable to connect to any SSL sites through our proxy server until the user adds the proxies ca certificate or it gets added later via logon script (at next user logon).

Update... For anyone looking for a similar solution:
I ended up adding more to my logon script I have it check for a user's mozilla profile first and if not found it will use command line "firefox.exe -createprofile default" to make one. After that I just copy a working cert8.db to that new profile. Then when the user opens firefox for first time, it will detect this new profile, and it will load it along with the correct CA Certs intact...
Also, for existing profiles my script just uses nss certutil to add my proxy CA Certificate to the users profile cert8db.

Huge ntuser.dat.LOG1 since upgrade to Windows 8.1 prohibits roaming of user profile

Hello,
a few days ago my PC (part of our domain) first started to have problems with my user profile. Our domain uses roaming profiles with a size limit of 30MB. My user.dat has a size of 12.5MB. Up to now this did not cause any problems (and does not cause any for
most users of our domain having a user.dat of similar size). However, after upgrading to Windows 8.1 I repeadly have problems with my profile exceeding its maximum size. After checking my profile, I found a ntuser.dat.LOG1 with 12,5MB in size and a ntuser.dat.LOG2
of 2MB. As far as I know these files are used to store temporary transactions for the user.dat. But why are they this large? Together they almost completely fill the profile. As an interesting side node the last modification of ntuser.dat.LOG1 dates back more
then seven days.
What is further puzzling me: ntuser.dat.LOG1 and ntuser.dat.LOG2 are not synchronized with the roaming profile on the server. At least they are not on the server. However there used to be much smaller versions of these files which could have been transfered
before the profile size exceeded its limit. Since these file seem not to be part of the roaming part of the profile, they should not count for the roaming profile size. However, they definitely do. Neglecting the registry files the largest file in my profile
is less than 500kb and there are very few files of this size. I checked locally as well as on our server.
Deleting the local profile and starting fresh using the roaming profile from our server does work for a day or two but then I run into the same problem. Especially, loosing all local profile data is inconvenient. I could start a new with a completely new
profile, but I am not convinced that it is a profile issue. In our organisation my computer is one of the first to move to Windows 8.1. Since my profile worked without problems for years now, I am worried that I ran into a Windows 8.1 issue. As users normally
start to complain about a roaming profile not synchronizing only after their local copy broke, I'd like to make sure that this is a isolated issue.
Anyone else experiencing similar issues? Any hint on how to solve the problem?
Regards,
Oliver

No, I did not find a solution. However, we moved away from roaming profiles and rely on folder redirection only. That works for us. Since we can redirect the most important folders there is no more need for roaming profiles (at least in our case).

User Profiles are the wrong style after importing/migrating site collections from other SharePoint versions

I manage a couple of different version of SharePoint, which we are in the process of migrating to SharePoint 2013. I have a problem which I am not sure how to resolve. We are using MetaLogix to migrate site and site collection data from an older SharePoint
2007/WSS3.0 server environment into our new SharePoint 2013 environment and we are having a problem with user profiles that get created.
I have SharePoint 2013 set up for "SharePoint Profile Synchronization" and some of our user's profiles are being created in an older format that shows the user's claims account information, rather than the more fancy profile type that allows us
to include pictures and click on "follow this person" links.
If we manually delete the profile, it will be recreated properly however, as we are migrating many sites and collections over, it is near impossible to do this and keep track of each user so that their profiles can be deleted and recreated.
Is there some way to change this behavior so that SharePoint will only create the newer style of user profile?

These 'profiles' are you looking at them in the User Profile Service Application itself or are you looking at site collections? There is a huge difference between the two but people often miss it.
In most cases you'll have some partial information on the Site Collections but when you click through to their actual profile (not just their User Information List entry) you'll see the prettier version. That information is normally internally synchronised
by a timer job but that may not have run yet and/or the fact that your users haven't actually used the site may be causing it not to update them (it's an efficiency matter).
Finally: Drop your sales guy at Metalogix an email, they will bounce it to one of their techies and they'll have seen it a million times.

Web - What is easiest way to implement User Security and User Profiles

Hi, I am new to these forums and kind of new to Java. Sorry if this is in the wrong forum!
Bit of background to my experience with java
I have been playing about with java for a number of years and have created a few basic programs such as a screen shot tool that allows you to capture to default locations and look at previews first etc. I am now venturing into web related stuff. I work in IT doing systems testing and have done bits of basic development on various things.
What I've done so far
I am using Netbeans IDE 6.7 and MySQL 5.0
I am trying to learn more complex java and have decided to try build a basic web / database system that basically implements adding / amending / deleting data from a MySQL database through web pages. I am now trying to implement basic user access and profiles. I have so far got the following:
- MySQL table with user info - username / password
- JSP page with usual login stuff
- Servlet that validates the username and password - if correct forwards to main menu page.
Its as simple as that - there is nothing stopping you just typing in the URL of the main menu page and going from there.
What I want
I am wanting to eventually get the following:
- User authentication so that you have to logon before you can access anything else
- User profiles that determine what each user can or can't do, restricting the pages / services / options available (i.e. normal user can't delete etc)
- Would it need some sort of session manager to allow multiple users etc?
I appreciate this is a fairly open question but what is the easiest way to start implementing this? Not after specific code as I would prefer to try figger things out myself, but a point in the right direction would be great. It doesn't have to be extremely secure as this is just for me at the minute.
I have spent all day looking at things like session data / url rewriting / security settings in web.xml / bespoke servlets and am now in java overload!

