Member_2_6492660_1
asked on
Sharepoint 2010 Add-Spprofilleader failed User has a Manager
SharePoint 2010 SP2 64 bit Farm
Windows 2012 R2 64 Bit
Windows 2003 Active Directory Domain
Trying to add another profile leader using the command below. I have added another profile leader successfully
But for some reason this account thinks it has a manager
PS C:\> $upaproxy = get-spserviceapplicationpr oxy 898a761d-8bf1-4bdd-bd7c-9e e19838906d
PS C:\> Add-SPProfileLeader -ProfileServiceApplication Proxy $upaProxy -Name "mydom\spfarm"
Confirm
Are you sure you want to perform this action?
Performing operation "Add-SPProfileLeader" on Target "mydom\spfarm".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help
(default is "Y"):y
Failed. User 'mydom\spfarm' has a manager.
PS C:\>
I ran a powershell AD queury
PS C:> Get-ADUser -Filter * -Properties * | Select Name, Enabled, PasswordExpired, Manager, MemberOf | Export-Csv "c:\AllUsers.csv"
PS C:>
It also showed a blank Manager field.
At one point this account did have a manager assigned but I removed it from using the AD interface.
Any thoughts?
Windows 2012 R2 64 Bit
Windows 2003 Active Directory Domain
Trying to add another profile leader using the command below. I have added another profile leader successfully
But for some reason this account thinks it has a manager
PS C:\> $upaproxy = get-spserviceapplicationpr
PS C:\> Add-SPProfileLeader -ProfileServiceApplication
Confirm
Are you sure you want to perform this action?
Performing operation "Add-SPProfileLeader" on Target "mydom\spfarm".
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help
(default is "Y"):y
Failed. User 'mydom\spfarm' has a manager.
PS C:\>
I ran a powershell AD queury
PS C:> Get-ADUser -Filter * -Properties * | Select Name, Enabled, PasswordExpired, Manager, MemberOf | Export-Csv "c:\AllUsers.csv"
PS C:>
It also showed a blank Manager field.
At one point this account did have a manager assigned but I removed it from using the AD interface.
Any thoughts?
ASKER
Update
The Event Id 6398 appears daily at 1:00 AM from this Timer Job
User Profile Service Application - User Profile Incremental Synchronization
Maybe this will help
The Event Id 6398 appears daily at 1:00 AM from this Timer Job
User Profile Service Application - User Profile Incremental Synchronization
Maybe this will help
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Martshu
Which service I have two FIM
PS C:\Users\administrator> get-service -name fim* |fl
Name : FIMService
DisplayName : Forefront Identity Manager Service
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : True
CanStop : True
ServiceType : Win32OwnProcess
Name : FIMSynchronizationService
DisplayName : Forefront Identity Manager Synchronization Service
Status : Stopped
DependentServices : {}
ServicesDependedOn : {winmgmt}
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
ServiceType : Win32OwnProcess
Which one?
Which service I have two FIM
PS C:\Users\administrator> get-service -name fim* |fl
Name : FIMService
DisplayName : Forefront Identity Manager Service
Status : Running
DependentServices : {}
ServicesDependedOn : {}
CanPauseAndContinue : False
CanShutdown : True
CanStop : True
ServiceType : Win32OwnProcess
Name : FIMSynchronizationService
DisplayName : Forefront Identity Manager Synchronization Service
Status : Stopped
DependentServices : {}
ServicesDependedOn : {winmgmt}
CanPauseAndContinue : False
CanShutdown : False
CanStop : False
ServiceType : Win32OwnProcess
Which one?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Martshu
And it is stopped on your server! Should be running.
Check in Central Admin services if both UPS services are running.
