Can you please brief me in what scenarios we go for ADFS in SharePoint 2013.

We have external users for them we create accounts in our AD and then provide access to SP. I am not sure if external users directory is LDAP or Windows AD. Please explain in detail if ADFS can be leveraged in this scenario to provide access to external users to our internal domain SharePoint site. Or in other words in which scenario ADFS will come into picture.

Most of the blogs talks about how to configure ADFS but not explained in what scenario and why it has been implemented.

Thanks, Ram Ch

Hello ,

We recently installed some updates for SharePoint 2013 Foundation.

Everything is working fine except forindividual permissions on list items in a SharePoint 2013 look and feel site collection.

We get the popup window with the permissions but the screen keeps loading endlessly.

Individual permission on a document library items work fine.

Indvidual permissions on list items in a SharePoint 2010 look and feel site collection also work.

Before we installed de updates (which there is no uninstaller for) everything worked fine. I think these problems begun after installing SP1.

Ideas anyone ?

Thanks

Steve

I have done Customized branding on Sharepoint online sign in page as mentioned below, but its been a day and its not reflecting..whats the issue??

https://msdn.microsoft.com/en-us/library/azure/dn532270.aspx?f=255&MSPPError=-2147217396

Hello,

I am aware variations of this question appear all over the place on multiple forums, however none I can find seem to address this specific scenario.

We have a SharePoint 2013 SP1 farm published via Server 2012 Web Application Proxy with ADFS 3.0 pre-authentication. Users connect via IE with SharePoint Office integration enabled. Internal users are able to connect on either HTTP or HTTPS via AAMs, external users are for obvious reasons only able to connect to SharePoint via HTTPS through the WAP.

• Internal domain users can open and edit documents from document libraries seamlessly in Office 2010/2013 as one would expect.
• Internal non-domain users are given an NTLM prompt on connection to when attempting to open each new document from a document library. (Done to attempt to rule out the Web Application Proxy as the cause)
• External users, both domain connected and non-domain connected receive an browser style ADFS prompt when attempting to open each new document from a document library.

The second scenario would suggest that persistent cookies are not enabled or the client has the SharePoint site in a zone which does not have protected mode enabled. It would also lead me to expect that if I configured the site to use pass-through auth on the Web Application Proxy that external users would receive similar behaviour, and thus still leave a problem for users accessing SharePoint from personal or non-domain connected machines externally.

I have however confirmed that persistent cookies are enabled on the SharePoint farm, and this is as far as I can tell the default setting in SharePoint 2013. In addition all client devices I have tested with have the URL of the SharePoint site in either the Intranet or Trusted Sites zone, both of which have Protected Mode disabled in our environment. I have seen the additional possible solutions to this problem which indicate enabling the setting of 'Automatic logon with current username and password' for the Trusted Sites zone, however as I need this to work on non-domain connected machines I don't believe passing local user credentials will help this us any way.

The third connection scenario is our preferred method of publishing SharePoint externally, and I expect exhibits the most issues due to the wish to use AFDS pre-auth, thus meaning even domain connected machines are not silently passing NTLM credentials. I'm not however convinced that these symptoms aren't the same root cause as the second scenario. That said, I don't seem to be able to find within the Web Application Proxy and setting one way or another to confirm that the supposedly persistent cookies given by SharePoint are not being replaced with session cookies by the WAP.

I've come to a point where I'm a little stumped, all the more in depth solutions I've seen for this issue seem to relate to niche settings on TMG or ISA servers which aren't present in the fairly basic Web Application Proxy role (despite it being the nearest replacement for these end of life products).

I'd be extremely grateful of any ideas or suggestions for further diagnostics if anyone is able to offer them.

Many Thanks,

Hello Community

    In WS2012 using Sharepoint 2013 Server (kerberos authentication web application)
SPN is configured for the SQL Server Account computer object (-a MSSQLSvc/) with a Domain account
and an SPN is configured for the User object (-A http/) with a domain account.

    When a user logs on <Domain1\user1> to the network how does kerberos authenticate the user?

    Thank you
    Shabeaut

Our security person turned windows firewall on this week. Now users can't add to any list that has a workflow attached. The only thing I can find in logs is "This event is generated when a logon session is destroyed. It may be positively correlated with a logon event using the Logon ID value. Logon IDs are only unique between reboots on the same computer." (event 4634)

My boss won't let me turn the firewall back off unless I can prove that this is the issue. Am I right?

How we can provide access to the users of customer's organization(external)  to our internal SharePoint?  We can not create customer users in our internal AD always as it is associated with licensing. Please let me know how we can solve this issue?

I am not sure whether customer has AD or some other directory services. Please guide me

Thanks, Ram Ch

Hi All,

We have deployed a web application using NTLM with single sign on. It’s a secure site and in IIS bindings we have SSL certificate attached with this web application. However, many users are keep getting windows authentication prompt as shown:   

 There are lot of blog posts that solve the issue by adjust IE settings >> Security>>Sites>> Advanced>> and added the site URL and

Aroh Shukla

Dears,

I've been troubleshooting an issue while trying to join a new WFE server to an existing SharePoint 2013 farm.