Hi everyone,
I've now actually gone back to the tutorial that I linked to above and implemented that using form login and j_security_check.
Agree with Saish, and although I don't know enough about the other options to give a good reason, using realms and j_security_check just seems to be a bit cluncky and messy. I would also prefer something a bit more generic, that doesn't rely on setting users in glassfish, hence why I started with my own user table.
Anyway, I will leave it as is for now and maybe come back and try one of the other options.
The only problem I can see now is that to add users i will need to go through all the steps of adding users in glassfish and web.xml... Is there a way to do this through a servlet or something so I can have a jsp page to add users that also creats all the other bits for it to work?
Thanks everyone for your help

Unable to push user profiles to AD groups with Profile Manager since upgrade to Server v3

Since upgrading our OS X Mac server from 10.8.5 to 10.9.1, and OS X Server app to v3 (now 3.0.2) I have been unable to push or modify user profiles to AD groups (or AD users) using Profile Manager. This was working fine on OS X 10.8.5. Pushing device profiles is still working OK after the upgrade.
From what I can see from the logs on the client side and server side, it seems related to a problem with the mdm authtoken.
In the client console I can see this entry:
27/01/14 14:30:15.844 mdmclient[38557]: *** ERROR *** [Agent:636102071] Unable to proceed with connection to: https://ourserver.ourdomain/devicemanagement/api/device/mdm_connect (com.apple.mdmconfig.mdm) because don't have valid MDM AuthToken
On the server, in the php.log I can see the corresponding attempt to authenticate:
1::Jan 27 14:29:50.930 [158] <192.168.28.171> {require_once (mdm_checkin.php:11)} vvvvvvvvvvvvvvvvvvvvvvvvvvvvvvv - PUT mdm_checkin
0::Jan 27 14:29:50.931 [158] <192.168.28.171> checkin: 'UserAuthenticate'
1::Jan 27 14:29:50.936 [158] <192.168.28.171> {Target_for_incoming_request (target.php:209)} Found target NETWORK LS: <User[156]@ourclientmachine>
0::Jan 27 14:29:50.937 [158] <192.168.28.171> {LabSession_validate_auth_token (mdm_checkin.php:22)} Failed auth for target NETWORK LS: <User[156]@Device[1697]>, incoming_request={
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'MessageType'=>'UserAuthenticate',
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'UDID'=>'17aff5c5a40f51acbbd78023d0028c80',
0::Jan 27 14:29:50.937 [158] <192.168.28.171>   'UserID'=>'A5EA25B7-7CCD-4EF4-B240-F23DED275EEC'
0::Jan 27 14:29:50.937 [158] <192.168.28.171> }
1::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Sent Final Output (407 bytes)
1::Jan 27 14:29:50.965 [158] <192.168.28.171> ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - /devicemanagement/mdm/mdm_checkin
0::Jan 27 14:29:50.965 [158] <192.168.28.171> {SendFinalOutput (mdm_checkin.php:145)} Completed in 34ms | 200 OK [https://ourserver.ourdomain/devicemanagement/api/device/mdm_checkin]
So I can see there is a failure to authenticate, but don't really know how to troubleshoot this further. Or maybe this is just a bug in the new server app?
I have tried to remove and re-enroll clients in Profile Manager but no joy there.
In the client's Keychain I can see an MDM user AuthToken linked to the correct user account.
Thanks in advance for any help or suggestions

I just wanted to update my post, as this issue for me is resolved.
I uninstalled and reinstalled the Server.app on our Mac server, since then I've been able to push profiles to AD Users and Groups. I guess that in my case the Server app got into a bit of a mess when it was upgraded to v3.
Now the next headache I have is that my AD Groups which are displayed in Profile Manager are not syncing any recent changes. I think I'm probably seeing the same issue as described in this post
https://discussions.apple.com/message/25420919#25420919

How To Properly Delete a User Profile on Windows 7 in a Domain environment

I have not been able to find an answer that matches the issue I'm facing. I had recently setup a laptop for a user and soon after, he was experiencing issues that I thought might be profile related. So, I did what always worked for me on prior versions of
Windows without any fuss or side affects.
Logged in under the local Administrator account, I went into: System Properties>User Profiles>Settings and removed the user profile from their. When I do that, I get an error message:
Profile Error
Profile not deleted completely. Error - A required privilege is not held by the client
Ok, no problem I think. I just need to delete the user's profile directory under the users folder right? So I do this and figure when I try to log in again as the user that a new profile will be created. However, this is not what happens exactly. I login
with the user credentials and it logs in successfully. However, I get a pop saying:
You have been logged on with a temporary profile
You cannot access your files and files created in this profile will be deleted when you log off. To fix this, log off and try logging on later.
Please see the event log for details or contact your system administrator
So my question is; why did the profile not delete completely after both deleting the user profile under System Properties and after deleting the actual profile directory? What did I miss and what is the proper method of deleting a user profile completely
without running into these other issues?

Hi Womprat,
According to your description, I understand that you want to delete user profile but display an error in Windows 7.
Please use other user (with administrator privileges) login this computer, then open Properties for Computer--->Advanced system setting--->Settings for User Profiles, then select the profile you want to delete.
More details about Delete a user account, please refer to:
http://windows.microsoft.com/en-us/windows7/delete-a-user-account
Additional, please contact Windows 7 IT Pro Team so that you can get more professional suggestions. For your convenience:
https://social.technet.microsoft.com/Forums/en-US/home?category=w7itpro&filter=alltypes&sort=lastpostdesc
Best regards,
Allen Wang