Ok got it Made that change and now both FIM services are running on Server
Both UPS servies are running in Central Admin services
Now I am getting Event ID 3 and Event ID 234 over and over
Log Name: Application
Source: FIMSynchronizationService
Date: 7/2/2015 8:36:44 AM
Event ID: 2001
Task Category: Server
Level: Information
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
The service was started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="FIMSynchronizationSe rvice" />
<EventID Qualifiers="16384">2001</E ventID>
<Level>4</Level>
<Task>6</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 36:44.0000 00000Z" />
<EventRecordID>27988</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
</EventData>
</Event>
Log Name: Application
Source: ILM Web Service Configuration
Date: 7/2/2015 8:36:48 AM
Event ID: 234
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
ILM Certificate could not be created: Cert step 2 could not be created: C:\Program Files\Microsoft Office Servers\14.0\Tools\MakeCer t.exe -pe -sr LocalMachine -ss My -a sha1 -n CN="ForefrontIdentityManag er" -sky exchange -pe -in "ForefrontIdentityManager" -ir localmachine -is root
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ILM Web Service Configuration" />
<EventID Qualifiers="0">234</EventI D>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 36:48.0000 00000Z" />
<EventRecordID>27989</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>ILM Certificate could not be created: Cert step 2 could not be created: C:\Program Files\Microsoft Office Servers\14.0\Tools\MakeCer t.exe -pe -sr LocalMachine -ss My -a sha1 -n CN="ForefrontIdentityManag er" -sky exchange -pe -in "ForefrontIdentityManager" -ir localmachine -is root</Data>
</EventData>
</Event>
Log Name: Application
Source: ILM Web Service Configuration
Date: 7/2/2015 8:36:49 AM
Event ID: 234
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
ILM Certificate could not be created: netsh http error:netsh http add urlacl url=http://+:5725/ user=OUR\spfarm sddl=D:(A;;GA;;;S-1-5-21-3 054588571- 1341459584 -784128302 -3142)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ILM Web Service Configuration" />
<EventID Qualifiers="0">234</EventI D>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 36:49.0000 00000Z" />
<EventRecordID>27990</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>ILM Certificate could not be created: netsh http error:netsh http add urlacl url=http://+:5725/ user=OUR\spfarm sddl=D:(A;;GA;;;S-1-5-21-3 054588571- 1341459584 -784128302 -3142)</Da ta>
</EventData>
</Event>
Log Name: Application
Source: ILM Web Service Configuration
Date: 7/2/2015 8:36:49 AM
Event ID: 234
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
ILM Certificate could not be created: netsh http error:netsh http add urlacl url=http://+:5726/ user=OUR\spfarm sddl=D:(A;;GA;;;S-1-5-21-3 054588571- 1341459584 -784128302 -3142)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ILM Web Service Configuration" />
<EventID Qualifiers="0">234</EventI D>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 36:49.0000 00000Z" />
<EventRecordID>27991</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>ILM Certificate could not be created: netsh http error:netsh http add urlacl url=http://+:5726/ user=OUR\spfarm sddl=D:(A;;GA;;;S-1-5-21-3 054588571- 1341459584 -784128302 -3142)</Da ta>
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:37:16 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
System.Data.ConstraintExce ption: Schema validation failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 37:16.0000 00000Z" />
<EventRecordID>27994</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>System.Data.Constrai ntExceptio n: Schema validation failed.</Data>
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:37:16 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
Microsoft.ResourceManageme nt: System.Data.ConstraintExce ption: Schema validation failed.
at Microsoft.ResourceManageme nt.Utiliti es.Excepti onManager. ThrowExcep tion(Excep tion exception)
at Microsoft.ResourceManageme nt.ActionP rocessor.A ctionDispa tcher.Proc essInputRe quest(Requ estType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action(Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action[Res ponseBodyT ype](Reque stType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request, Guid requestIdentifier, Object redispatchSingleInstanceKe y)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Resou rceManagem entService .Create(Me ssage request)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 37:16.0000 00000Z" />
<EventRecordID>27995</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>Microsoft.ResourceMa nagement: System.Data.ConstraintExce ption: Schema validation failed.