Issue Description: 

When we run the wizard it runs for almost 30 to 45 minutes on the step 3 itself and eventually fails at the end with an error message "Failed to connect to the configuration Database..... Value doesn't fall within the expected range"

First I thought this is a connectivity issue with the config DB and monitored the complete operation very closely after checking the permissions and SQL server connection and happened to see that the server was able to connect to the farm and all the web applications and the related solutions were pushed to the server and apparently the failure of the Wizard at below point: Followed by the error, all web sites and solutions were retracted and a complete roll back happens. 

Can someone pls help me here at the earliest as I'm stuck ???

0

02/19/2015 11:36:41.60psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologybmt5HighCreating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:41.60psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:41.60psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:41.60psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:41.60psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sisMediumAttempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:41.60psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sitMediumAttempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:41.62psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologyfx74HighAn exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:43.35psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologybmt5HighCreating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:43.35psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:43.35psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:43.35psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:43.35psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sisMediumAttempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:43.35psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sitMediumAttempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:43.35psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologyfx74HighAn exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:45.09psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologybmt5HighCreating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:45.09psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:45.10psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:45.10psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:45.10psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sisMediumAttempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:45.10psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sitMediumAttempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:45.10psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologyfx74HighAn exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:46.82psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologybmt5HighCreating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:46.82psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:46.82psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:46.82psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:46.82psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sisMediumAttempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:46.82psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sitMediumAttempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:46.82psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologyfx74HighAn exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:48.52psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologybmt5HighCreating new application pool 'SecurityTokenServiceApplicationPool'.
02/19/2015 11:36:48.52psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group IIS_WPG.
02/19/2015 11:36:48.52psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group WSS_WPG.
02/19/2015 11:36:48.52psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology96ftMediumAdding Domain\Account to local group PerformanceMonitorUsers.
02/19/2015 11:36:48.54psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sisMediumAttempting to give SE_ASSIGNPRIMARYTOKEN_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:48.54psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology9sitMediumAttempting to give SE_INCREASE_QUOTA_NAME privilege to application pool user Domain\Account
02/19/2015 11:36:48.54psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologyfx74HighAn exception occured while committing IIS configuration changes: Value does not fall within the expected range.
02/19/2015 11:36:48.54psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologyfx75UnexpectedReached the retry limit for committing IIS configuration changes, the operation must be rerun.
02/19/2015 11:36:48.65psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologyeru1MediumReleased mutex 'Global\Microsoft.SharePoint.SPIisProvisioningLock'
02/19/2015 11:36:48.65psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopologyaj4j4UnexpectedJoining Farm failed. The exception is Value does not fall within the expected range. StackTrace is    at Microsoft.Web.Administration.Interop.AppHostWritableAdminManager.CommitChanges()    at Microsoft.Web.Administration.Configuration.CommitChanges()     at Microsoft.Web.Administration.ConfigurationManager.CommitChanges()     at Microsoft.Web.Administration.ServerManager.CommitChanges()     at Microsoft.SharePoint.Administration.SPIisServerManager.CommitChanges(ApplyChanges applyChanges)     at Microsoft.SharePoint.Administration.SPIisProvisioningAssistant.ProvisionApplicationPool(String name, SecurityIdentifier sid, String password, SPIisApplicationPoolSettings settings)     at Microsoft.SharePoint.Administration.SPIisManager.ProvisionApplicationPool(String name, SecurityIdentifier sid, SecureString password, SPIisApplicationPoolSettings settings)     at Microsoft.SharePoint.Administration.SPIisWebServiceApplicationPool.ProvisionLocal(SPIisWebServiceApplicationPoolProvisioningOptions options)    at Microsoft.SharePoint.Administration.SPIisWebServiceApplication.ProvisionApplicationInstance()     at Microsoft.SharePoint.Administration.Claims.SPSecurityTokenServiceApplication.ProvisionLocal(SPServiceInstance serviceInstance)     at Microsoft.SharePoint.Administration.SPIisWebServiceInstance.Provision()     at Microsoft.SharePoint.Administration.SPFarm.Join(Boolean skipRegisterAsDistributedCacheHost)

02/19/2015 11:36:48.65psconfigui.exe (0x0FA4)0x2D28SharePoint FoundationTopology88ahHighUnjoining the farm.

BR,

Mukesh

Hi there.

Sharepoint 2013 with latest updates.

WSS CONTENT database size is cca 110GB, LOG FILE is 90GB.

Even if we did FULL backup of databes that does not decrease LOG file size.

Any hints how to lower the size of LOG data file?

With best regards

bostjanc

Can someone please tell me what Microsoft AppFabric 1.1 for Windows Server - is doing for SharePoint 

and what about the Service Bus?  