Unable to start User Profile Sync Service

Hi,
I am currently facing some issues with starting the User Profile Sync Service on my SP2013 farm.. I was wondering if someone could help me out a bit.
I have successfully installed the SP2013 farm on a environment that has access to our AD etc. and I have also
restored the database from SP2007 and converted it to Claims authentication etc. The one thing I can’t get to work is to enable the User Profile Sync Service on the server. I have checked quite a bit of TechNet blogs and other sites and tried almost everything
suggested but it still fails. I’ve also recreated the farm from scratch yesterday again but no luck still
L.
The below is what I have done:
Farm Admin account – spadmin2013 is local admin on all SP Farm servers (2 WFE and 2 APP Servers) and has log on locally rights as well on security policy. On the SQL DB it has dbo permissions on the Sync, Profile and Social DB’s.
Farm Service account – spservice-s is a managed farm account that is used to run the various services of the farm (used during the config wizard part).
From within the Admin Control Panel I have verified the managed accounts and it is indeed spadmin2013 which owns the User Profile Sync Service (not the application itself). When I try to start the service it tries to do that for 5-10 minutes and then fails
and goes back to stop and I do not see any error. I have created a custom service application with new database that runs on spadmin2013/spfarm/ldap accounts etc. I can see from the Windows services – FIM and FIMSync service try to start using the spadmin2013
and then go back to disabled. I have also tried giving the spadmin2013 rights to replicate the AD as few blogs suggested that. I am not sure where this is going wrong or what is missing. I had successfully got this to work and still can get it to work on my
first SP2013 server which is a standalone – running SQL, SP app and WFE on the same box.
In fact I also tried to activate this service first before I joined my 3 other servers to the farm and had no luck. I am kinda lost here as to what is going on!

Right. i ran a new log as suggested. I have also cleared the config cache and created a Powershell profile as suggested in this link - http://blogs.msdn.com/b/bryanbolling/archive/2014/01/02/unable-to-start-user-profile-synchronization-service.aspx
I checked the ULS Logs and i can see the below error -
ILM Configuration: Validating account.
ILM Configuration: Validating the system groups
ILM Configuration: Setting up WMI
ILM Configuration: Setting required permissions
ILM Configuration: Create install config file
ILM Configuration: Update source project
ILM Configuration: Changing service account credentials
ILM Configuration: Setting policy for service account
Updating SPPersistedObject UserProfileApplication Name=User Profile Sync Service. Version: 63903 Ensure: False, HashCode: 55647834, Id: ef1ec55c-aa15-4cb7-a9fe-498382a88b4e, Stack:
at Microsoft.Office.Server.Administration.UserProfileApplication.Update()
at Microsoft.Office.Server.Administration.UserProfileApplication.SetupSynchronizationService(ProfileSynchronizationServiceInstance profileSyncInstance)
at Microsoft.Office.Server.Administration.ProfileSynchronizationSetupJob.Execute(SPJobState state)
at Microsoft.SharePoint.Administration.SPTimerJobInvokeInternal.Invoke(SPJobDefinition jd, Guid targetInstanceId, Boolean isTimerService, Int32& result)
at Microsoft.SharePoint.Administration.SPTimerJobInvoke.Invoke(TimerJobExecuteData& data, Int32& result)
SQL connection time: 131.92704 for Data Source=SPSQLAGL;Initial Catalog="Sync DB";Integrated Security=True;Enlist=False;Pooling=True;Min Pool Size=0;Max Pool Size=100;Connect Timeout=15;Application Name="SharePoint[OWSTIMER][1][Sync DB]"
ILM Configuration: Configuring database
ILM Configuration: Error 'ERR_CONFIG_DB'
UserProfileApplication.SynchronizeMIIS: Failed to configure MIIS post database, will attempt during next rerun. Exception: System.Configuration.ConfigurationErrorsException: ERR_CONFIG_DB
at Microsoft.Office.Server.UserProfiles.Synchronization.ILMPostSetupConfiguration.ValidateConfigurationResult(UInt32 result)
at Microsoft.Office.Server.UserProfiles.Synchronization.ILMPostSetupConfiguration.ConfigureMiisStage2()
at Microsoft.Office.Server.Administration.UserProfileApplication.SetupSynchronizationService(ProfileSynchronizationServiceInstance profileSyncInstance).
UserProfileApplication.SynchronizeMIIS: End setup for 'User Profile Sync Service'.
Updating SPPersistedObject ProfileSynchronizationSetupJob Name=ProfileSynchronizationSetupJob. Version: 63899 Ensure: False, HashCode: 36296732, Id: 7aeb377f-8bd1-453d-b6be-6a373eaf350d, Stack:
at Microsoft.SharePoint.Administration.SPJobDefinition.Update()
at Microsoft.Office.Server.Administration.ProfileSynchronizationSetupJob.Execute(SPJobState state)
at Microsoft.SharePoint.Administration.SPTimerJobInvokeInternal.Invoke(SPJobDefinition jd, Guid targetInstanceId, Boolean isTimerService, Int32& result)
at Microsoft.SharePoint.Administration.SPTimerJobInvoke.Invoke(TimerJobExecuteData& data, Int32& result)
Leaving Monitored Scope (Timer Job ProfileSynchronizationSetupJob). Execution Time=6041.65717333333
Name=Timer Job User Profile Sync Service_ProfileSynchronizationJob
Updating SPPersistedObject ProfileSynchronizationSetupJob Name=ProfileSynchronizationSetupJob. Version: -1 Ensure: False, HashCode: 13918585, Id: 21e01df1-8772-487d-bd56-f699b3912bda, Stack:
at Microsoft.SharePoint.Administration.SPJobDefinition.Update()
at Microsoft.Office.Server.Administration.UserProfileApplication.StartSynchronizationServiceSetupTimer(String strSyncMachineAddress)
at Microsoft.Office.Server.Administration.UserProfileApplication.SynchronizeMIIS()
at Microsoft.Office.Server.Administration.ILMProfileSynchronizationJob.Execute()
at Microsoft.Office.Server.Administration.UserProfileApplicationJob.Execute(SPJobState jobState)
at Microsoft.SharePoint.Administration.SPTimerJobInvokeInternal.Invoke(SPJobDefinition jd, Guid targetInstanceId, Boolean isTimerService, Int32& result)
at Microsoft.SharePoint.Administration.SPTimerJobInvoke.Invoke(TimerJobExecuteData& data, Int32& result)
Updating SPPersistedObject ProfileSynchronizationSetupJob Name=ProfileSynchronizationSetupJob. Version: 63913 Ensure: False, HashCode: 13918585, Id: 21e01df1-8772-487d-bd56-f699b3912bda, Stack:
at Microsoft.SharePoint.Administration.SPJobDefinition.Update()
at Microsoft.Office.Server.Administration.UserProfileApplication.StartSynchronizationServiceSetupTimer(String strSyncMachineAddress)
at Microsoft.Office.Server.Administration.UserProfileApplication.SynchronizeMIIS()
at Microsoft.Office.Server.Administration.ILMProfileSynchronizationJob.Execute()
at Microsoft.Office.Server.Administration.UserProfileApplicationJob.Execute(SPJobState jobState)
at Microsoft.SharePoint.Administration.SPTimerJobInvokeInternal.Invoke(SPJobDefinition jd, Guid targetInstanceId, Boolean isTimerService, Int32& result)
at Microsoft.SharePoint.Administration.SPTimerJobInvoke.Invoke(TimerJobExecuteData& data, Int32& result)
I have verified the spadmin2013 does have dbo permissions and also is part of security & sysadmin in sql server. I run SQL 2012 with SP1