at Microsoft.ResourceManageme nt.Utiliti es.Excepti onManager. ThrowExcep tion(Excep tion exception)
at Microsoft.ResourceManageme nt.ActionP rocessor.A ctionDispa tcher.Proc essInputRe quest(Requ estType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action(Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action[Res ponseBodyT ype](Reque stType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request, Guid requestIdentifier, Object redispatchSingleInstanceKe y)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Resou rceManagem entService .Create(Me ssage request)</Data>
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:38:01 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
System.Data.ConstraintExce ption: Schema validation failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 38:01.0000 00000Z" />
<EventRecordID>27996</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>System.Data.Constrai ntExceptio n: Schema validation failed.</Data>
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:38:01 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
Microsoft.ResourceManageme nt: System.Data.ConstraintExce ption: Schema validation failed.
at Microsoft.ResourceManageme nt.Utiliti es.Excepti onManager. ThrowExcep tion(Excep tion exception)
at Microsoft.ResourceManageme nt.ActionP rocessor.A ctionDispa tcher.Proc essInputRe quest(Requ estType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action(Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action[Res ponseBodyT ype](Reque stType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request, Guid requestIdentifier, Object redispatchSingleInstanceKe y)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Resou rceManagem entService .Create(Me ssage request)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 38:01.0000 00000Z" />
<EventRecordID>27997</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>Microsoft.ResourceMa nagement: System.Data.ConstraintExce ption: Schema validation failed.
at Microsoft.ResourceManageme nt.Utiliti es.Excepti onManager. ThrowExcep tion(Excep tion exception)
at Microsoft.ResourceManageme nt.ActionP rocessor.A ctionDispa tcher.Proc essInputRe quest(Requ estType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action(Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action[Res ponseBodyT ype](Reque stType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request, Guid requestIdentifier, Object redispatchSingleInstanceKe y)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Resou rceManagem entService .Create(Me ssage request)</Data>
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:39:01 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
System.Data.ConstraintExce ption: Schema validation failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 39:01.0000 00000Z" />
<EventRecordID>27998</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>System.Data.Constrai ntExceptio n: Schema validation failed.</Data>
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:39:01 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
Microsoft.ResourceManageme nt: System.Data.ConstraintExce ption: Schema validation failed.
at Microsoft.ResourceManageme nt.Utiliti es.Excepti onManager. ThrowExcep tion(Excep tion exception)
at Microsoft.ResourceManageme nt.ActionP rocessor.A ctionDispa tcher.Proc essInputRe quest(Requ estType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action(Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action[Res ponseBodyT ype](Reque stType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request, Guid requestIdentifier, Object redispatchSingleInstanceKe y)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Resou rceManagem entService .Create(Me ssage request)
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-02T12: 39:01.0000 00000Z" />
<EventRecordID>27999</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>Microsoft.ResourceMa nagement: System.Data.ConstraintExce ption: Schema validation failed.
at Microsoft.ResourceManageme nt.Utiliti es.Excepti onManager. ThrowExcep tion(Excep tion exception)
at Microsoft.ResourceManageme nt.ActionP rocessor.A ctionDispa tcher.Proc essInputRe quest(Requ estType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action(Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Execute Action[Res ponseBodyT ype](Reque stType request)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request, Guid requestIdentifier, Object redispatchSingleInstanceKe y)
at Microsoft.ResourceManageme nt.WebServ ices.Reque stDispatch er.Dispatc hRequest[R esponseBod yType](Req uestType request)
at Microsoft.ResourceManageme nt.WebServ ices.Resou rceManagem entService .Create(Me ssage request)</Data>
</EventData>
</Event>
What missing?
Thanks
And it is stopped on your server! Should be running.
Check in Central Admin services if both UPS services are running.