Reason for asking...got a WF issue...and I was advised to update the service bus...but that wouldn't update because the AppFabric was installed.... 

Hi 

Is there any way to restrict accessing of Office 365 Share point site based on IP Addresses?

In our organization we are using sharepoint online in Office 365 subscription account which is accessible globally. But now we want that a particular sharepoint site should be accessible only from organization IP. ??  

Plz help me with this regard !

Thanks in advance

HI

we have sharepoint portal web application ( publishing enabled , Annonymous access for internet users) 

and BI dashboards also we published in this portal.

1 ) so for content db upgrade to 2013 we will follow db attach method,  but what about BI pointers list,dashboards list 

it also be upgrade with content database.

2) now the BI dashboards connected to SQL Serve Analysis server   2008 r2 datasources, so after upgrade ,

we need to be must upgrade these SSAS datasources to SSAS 2012 ?

adil

Hi

we have prepared a sharepoint 2013 farm with 1.App server 1. wfe server and installed RTM version.

15.0.4420.1017

now what is the update path for sharepoint 2013 to install latest service packs + cumulative updates

adil

Hi

we have plan to upgrade sharepoint 2010 to 2013

in sharepoint 2010 farm we have latest service pack 2+ JULY CU 2014

so for upgrade sharepoint 2010 webapplications to sharepoint 2013  what is the level of Cumulative updates i must install

in sharepoint 2013 farm.

now i installed RTM version.

adil

Hi guys,

Please help. i am keep getting this error in my log files:

The Execute method of job definition Microsoft.Office.Server.UserProfiles.LMTRepopulationJob (ID 6e495a3e-0aa8-424b-8a21-089c099f953c) threw an exception. More information is included below.  Unexpected exception in FeedCacheService.IsRepopulationNeeded: Unable to create a DataCache. SPDistributedCache is probably down..

My DC server is up and running and I successfully sync uses from AD. I am gettign loads of odd error liek search site was not opening. I then cam acorsss this article and did fix in there:

http://blogs.msdn.com/b/brian_farnhill/archive/2014/06/25/exception-microsoft-applicationserver-caching-datacacheexception-errorcode-lt-errca0017-gt-substatus-lt-es0006-gt.aspx

Do i need to reconfigure my DC or search again? I already did tha once but still no luck

Any advice greatly appreciated. 

Balaip

I have had to reprovision the User Profile service like 4 times now. It keeps failing.

Is there a known bug that unprovisions the service?

David Jenkins

Both Distributed Cache SharePoint Service and AppFabric Caching Service stop on our web server in our brand new SharePoint farm:  1 web, 1 app, 1 search and 1 sql server.  I turned off dist cache service on all servers except the web server.  The AppFabric Caching Service and the distributed cache service were running for some time on this web server but recently I started seeing Event 1000, 2016, 6398.  Now the AppFabric service and the SharePoint distributed cache service are stopped. 

Please note we also have a two server development (web/sql) farm which does not have this error.  Also, while troubleshooting this, the system complained that dist cache was on two servers but not running so I removed the dist cache using powershell on those two servers where I didn't want it to run but of course left it on the web server. 

There are a lot of blogs with instructions to remedy this situation but they seem greatly unsuccessful.  I have only tried to stop the sp timer, clear cache, remove the dist cache and add dist cache to this server.  When I try to add or Start the Distributed Cache I keep getting these errors on the SharePoint 2013 server:

Event 1000
Faulting application name: DistributedCacheService.exe, version: 1.0.4632.0, time stamp: 0x4eafeccf
Faulting module name: KERNELBASE.dll, version: 6.2.9200.16451, time stamp: 0x50988aa6
Exception code: 0xe0434352
Fault offset: 0x000000000003811c
Faulting process id: 0xc10
Faulting application start time: 0x01cf17daa0d089ca
Faulting application path: C:\Program Files\AppFabric 1.1 for Windows Server\DistributedCacheService.exe
Faulting module path: C:\windows\system32\KERNELBASE.dll
Report Id: 4ee610b7-83ce-11e3-9406-0050569b2903
Faulting package full name:

A clear set of instructions on how to proceed from square one would be appreciated.

Hello All,
I'd like to ask anyone who looks after SharePoint 2013 if they still use an Integrated Anti Virus product? and if they do what product they use?

We currently use 'Symantec Protection for SharePoint Servers' but have had a few problems with it stopping and possible compatibility issues.

Is an integrated Anti Virus product still recommended? Relying on the client computers for virus checking? NAP?

Laurence Arbin

Hi,

Recently i have setup HA WF Manager farm and associated it with Intranet web application (on-prem). Now i want to use the same farm for our extranet environment (on-prem) but extranet environment is not associated with UPA. Since user profile application is not available for extranet environment so workflow does not work.

Now if I try to use existing UPA or create a new UPA for extranet environment, then i am exposing users data to all partner and collaborators. But for workflows to work it is necessary that users profile should be there in profile database.

Is there any way that I can run workflows in extranet environment without exposing user profile data to partners/collaborators? Thanks.

-Prashant