Cross Farm: User Profile Custom Properties do not show up in the consumer farm web applications

I have a two SharePoint 2010 farms, one is the publishing farm and user profile service is running on this farm. I have defined a couple of new custom properties, and after a while these custom properties do not show up at the consumer farm end.
So, on the publishing farm, I can udpate the user profiles with values in these custom properties. However, neither the custom properties nor the values got synchronized to the consumer farm. What puzzled me further is that some of the existing custom properties
exist on the consumer farm, but not the new custom properties I recently added.
1. I have made sure the application pool accounts on both the farms being added to the administrators with full control permission in UPS on the publishing farm.
2. The User Profile Service proxy (connected to the publishing farm UPS application) is associated with all the web applications on the consumer farm.
3. When values in the user profiles on the publishing farm changed, these changes do not get replicated to the consuming farm user profiles. This symptom occurs on both custom and OOB user profile properties.
However, I cannot find any other related information on the web, nor from the ULS logs.

Hi,
As I understand, it did not display the new custom properties you defined in the publishing farm at the consumer farm end.
1. Check if the topology Discovery Service Application runs well in consuming farm. In the Central Administration, it is the Application Discovery and load Balancer Service Application, check if it starts.
In the IIS, it is the topology, check if it starts.
2. Check the permissions have been established if you have established consumer farm permissions on Provider Farm before you publish the service application.
1. Go to Central Administration and going to “Manage Service Applications”.
2. Click on “Application Discovery and Load Balancer Service Application” and click “Permissions” from the ribbon.
Your farm GUID should be listed with full permissions.
The article is about Shared Service Architecture in a multi farm environment
http://blogs.msdn.com/b/russmax/archive/2010/05/06/sharepoint-2010-shared-service-architecture-part-2.aspx
Best regards
Sara Fan
TechNet Community Support