Ok got it Made that change and now both FIM services are running on Server
Both UPS servies are running in Central Admin services
Now I am getting Event ID 3 and Event ID 234 over and over
Log Name: Application
Source: FIMSynchronizationService
Date: 7/2/2015 8:36:44 AM
Event ID: 2001
Task Category: Server
Level: Information
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
The service was started successfully.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="FIMSynchronizationSe
<EventID Qualifiers="16384">2001</E
<Level>4</Level>
<Task>6</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27988</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
</EventData>
</Event>
Log Name: Application
Source: ILM Web Service Configuration
Date: 7/2/2015 8:36:48 AM
Event ID: 234
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
ILM Certificate could not be created: Cert step 2 could not be created: C:\Program Files\Microsoft Office Servers\14.0\Tools\MakeCer
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ILM Web Service Configuration" />
<EventID Qualifiers="0">234</EventI
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27989</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>ILM Certificate could not be created: Cert step 2 could not be created: C:\Program Files\Microsoft Office Servers\14.0\Tools\MakeCer
</EventData>
</Event>
Log Name: Application
Source: ILM Web Service Configuration
Date: 7/2/2015 8:36:49 AM
Event ID: 234
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
ILM Certificate could not be created: netsh http error:netsh http add urlacl url=http://+:5725/ user=OUR\spfarm sddl=D:(A;;GA;;;S-1-5-21-3
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ILM Web Service Configuration" />
<EventID Qualifiers="0">234</EventI
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27990</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>ILM Certificate could not be created: netsh http error:netsh http add urlacl url=http://+:5725/ user=OUR\spfarm sddl=D:(A;;GA;;;S-1-5-21-3
</EventData>
</Event>
Log Name: Application
Source: ILM Web Service Configuration
Date: 7/2/2015 8:36:49 AM
Event ID: 234
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
ILM Certificate could not be created: netsh http error:netsh http add urlacl url=http://+:5726/ user=OUR\spfarm sddl=D:(A;;GA;;;S-1-5-21-3
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="ILM Web Service Configuration" />
<EventID Qualifiers="0">234</EventI
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27991</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>ILM Certificate could not be created: netsh http error:netsh http add urlacl url=http://+:5726/ user=OUR\spfarm sddl=D:(A;;GA;;;S-1-5-21-3
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:37:16 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
System.Data.ConstraintExce
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27994</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>System.Data.Constrai
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:37:16 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27995</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>Microsoft.ResourceMa
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:38:01 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
System.Data.ConstraintExce
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27996</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>System.Data.Constrai
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:38:01 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27997</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>Microsoft.ResourceMa
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:39:01 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
System.Data.ConstraintExce
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27998</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>System.Data.Constrai
</EventData>
</Event>
Log Name: Application
Source: Forefront Identity Manager
Date: 7/2/2015 8:39:01 AM
Event ID: 3
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Forefront Identity Manager" />
<EventID Qualifiers="0">3</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-02T12:
<EventRecordID>27999</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>Microsoft.ResourceMa
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
at Microsoft.ResourceManageme
</EventData>
</Event>
What missing?
Thanks
ASKER
Martusha
Now I remember why that service was stopped it causes all the errors above
Any ideas on the Event Id 3 and 234?
Now I remember why that service was stopped it causes all the errors above
Any ideas on the Event Id 3 and 234?
Could you check ULS log for related issue? maybe there will be more explanation.
ASKER
Martusha
I found this for the 234 error
https://nanddeepnachantechtalks.wordpress.com/2012/05/30/sharepoint-2010-troubleshooting-user-profile-synchronization/
Going thru that now
Event 3 is the problem
Where are the ULS logs?
