Provisioning The User Profile Service Application
As I wrote earlier, SharePoint 2010 ships with a profile synchronization engine from ForeFront Identity Manager. After performing several SharePoint 2010 environment installations, this seems also to be the most fragile part of the SharePoint 2010 architecture especially when using a least privileged accounts install model.
There are lots of content in the blogs and TechNet related to configuring user profile synchronization. In my experience, launching the services has to be done in the order described below. In most of the environments this is enough, but in some places I am still struggling to get this to work. The step 5 seems to be the most critical, as the FIM services create certificates and establish database connections, and there are several error-prone phases in that process.
1. Add the farm account into the local administrators group. This is stated in the TechNet article:
The Server Farm account, which is created during the SharePoint farm setup, must also be a member of the Administrators group on the server where the User Profile Synchronization service is deployed.
There seems to be some conflicting opinions about the correct permissions, as this will cause the SharePoint Health Analyzer to create a warning:
Accounts used by application pools or service identities are in the local machine Administrators group. Using highly-privileged accounts as application pool or as service identities poses a security risk to the farm, and could allow malicious code to execute.
Also grant the Replicate Directory Changes permission for the farm account account used in the synchronization connection. Reboot the server to make sure that all the services using the farm account run with the new privileges.
2. Start the User Profile System Service.
3. Create User Profile Service Application by using the wizard or PowerShell. Remember that you need to have a site collection for the My Site Host even when you do not plan to use my sites yet.
4. Set the farm account to have full control of the Service Application: select SA from the SA list and use Administrators and Permissions actions in the ribbon.
5. Launch User Profile Synchronization system service. It make take several minutes for the service to move from the starting stated to started state. The system service starts two Windows services with the farm account: first the ForeFront Identity Manager Synchronization Service and then the ForeFront Identity Manager service. While these are launched, monitor the event log to see any errors related to these two services and use the Internet resources to find the answers.
For example if you get a warning event 1004:
Detection of product ‘{90140000-104C-0000-1000-0000000FF1CE}’, feature ‘PeopleILM’, component ‘{1C12B6E6-898C-4D58-9774-AAAFBDFE273C}’ failed. The resource ‘C:\Program Files\Microsoft Office Servers\14.0\Service\Microsoft.ResourceManagement.Service.exe’ does not exist.
grant the Network Service account access to the folder C:\Program Files\Microsoft Office Servers\14.0 as described here.
6. After the system service is in the started state, you should be able to access the SA administration page and configure the profile synchronization according to TechNet. As described in my earlier post, the SharePoint will not update anything in the Active Directory by default even though the synchronization has the export stages as well. Also note that the profile synchronization in SharePoint 2010 takes several minutes compared to 2007 where it was usually a matter of seconds.
As the RTM celebrations are over and Microsoft starts to patch the brand new 2010, I expect the user profile -related binaries to be among the top priority components where the stability and quality should be improved. The first step should be to make the error messages more verbose.
Popularity: 17% [?]
医薬部外品の化粧品で、フェイス部分のほうれい線の問題を解消することができます。ホワイトニングリフトケアジェルは、多くの商品の中でもクチコミ評価が高いクリームです。アンチエイジングには定番のアイテムです。
Pretty section of content. I just stumbled upon your website and in accession capital to assert
that I acquire actually enjoyed account your blog posts. Any way I’ll be subscribing to your augment
and even I achievement you access consistently quickly.
Lắp đặt camera quan sát tại Camera.edu.vn
Terus berkarya ya, tulisannya enak di baca.
Well, this post is quite good! tree trimming
Я сейчас же кину в закладки ваш rss, поскольку я бессилен найти ваш e-mail hyperlink или newsletter.
Можно ли попросить ваши контакты?
Пожалуйста, разрешите мне общаться с вами для того, чтобы я
мог бы подписаться. Благодарю.
Лично я немедленно запишу ваш rss
адрес, поскольку я бессилен отыскать ваш
e-mail link или e-newsletter. Можно ли попросить ваши контакты?
Будьте добры, разрешите мне переговорить с вами для того, чтобы я мог
бы подписаться. Благодарю.
6. В интернет-казино большое разнообразие
игр.
Heｒe is my web page Esmeralda
Visit ao hure frankfurt for your own free sexy chat pleasure with hot young local ladies!
Thanks for sharing your info. I truly appreciate your efforts and I
am waiting for your further post thanks once again.
I truly appreciate your efforts and I
am waiting for your further post thanks once agai komiya-dental
With our handy online scheduling and truthful pricing, we’re right here to assist.
By shopping on-line, you get rid of all of this frustration
I acquire actually enjoyed account your blog posts. Any way I’ll be subscribing to your augment
and even I achievement
this is among the so much important information for
me. And i’m glad studying your article. But should statement
on some common issues
я немедленно запишу ваш rss
адрес, поскольку я бессилен отыскать ваш
e-mail link или e-newsletter. Можно ли попросить ваши контакты?
Будьте добры, разрешите мне переговорить с вами для того, чтобы я мог
бы подписаться.
поскольку я бессилен отыскать ваш
Можно ли попросить ваши контакты?
Будьте добры
I was able to look for word ‘Example’ in the Title field. FullTextSqlQuery uses managed properties in its queries and in the example query Title is an managed property. You can also easily create cus
The system service starts two Windows services with the farm account: first the ForeFront Identity Manager Synchronization Service and then the ForeFront Identity Manager service. While these are la sleepypoetstuff
SharePoint site structure hierarchy is document or item. Document and item permissions can also be granted just like you did with structures above that
сейчас же кину в закладки ваш rss, поскольку я бессилен найти ваш e-mail hyperlink или newsletter.
Можно ли попросить ваши контакты?
Пожалуйста, разрешите мне общаться с вами для того, чтобы я
мог бы подписаться. Б
Make it for other 2 approaches
Oye tu, si tu no le toques a mas informacion o leer mas!Bueno..
Que tengas un gran dia!
Rijpe oma is de beste plaats om lokale vrouwen te ontmoeten. Onze vrouwen houden van snel daten en het duurt niet lang om intieme gesprekken te voeren met lokale vrouwen en klaar te zijn om je drooglegging te beëindigen.
Sex vas zagotovo ne bo razočaral. Pridružitev je brezplačna, a ko ustvarite račun in se poglobite pod površje, boste navdušeni nad vso ponudbo. Skupnost vam bo razplamtela ljubezen, saj je vsak stik kot iskanje nečesa sproščenega in lahkotnega.
Sex Rapperswil ist der Ort, an dem man nach Sex sucht. Menschen suchen Sex an verschiedenen Orten. Manche gehen in Bars und Clubs, andere nehmen den ersten Kontakt bei anderen gesellschaftlichen Anlässen auf. Aber der beste Ort, um nach Fickfreunden zu suchen, ist online.
The 10 Most Scariest Things About Ticktok Pornstars ticktok Pornstars
See What Porn Star Kayleigh Wanless Tricks The Celebs Are Using porn star kayleigh wanless