Claims Based Authentication and Editing User Profiles

Hi All,
I have an interesting issue where I have a SharePoint Farm setup with both the intranet and mysites web applications setup using Claims Based Authentication. While everything seems to work fine, you are able to search for users, view properties and users
can change their own profile properties. However when you configure a profile administration account (an account with the "manage user profiles" permission on the User Profile Service Application) and you attempt to use that account to edit
another users profile you get hit with a generic error page.
Delving deeper you get the following errors:
ULS:
Date   Process   Thread Id   Area   Category   Event Id   Level   Correlation   Message
5/7/2013 00:31:44:64   App Pool: MySites   0x1DC8   SharePoint Foundation   Logging Correlation Data   xmnv   Medium   4001199c-6bd8-c03d-920f-55177fbff00c
Name=Request (GET:http://mysite.DOMAIN.loc:80/_layouts/15/EditProfile.aspx?UserSettingsProvider=234bf0ed%2D70db%2D4158%2Da332%2D4dfd683b4148&ReturnUrl=http%3A%2F%2Fmysite%2EDOMAIN%2Eloc%2Fperson%2Easpx%3Faccountname%3DDOMAIN%255CAUSER&accountname=DOMAIN%5CAUSER)
5/7/2013 00:31:44:66   App Pool: MySites   0x1DC8   SharePoint Foundation   Authentication Authorization   agb9s   Medium   4001199c-6bd8-c03d-920f-55177fbff00c
Non-OAuth request. IsAuthenticated=True, UserIdentityName=0#.w|DOMAIN\sp_config, ClaimsCount=24
5/7/2013 00:31:44:66   App Pool: MySites   0x1DC8   SharePoint Foundation   Logging Correlation Data   xmnv   Medium   4001199c-6bd8-c03d-920f-55177fbff00c
Site=/
5/7/2013 00:31:44:69   App Pool: MySites   0x1DC8   SharePoint Foundation   Files   00000   High   4001199c-6bd8-c03d-920f-55177fbff00c
UserAgent not available, file operations may not be optimized.
at Microsoft.SharePoint.SPFileStreamManager.CreateCobaltStreamContainer(SPFileStreamStore spfs, ILockBytes ilb, Boolean copyOnFirstWrite, Boolean disposeIlb)
at Microsoft.SharePoint.SPFileStreamManager.SetInputLockBytes(SPFileInfo& fileInfo, SqlSession session, PrefetchResult prefetchResult)
at Microsoft.SharePoint.CoordinatedStreamBuffer.SPCoordinatedStreamBufferFactory.CreateFromDocumentRowset(Guid databaseId, SqlSession session, SPFileStreamManager spfstm, Object[] metadataRow, SPRowset contentRowset, SPDocumentBindRequest& dbreq, SPDocumentBindResults&
dbres)
at Microsoft.SharePoint.SPSqlClient.GetDocumentContentRow(Int32 rowOrd, Object ospFileStmMgr, SPDocumentBindRequest& dbreq, SPDocumentBindResults& dbres)
at Microsoft.SharePoint.Library.SPRequestInternalClass.GetFileAndMetaInfo(String bstrUrl, Byte bPageView, Byte bPageMode, Byte bGetBuildDependencySet, String bstrCurrentFolderUrl, Int32 iRequestVersion, Byte bMainFileRequest, Boolean& pbCanCustomizePages,
Boolean& pbCanPersonalizeWebParts, Boolean& pbCanAddDeleteWebParts, Boolean& pbGhostedDocument, Boolean& pbDefaultToPersonal, Boolean& pbIsWebWelcomePage, String& pbstrSiteRoot, Guid& pgSiteId, UInt32& pdwVersion, String&
pbstrTimeLastModified, String& pbstrContent, UInt32& pdwPartCount, Object& pvarMetaData, Object& pvarMultipleMeetingDoclibRootFolders, String& pbstrRedirectUrl, Boolean& pbObjectIsList, Guid& pgListId, UInt32& pdwItemId, Int64&
pllListFlags, Boolean& pbAccessDenied, Guid& pgDocid, Byte& piLevel, UInt64& ppermMask, Object& pvarBuildDependencySet, UInt32& pdwNumBuildDependencies, Object& pvarBuildDependencies, String& pbstrFolderUrl, String& pbstrContentTypeOrder,
Guid& pgDocScopeId)
at Microsoft.SharePoint.Library.SPRequestInternalClass.GetFileAndMetaInfo(String bstrUrl, Byte bPageView, Byte bPageMode, Byte bGetBuildDependencySet, String bstrCurrentFolderUrl, Int32 iRequestVersion, Byte bMainFileRequest, Boolean& pbCanCustomizePages,
Boolean& pbCanPersonalizeWebParts, Boolean& pbCanAddDeleteWebParts, Boolean& pbGhostedDocument, Boolean& pbDefaultToPersonal, Boolean& pbIsWebWelcomePage, String& pbstrSiteRoot, Guid& pgSiteId, UInt32& pdwVersion, String&
pbstrTimeLastModified, String& pbstrContent, UInt32& pdwPartCount, Object& pvarMetaData, Object& pvarMultipleMeetingDoclibRootFolders, String& pbstrRedirectUrl, Boolean& pbObjectIsList, Guid& pgListId, UInt32& pdwItemId, Int64&
pllListFlags, Boolean& pbAccessDenied, Guid& pgDocid, Byte& piLevel, UInt64& ppermMask, Object& pvarBuildDependencySet, UInt32& pdwNumBuildDependencies, Object& pvarBuildDependencies, String& pbstrFolderUrl, String& pbstrContentTypeOrder,
Guid& pgDocScopeId)
at Microsoft.SharePoint.Library.SPRequest.GetFileAndMetaInfo(String bstrUrl, Byte bPageView, Byte bPageMode, Byte bGetBuildDependencySet, String bstrCurrentFolderUrl, Int32 iRequestVersion, Byte bMainFileRequest, Boolean& pbCanCustomizePages, Boolean&
pbCanPersonalizeWebParts, Boolean& pbCanAddDeleteWebParts, Boolean& pbGhostedDocument, Boolean& pbDefaultToPersonal, Boolean& pbIsWebWelcomePage, String& pbstrSiteRoot, Guid& pgSiteId, UInt32& pdwVersion, String& pbstrTimeLastModified,
String& pbstrContent, UInt32& pdwPartCount, Object& pvarMetaData, Object& pvarMultipleMeetingDoclibRootFolders, String& pbstrRedirectUrl, Boolean& pbObjectIsList, Guid& pgListId, UInt32& pdwItemId, Int64& pllListFlags, Boolean&
pbAccessDenied, Guid& pgDocid, Byte& piLevel, UInt64& ppermMask, Object& pvarBuildDependencySet, UInt32& pdwNumBuildDependencies, Object& pvarBuildDependencies, String& pbstrFolderUrl, String& pbstrContentTypeOrder, Guid&
pgDocScopeId)
at Microsoft.SharePoint.SPWeb.GetWebPartPageContent(Uri pageUrl, Int32 pageVersion, PageView requestedView, HttpContext context, Boolean forRender, Boolean includeHidden, Boolean mainFileRequest, Boolean fetchDependencyInformation, Boolean& ghostedPage,
String& siteRoot, Guid& siteId, Int64& bytes, Guid& docId, UInt32& docVersion, String& timeLastModified, Byte& level, Object& buildDependencySetData, UInt32& dependencyCount, Object& buildDependencies, SPWebPartCollectionInitialState&
initialState, Object& oMultipleMeetingDoclibRootFolders, String& redirectUrl, Boolean& ObjectIsList, Guid& listId)
at Microsoft.SharePoint.ApplicationRuntime.SPRequestModuleData.FetchWebPartPageInformationForInit(HttpContext context, SPWeb spweb, Boolean mainFileRequest, String path, Boolean impersonate, Boolean& isAppWeb, Boolean& fGhostedPage, Guid& docId,