I found this for the 234 error
https://nanddeepnachantechtalks.wordpress.com/2012/05/30/sharepoint-2010-troubleshooting-user-profile-synchronization/
Going thru that now
Event 3 is the problem
Where are the ULS logs?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
ULS Log
07/02/2015 08:39:01.37 OWSTIMER.EXE (0x26E0) 0x2BC8 SharePoint Portal Server User Profiles a3y3 High UserProfileApplication.Syn chronizeMI IS: Error updating users with FIM permissions: Microsoft.ResourceManageme nt.WebServ ices.Fault s.ServiceF aultExcept ion: Unable to process Create message at Microsoft.ResourceManageme nt.WebServ ices.Clien t.Resource Template.C reateResou rce() at Microsoft.Office.Server.Ad ministrati on.UserPro fileApplic ation.Upda teFIMUser( SchemaMana ger schemaManager, String userName, String accountName, String domain, Byte[] userSid) at Microsoft.Office.Server.Ad ministrati on.UserPro fileApplic ation.Sync hronizeMII SAdminsLis t(Hashtabl e htPermittedUsers) at Microsoft.Office.Server.Ad ministrati on.UserPro fileApplic ation.Setu pProfileSy nchronizat ionEngineP ermissions (). ad58b42d-50df-4831-b915-e0 089b8f9186
I started FIM at 8:36 AM
Event Is3 could be if in central admin under UPS service applicaiton administrators are inserted AD users or groups wich has a blank somewhere in a name field of this account in AD.
Is this what you mean I see several Account names with blanks in them
What do we do about that
Sharepoint-Admin-for-UPS.png
07/02/2015 08:39:01.37 OWSTIMER.EXE (0x26E0) 0x2BC8 SharePoint Portal Server User Profiles a3y3 High UserProfileApplication.Syn
I started FIM at 8:36 AM
Event Is3 could be if in central admin under UPS service applicaiton administrators are inserted AD users or groups wich has a blank somewhere in a name field of this account in AD.
Is this what you mean I see several Account names with blanks in them
What do we do about that
Sharepoint-Admin-for-UPS.png
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Martusha
Page not found
bad link?
Page not found
bad link?
For me it is working. Coping from it:
After a lot of research, verbose logging, and the use of this usefull utility founded on Codeplex (FIMQueryTool - thanks a lot to the author), I was able to have more datail about the Failing Request.
The problem was related to a recently change of the permission of my SharePoint User Profile Service Application.
Basically I've garanted "Edit Profile permission" to a specific Active Directory Security Group.
This AD Security Group contains a blank in "PreWindows 2000 Name".
This blank was causing FIM Service to fail in validating Schema during the process of the Request related to this AD Group.
Removing the blank will fix everything.
Also the another related link http://sharepointholygrail.blogspot.com/2014/05/sharepoint-2010-user-profile-service.html
After a lot of research, verbose logging, and the use of this usefull utility founded on Codeplex (FIMQueryTool - thanks a lot to the author), I was able to have more datail about the Failing Request.
The problem was related to a recently change of the permission of my SharePoint User Profile Service Application.
Basically I've garanted "Edit Profile permission" to a specific Active Directory Security Group.
This AD Security Group contains a blank in "PreWindows 2000 Name".
This blank was causing FIM Service to fail in validating Schema during the process of the Request related to this AD Group.
Removing the blank will fix everything.
Also the another related link http://sharepointholygrail.blogspot.com/2014/05/sharepoint-2010-user-profile-service.html
I do not like your "sp farm" account with space...
ASKER
Should I rename all those account in Active Directory?
ASKER
Also the last link I can not open either
Also the another related link http://sharepointholygrail.blogspot.com/2014/05/sharepoint-2010-user-profile-service.html
Also the another related link http://sharepointholygrail.blogspot.com/2014/05/sharepoint-2010-user-profile-service.html
Is your spfarm account only have a display name with space, but username without space? Then I think you could fix that in AD. And also for "sharepoint service" . But if you have a usename with space, when renaming it could get to more problems with a sharepoint farm...
ASKER
Martusha
Update
I checked in Active Directory SP Farm that account has no spaces SPFARM the SP FARM is the Display Name
Same for Sharepointservice just the display name
Is that the problem
Should I change the display names?