UInt32& docVersion, String& timeLastModified, SPFileLevel& spLevel, String& masterPageUrl, String& customMasterPageUrl, String& webUrl, String& siteUrl, Guid& siteId, Object& buildDependencySetData, SPWebPartCollectionInitialState&
initialState, String& siteRoot, String& redirectUrl, Object& oMultipleMeetingDoclibRootFolders, Boolean& objectIsList, Guid& listId, Int64& bytes)
at Microsoft.SharePoint.ApplicationRuntime.SPRequestModuleData.GetWebPartPageData(HttpContext context, String path, Boolean throwIfFileNotFound)
at Microsoft.SharePoint.ApplicationRuntime.SPVirtualPathProvider.GetCacheKey(String virtualPath)
at System.Web.Compilation.BuildManager.GetVPathBuildResultFromCacheInternal(VirtualPath virtualPath, Boolean ensureIsUpToDate)
at System.Web.Compilation.BuildManager.GetVPathBuildResultInternal(VirtualPath virtualPath, Boolean noBuild, Boolean allowCrossApp, Boolean allowBuildInPrecompile, Boolean throwIfNotFound, Boolean ensureIsUpToDate)
at System.Web.Compilation.BuildManager.GetVPathBuildResultWithNoAssert(HttpContext context, VirtualPath virtualPath, Boolean noBuild, Boolean allowCrossApp, Boolean allowBuildInPrecompile, Boolean throwIfNotFound, Boolean ensureIsUpToDate)
at System.Web.Compilation.BuildManager.GetVPathBuildResult(HttpContext context, VirtualPath virtualPath, Boolean noBuild, Boolean allowCrossApp, Boolean allowBuildInPrecompile, Boolean ensureIsUpToDate)
at System.Web.UI.MasterPage.CreateMaster(TemplateControl owner, HttpContext context, VirtualPath masterPageFile, IDictionary contentTemplateCollection)
at System.Web.UI.Page.ApplyMasterPage()
at System.Web.UI.Page.PerformPreInit()
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at System.Web.HttpApplication.PipelineStepManager.ResumeSteps(Exception error)
at System.Web.HttpApplication.BeginProcessRequestNotification(HttpContext context, AsyncCallback cb)
at System.Web.HttpRuntime.ProcessRequestNotificationPrivate(IIS7WorkerRequest wr, HttpContext context)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)
at System.Web.Hosting.UnsafeIISMethods.MgdIndicateCompletion(IntPtr pHandler, RequestNotificationStatus& notificationStatus)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotificationHelper(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
at System.Web.Hosting.PipelineRuntime.ProcessRequestNotification(IntPtr rootedObjectsPointer, IntPtr nativeRequestContext, IntPtr moduleData, Int32 flags)
5/7/2013 00:31:44:69   App Pool: MySites   0x1DC8   SharePoint Foundation   Files   aiv4w   Medium   4001199c-6bd8-c03d-920f-55177fbff00c
Spent 0 ms to bind 33542 byte file stream
5/7/2013 00:31:44:72   App Pool: MySites   0x1DC8   SharePoint Portal Server   User Profiles   ai7z6   High   4001199c-6bd8-c03d-920f-55177fbff00c
User was not successfully retrieved: i:0#.w|DOMAIN\AUSER in ProfileUI.OnInit. Seeing if this is a system account
5/7/2013 00:31:44:72   App Pool: MySites   0x1DC8   SharePoint Portal Server   User Profiles   ai7z7   High   4001199c-6bd8-c03d-920f-55177fbff00c
User i:0#.w|DOMAIN\AUSER not found and not a system account.
5/7/2013 00:31:44:72   App Pool: MySites   0x1DC8   SharePoint Portal Server   User Profiles   ahn7m   Unexpected   4001199c-6bd8-c03d-920f-55177fbff00c
ProfileUI: Unhandled exception inside OnInit: Microsoft.Office.Server.UserProfiles.UserNotFoundException: DOMAIN\AUSER
at Microsoft.SharePoint.Portal.WebControls.ProfileUI.OnInit(EventArgs e)
5/7/2013 00:31:44:72   App Pool: MySites   0x1DC8   SharePoint Portal Server   User Profiles   ahn7h   Unexpected   4001199c-6bd8-c03d-920f-55177fbff00c
ProfileEditor: Unhandled exception inside OnInit: Microsoft.Office.Server.UserProfiles.UserNotFoundException: DOMAIN\AUSER
at Microsoft.SharePoint.Portal.WebControls.ProfileUI.OnInit(EventArgs e)
at Microsoft.SharePoint.Portal.WebControls.ProfileEditor.OnInit(EventArgs e)
5/7/2013 00:31:44:72   App Pool: MySites   0x1DC8   SharePoint Foundation   General   8nca   Medium   4001199c-6bd8-c03d-920f-55177fbff00c
Application error when access /_layouts/15/EditProfile.aspx, Error=DOMAIN\AUSER
at Microsoft.SharePoint.Portal.WebControls.ProfileUI.OnInit(EventArgs e)
at Microsoft.SharePoint.Portal.WebControls.ProfileEditor.OnInit(EventArgs e)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
5/7/2013 00:31:44:72   App Pool: MySites   0x1DC8   SharePoint Foundation   Runtime   tkau   Unexpected   4001199c-6bd8-c03d-920f-55177fbff00c
Microsoft.Office.Server.UserProfiles.UserNotFoundException: DOMAIN\AUSER
at Microsoft.SharePoint.Portal.WebControls.ProfileUI.OnInit(EventArgs e)
at Microsoft.SharePoint.Portal.WebControls.ProfileEditor.OnInit(EventArgs e)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
5/7/2013 00:31:44:72   App Pool: MySites   0x1DC8   SharePoint Foundation   General   ajlz0   High   4001199c-6bd8-c03d-920f-55177fbff00c
Getting Error Message for Exception System.Web.HttpUnhandledException (0x80004005): Exception of type 'System.Web.HttpUnhandledException' was thrown. ---> Microsoft.Office.Server.UserProfiles.UserNotFoundException: DOMAIN\AUSER
at Microsoft.SharePoint.Portal.WebControls.ProfileUI.OnInit(EventArgs e)
at Microsoft.SharePoint.Portal.WebControls.ProfileEditor.OnInit(EventArgs e)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Control.InitRecursive(Control namingContainer)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.HandleError(Exception e)
at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at System.Web.UI.Page.ProcessRequest()
at System.Web.UI.Page.ProcessRequest(HttpContext context)
at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
5/7/2013 00:31:44:72   App Pool: MySites   0x1DC8   SharePoint Foundation   General   aat87   Monitorable   4001199c-6bd8-c03d-920f-55177fbff00c
5/7/2013 00:31:44:73   App Pool: MySites   0x1DC8   SharePoint Foundation   Monitoring   b4ly   Medium   4001199c-6bd8-c03d-920f-55177fbff00c
Leaving Monitored Scope (Request (GET:http://mysite.DOMAIN.loc:80/_layouts/15/EditProfile.aspx?UserSettingsProvider=234bf0ed%2D70db%2D4158%2Da332%2D4dfd683b4148&ReturnUrl=http%3A%2F%2Fmysite%2EDOMAIN%2Eloc%2Fperson%2Easpx%3Faccountname%3DDOMAIN%255CAUSER&accountname=DOMAIN%5CAUSER)).
Execution Time=87.1739285300227
It seems similar to an issue in the blog post here: http://kb4sp.wordpress.com/2012/12/05/user-cannot-be-found-shenanigans-one-way-active-directory-trusts-and-sharepoint-2013/ however I tried what was suggested and it didn't work.
Any help with this is appriciated.

This line offers clues about the actual problem:
Microsoft.Office.Server.UserProfiles.UserNotFoundException: DOMAIN\AUSER
According to the MSDN link (http://msdn.microsoft.com/en-us/library/microsoft.office.server.userprofiles.usernotfoundexception.aspx)
it is not able to find the user in the profile store. Additionally the link you mentioned (http://kb4sp.wordpress.com/2012/12/05/user-cannot-be-found-shenanigans-one-way-active-directory-trusts-and-sharepoint-2013)
suggests that the account being used to validate accounts on the production domain may have a problem.
If there a way you can test that account in isolation against the DC?
With Regards Shailen Sukul Entrepreneur/Software Architect/Developer/Consultant/Trainer (BSc | Mct | Mcpd (.Net 2/3.5/SharePoint2010) | Mcts (Sharepoint 2010/MOSS/WSS), Biztalk, Web, Win, Dist Apps) | Mcitp(SharePoint) | Mcsd.NET | Mcsd | Mcad) MSN | Skype
| GTalk Id: shailensukul Twitter: http://twitter.com/shailensukul Website: http://sukul.org Blog: http://shailen.sukul.org/ http://www.linkedin.com/in/shailensukul

User profile synchronization service wont start after SharePoint Service pack SP2

Hi
-Using SharePoint 2010 with 1 appserver and 2 frontend webservers on Service Pack2. (ms server 2008r2, SQLServer2008r2).
-Farmaccount has been set to local admin on all sp servers.
-Firstly, the User Profile Service Application runs fine and is started. Dont mix it with the User profile synchronization Service.
Prior to installing SP2 User profile service application and user profile synchronization service were running fine.
The first thing I did after the installation of SP2 was running the:
-psconfig -cmd upgrade -inplace b2b -wait
As SharePoint setup user (spadmin).
This ran fine on the 2 front end web servers.
However i got one fault on the Appserver:
I have also tried:
PSConfig.exe -cmd upgrade -inplace b2b -force -cmd applicationcontent -install -cmd installfeatures
which led to same resulting error.
So I tried to start the Use profile synchronization service as suggested manually by logging on with the Farmaccount, starting the user profile synchronization service through Central Administration. This led to Stuck on Starting status.
The windows services Forefront had status starting, then stopped.
One question:
Prior to starting the User profile synchronization service through Central Administration. What account and startup status should the 2 Forefront Windows Services have? (Automatic and local system?) or (Automatic and Farmaccount?) or (Disabled and Local
system?) or (Disabled and farmaccount?). Because i know that SharePoint UPA will provision these services though Central Administration. However what is the default state prior to starting the Synchronization service?
So i continue...
Since it was stuck on starting i stopped it with:
stop-SPServiceInstance -identity <upaSyncguid>
which gave me:
Stop-SPServiceInstance : An object of the type Microsoft.SharePoint.Administrat
ion.SPServiceInstanceJobDefinition named "job-service-instance-36bdf2ef-58f2-45
e5-8f78-ab75f646611a" already exists under the parent Microsoft.SharePoint.Admi
nistration.SPTimerService named "SPTimerV4". Rename your object or delete the
and i could fix with:
#Stop the stopping:
stsadm -o provisionservice -action stop -servicetype "Microsoft.Office.Server.Administration.ProfileSynchronizationService, Microsoft.Office.Server.UserProfiles,
Version=14.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c" -servicename FIMSynchronizationService
I also removed the forefront certificate from personal - certificate store, as this is provisioned when user profile synchronization service is provisioned.
That set the Central Administration Status on the User profile synchronization Service to disabled. Fine.
Everytime i tried to start the user profile synchronization service (logged on as farmaccount), left it for 10-15 min and did iisreset and restart sharepoint timer service, and also tried rebooting the appserver. No change.
A thought, is it important to restart timer service and do iisreset on the two frontend servers after trying to start the user profile synchronization service on the appserver?
I'm getting to the point were i just want to delete the whole service application and set it up anew...
any tips will be greatly appreaciated.
brgs
Bjorn