Update
I checked in Active Directory SP Farm that account has no spaces SPFARM the SP FARM is the Display Name
Same for Sharepointservice just the display name
Is that the problem
Should I change the display names?
ASKER
Martusha
I changed all the display names now no spaces listed
I remove my account from the list too not needed.
This should take care of the 3 error correct?
What about the 234 error?
I changed all the display names now no spaces listed
I remove my account from the list too not needed.
This should take care of the 3 error correct?
What about the 234 error?
ASKER
Martusha
Upddate
Restarted the UPS and no Error 3 the blank display names was the issue.
Still getting event 234
Thoughts
Upddate
Restarted the UPS and no Error 3 the blank display names was the issue.
Still getting event 234
Thoughts
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Martusha
I saw that article in my research thanks
I will delete the FIM certificates then will see on next restart.
I did not get a 6398 last night so that error was because the FIM services were not started that one is ok not
I did get this error tho
Log Name: Application
Source: FIMSynchronizationService
Date: 7/3/2015 1:00:04 AM
Event ID: 6125
Task Category: Management Agent Run Profile
Level: Warning
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
The management agent "MOSS-a65b9b2e-c296-4f18-b 726-491009 168484" completed run profile "MOSS_DELTAIMPORT_61bcf4c0 -3d4b-4fca -a845-8aa0 e27595b3" with a delta import step type before completing a full import.
User Action
Run the management agent with a step type of full import.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="FIMSynchronizationSe rvice" />
<EventID Qualifiers="32768">6125</E ventID>
<Level>3</Level>
<Task>1</Task>
<Keywords>0x80000000000000 </Keywords >
<TimeCreated SystemTime="2015-07-03T05: 00:04.0000 00000Z" />
<EventRecordID>28332</Even tRecordID>
<Channel>Application</Chan nel>
<Computer>SERV013.FQDN.com </Computer >
<Security />
</System>
<EventData>
<Data>MOSS-a65b9b2e-c296-4 f18-b726-4 9100916848 4</Data>
<Data>MOSS_DELTAIMPORT_61b cf4c0-3d4b -4fca-a845 -8aa0e2759 5b3</Data>
</EventData>
</Event>
Run the management agent with a step type of full import.
How do I do this?
I saw that article in my research thanks
I will delete the FIM certificates then will see on next restart.
I did not get a 6398 last night so that error was because the FIM services were not started that one is ok not
I did get this error tho
Log Name: Application
Source: FIMSynchronizationService
Date: 7/3/2015 1:00:04 AM
Event ID: 6125
Task Category: Management Agent Run Profile
Level: Warning
Keywords: Classic
User: N/A
Computer: SERV013.FQDN.com
Description:
The management agent "MOSS-a65b9b2e-c296-4f18-b
User Action
Run the management agent with a step type of full import.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="FIMSynchronizationSe
<EventID Qualifiers="32768">6125</E
<Level>3</Level>
<Task>1</Task>
<Keywords>0x80000000000000
<TimeCreated SystemTime="2015-07-03T05:
<EventRecordID>28332</Even
<Channel>Application</Chan
<Computer>SERV013.FQDN.com
<Security />
</System>
<EventData>
<Data>MOSS-a65b9b2e-c296-4
<Data>MOSS_DELTAIMPORT_61b
</EventData>
</Event>
Run the management agent with a step type of full import.
How do I do this?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Martusha
No I only run the incremental sync that is what is scheduled I guess you need to run a full one first correct.
Also I was looking at the "Central Administration : Manage Profile Service: User Profile Service Application " and saw the Active Directory was not listed in the statistics see image attached.
Do I need to go here "Central Administration : Synchronization Connections " and create a new connection" for active directory"
Thoughts
Sharepoint-2010-User-Profile-Service-App
No I only run the incremental sync that is what is scheduled I guess you need to run a full one first correct.