You're very welcome, hope it helped, if not the I suggest you clear the configuration cache as follows.
The config cache is where config settings are stored locally on the Microsoft SharePoint server, so a SQL call isn’t required.
To clear the cache:
Stop the SP Timer service. To do this, follow these steps:
Click Start, point to Administrative Tools, and then click
Services.
Right-click SharePoint 2010 Timer, and then click Stop.
Close the Services console.
On the computer that is running Microsoft SharePoint Server 2010 and on which the Central Administration site is hosted, click
Start, click Run, type explorer, and then press ENTER.
In Windows Explorer, locate and then double-click the following folder:
%SystemDrive%\ProgramData\Microsoft\SharePoint\Config\GUID
Notes
The %SystemDrive% system variable specifies the letter of the drive on which Windows is installed. By default, Windows is installed on drive C.
The GUID placeholder specifies the GUID folder. There may be more than one of these.
The ProgramData folder may be hidden. To view the hidden folder, follow these steps:
On the Tools menu, click Folder Options.
Click the View tab.
In the Advanced settings list, click Show hidden files and folders under
Hidden files and folders, and then click OK.
You can also simply type this directly in the path if you do not want to show hidden files and folders.
Back up the Cache.ini file. (Make a copy of it. DO NOT DELETE THIS FILE, Only the XML files in the next step)
Delete all the XML configuration files in the GUID folder (DO NOTE DELETE THE FOLDER). Do this so that you can verify that the GUID folders content is replaced by new XML configuration files when the cache is rebuilt.
Note When you empty the configuration cache in the GUID folder, make sure that you
do NOT delete the GUID folder and the Cache.ini file that is located in the GUID folder.
Double-click the Cache.ini file.
On the Edit menu, click Select All.
On the Edit menu, click Delete.
Type 1, and then click Save on the
File menu. (Basically when you are done, the only text in the config.ini file should be the number 1)
On the File menu, click Exit.
Start the Timer service. To do this, follow these steps:
Click Start, point to Administrative Tools, and then click
Services.
Right-click SharePoint 2010 Timer, and then click Start.
Close the Services console.
Note The file system cache is re-created after you perform this procedure. Make sure that you perform this procedure on all servers in the server farm.
Make sure that the Cache.ini file in the GUID folder now contains its previous value. For example, make sure that the value of the Cache.ini file is not 1.
Check in the GUID folder to make sure that the xml files are repopulating. This may take a bit of time.
BRGS
Mishagri

SharePoint 2013 User Profile Synchronization service problem

After one week trying (three clean installs of SharePoint 2013), I haven't succeed to start "User Profile Synchronization service".
Environment:
Domain environment with two Windows Server 2012 R2 domain controllers.
Fully qualified domain name matches NetBIOS name (domain.com - DOMAIN)
Two tiers: SQL Server 2014 enterprise on Windows Server 2012 R2, and SharePoint 2013 SP1 on Windows Server 2012 R2.
I'm using named SQL instance for SharePoint (<SQLSRV>\<SHAREPOINT>), and SQL alias on SharePoint app server.
All SharePoint prerequisites are installed successfully.
SharePoint 2013 is installed successfully.
Hotfix 2760265 is installed (before configuring SharePoint)
SharePoint is configured successfully
Preparing MySites host:
MySites web application is created with separate AppPool, and with address https://my.domain.com.
Certificate used is wild-card cert (*.domain.com), issued by trusted local PKI
Managed path "personal" is created
Site collection of type "My Sites Host" is created at root path
"Self-Service Site Creation" is enabled for https://my.domain.com web application
Farm account permissions:
Local admin at SharePoint application server
"Log on locally" at SharePoint application server
"Replicate Directory Changes" at domain level
I've even tried with adding farm account into domain admins group :)
After trying to to start user profile synchronization service, service is in "starting" state about 5-10 min, and then returns to "stopped" state.
ULS log shows the following exceptions:
ILM Configuration: Error 'ERR_CONFIG_DB'
UserProfileApplication.SynchronizeMIIS: Failed to configure MIIS post database, will attempt during next return. Exception: System.Configuration.ConfigurationErrorsException: ERR_CONFIG_DB
UserProfileApplication.SynchronizeMIIS: Failed to configure MIIS post database, will attempt during next return. Exception: System.NullReferenceException: Object reference not set to an instance of an object
Event viewer log:
Event ID 6398, The Execute method of job definition Microsoft.Office.Server.UserProfiles.LMTRepopulationJob (ID <guid>) threw an exception. Unexpected exception in FeedCacheService.BulkLMTUpdate: Region not found..
some perfnet event id 2004 errors
Troubleshooting:
I've tried with clearing configuration cache
Assigning farm account to domain admins group
Installing form scratch three times, and thousand times from different checkpoints...
I've saw 'ERR_CONFIG_DB' like million times, but never "Started" next to "User Profile Synchronization service". Does anyone has actually succeeded to start this service? :)
I would really appreciate any help. Thanks!
P.S. I can't stop asking myself is it was really necessary to develop such complex, problematic, and log-tells-nothing software just for getting user info from AD? Honestly, after more then decade experience as software developer and software architect -
I must say I doubt...
Fat Dragon

The full packages are available:
http://blogs.technet.com/b/stefan_gossner/archive/2014/05/08/april-2014-cu-for-sharepoint-2013-has-finally-been-released.aspx
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

User Profile DS_Export

Similar Messages

Maybe you are looking for