Also I was looking at the "Central Administration : Manage Profile Service: User Profile Service Application " and saw the Active Directory was not listed in the statistics see image attached.
Do I need to go here "Central Administration : Synchronization Connections " and create a new connection" for active directory"
Thoughts
Sharepoint-2010-User-Profile-Service-App
ASKER
Guys
PS C:\> $upaproxy = get-spserviceapplicationpr oxy 898a761d-8bf1-4bdd-bd7c-9e e19838906d
PS C:\> Add-SPProfileLeader -ProfileServiceApplication Proxy $upaProxy -Name "mydom\spfarm"
Now worked
Had to create new connection
Central Administration : Synchronization Connections
setup SharePoint 2010 to talk to Active Directory.
Yes it needed a full sync also.
Had a few errors doing the full sync after I added this new connection
I will test later doing more sync's if the errors still happen then I will post new question.
We got it guys
PS C:\> $upaproxy = get-spserviceapplicationpr
PS C:\> Add-SPProfileLeader -ProfileServiceApplication
Now worked
Had to create new connection
Central Administration : Synchronization Connections
setup SharePoint 2010 to talk to Active Directory.
Yes it needed a full sync also.
Had a few errors doing the full sync after I added this new connection
I will test later doing more sync's if the errors still happen then I will post new question.
We got it guys
ASKER
Martusha
Thanks for all your help
Thanks for all your help
ASKER
Today I tried to run a profile Synchronization manually which it ran but I got these two errors
Log Name: Application
Source: Microsoft-SharePoint Products-SharePoint Foundation
Date: 6/16/2015 1:12:02 PM
Event ID: 6398
Task Category: Timer
Level: Critical
Keywords:
User: mydom\spfarm
Computer: serv013.fqdn.com
Description:
The Execute method of job definition Microsoft.Office.Server.Us
Operation is not valid due to the current state of the object.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-SharePoint
<EventID>6398</EventID>
<Version>14</Version>
<Level>1</Level>
<Task>12</Task>
<Opcode>0</Opcode>
<Keywords>0x40000000000000
<TimeCreated SystemTime="2015-06-16T17:
<EventRecordID>22480</Even
<Correlation ActivityID="{59159F8F-F409
<Execution ProcessID="12652" ThreadID="7980" />
<Channel>Application</Chan
<Computer>serv013.fqdn.com
<Security UserID="S-1-5-21-305458857
</System>
<EventData>
<Data Name="string0">Microsoft.O
<Data Name="string1">beb73004-85
<Data Name="string2">Operation is not valid due to the current state of the object.</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-SharePoint Products-Web Content Management
Date: 6/16/2015 1:12:36 PM
Event ID: 7362
Task Category: Publishing Cache
Level: Warning
Keywords:
User: mydom\spfarm
Computer: serv013.fqdn.com
Description:
Object Cache: The super user account utilized by the cache is not configured. This can increase the number of cache misses, which causes the page requests to consume unneccesary system resources.
To configure the account use the following command 'stsadm -o setproperty -propertyname portalsuperuseraccount -propertyvalue account -url webappurl'. The account should be any account that has Full Control access to the SharePoint databases but is not an application pool account.
Additional Data:
Current default super user account: SHAREPOINT\system
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-SharePoint
<EventID>7362</EventID>
<Version>14</Version>
<Level>3</Level>
<Task>1</Task>
<Opcode>0</Opcode>
<Keywords>0x40000000000000
<TimeCreated SystemTime="2015-06-16T17:
<EventRecordID>22481</Even
<Correlation ActivityID="{9A26ED6B-83C1
<Execution ProcessID="9608" ThreadID="3592" />
<Channel>Application</Chan
<Computer>serv013.fqdn.com
<Security UserID="S-1-5-21-305458857
</System>
<EventData>
<Data Name="string0">SHAREPOINT\
</EventData>
</Event>
Related ?