We have been performing some upgrades recently in our environment. The issue we have at the moment is connectivity to Exchange 2013 from OWA web parts in an upgraded SharePoint 2013 environment (2010 to 2013).

Environment:
Exchange 2013 -  Version 15.0 ‎(Build 995.29)‎  15.00.0995.029 (two CAS/MB servers with a single DAG between them)
SharePoint 2013 - 15.0.4667.1000 (two WFE/Application servers connected to a SQL 2014 server on the backend)

In the SharePoint 2013 farm we have an upgraded web application and another I created from scratch.  The upgraded web application is claims based (NTLM), the new web application is claims based (Kerberos).  The issue exists in both.

When I add the Exchange OWA web parts (go to site settings, web parts, new document and add OWA web parts) they show up and I can then add them to the library.  However, when I add them to a page and apply they simply show the default OWA login page.  Not the actual content it showed for use under SharePoint 2010 connecting to Exchange 2010.

What I have tried:
- Adding the URLs to the Local Intranet zone
- Imported the Exchange certificate into Sharepoint (Sharepoint - Calendar web part - unable to connect -http://goo.gl/6gJsVb)
- Using the page viewer web part - received the "This content cannot be displayed in a frame" error.
- Tried the code from - OWA webparts (exchange 2013) are not working on SharePoint 2013 (on Premise) -http://goo.gl/20vKBo.  Just received the OWA login box again in a web part.

Am I missing something?

Hi,

We are planning to implement a digital watermarking process for a particular library in a site collection in SharePoint 2013.  I know that RMS can be deployed as part of this.  But, would like to know if there is a third party tool available for the same which has those extra tweaks.  Also, is this solution available via coding?

So, from the requirement standpoint, this watermark is to be for the documents to trace the downloads and prevent/trace further editing.

Shonilchi..

I have an existing SharePoint 2013 Farm and I would like to perform a hardware and environment move. I found excellent articles on how to accomplish this for TFS:https://msdn.microsoft.com/en-us/library/ms404869.aspx#Prepare

The TFS articles specifically address hardware moves vs. environment moves.

However, I have attempted to look for similar articles addressing the same types of concerns for SharePoint 2013 and have only come across this article:https://technet.microsoft.com/en-us/library/cc512725.aspx

I am unable to find any MSDN SharePoint Articles which specifically address a complete hardware move or a complete environment move (or both).

My new SharePoint server as well as my new SQL Server will have different names.  I used AutoSPInstaller to originally install my environment so would be a bit tricky to play around with which services I did or did not install to perform a restore/migration. 

Based on what I can tell, the best solution would be to re-install SharePoint in my new environment and then either perform a SharePoint Farm Restore and a Database Restore.  However, it would be much more helpful if a step-by-step article was provided on how to accomplish this to handle these 2 different scenarios.  I am guessing that even after the restore, I may need to either create CNAME records to match the original AAM mappings or else update the AAM records to match the new server names/Urls.

Please advise on how to best accomplish this.

Thanks.

Hello Community

    I am considering Kerberos Authenication but there seems to be
2 kinds of Kerberos: constrained and unconstrained.

    Since when creating Kerberos you are only offered things like "Negotiate\Kerberos"
Or "Negotiate" or "Setspn" the question is how do you create a constrained
or unconstrained Kerberos and since the back end has to match how do you
do you know whether the back end uses constrained or unconstrained Kerberos?

    Thank you
    Shabeaut

Hi everyone,

I would like to know if the resource "Shared with me" and "Recents documents" on Skydrive is available on Sharepoint 2013 on-premise. 

Thanks!

flavio

I have enabled incoming email in a large multi-web application farm running SharePoint 2013 SP1 and the Feb 2015/March 2015 CUs that were pushed down in Windows Updates.  It works just fine for two web applications, but it will not work for one particular web application. I see the email land in the /drop folder. If I remove the email address from the library in http://nonworkingapp web application and use it on a library in a http://working web application, then the email is processed successfully. Conversely, if I take an address from a library in http://working and move it to a library inhttp://nonworkingapp it does not work. I've tried multiple site collections on http://nonworkingapp. This rules out any SMTP issues, etc. and means the issue is bound to this web application. Permissions are the same between the "non-working" and "working" locations: domain users are members on the site, and the library inherits permissions from the site.  The App Pool and Timer Service accounts have rights to the folder and to the library.

The error in the ULS log is the typical error processing message, but it gives no additional information even though I have enabled Verbose logging.

The Incoming E-Mail service has completed a batch. The elapsed time was 00:00: 00.0156294. The service processed 2 message(s) in total. Errors occurred processing 2 message(s): Message ID: Message ID:

Typically, you see "alias not found" or some permissions or quota issue here, but this issue is NOT the same as those. In this case NO additional information is provided in ULS.

Edit: running stsadm.exe -o refreshdms -url http://one/failing/site fixed some similar issues where "Unknown alias" was reported even though the list did have an alias (see here:http://blogs.technet.com/b/vinitt/archive/2009/07/15/e-mail-enabled-list-alias-information-is-not-synchronized-between-configuration-database-and-content-database.aspx). This did not fix the issue for the case mentioned above.

What could possibly be the issue preventing incoming email from working on this one web application?

Hello Community

    In one forest  (ForestA) there is a Sharepoint 2013 Server farm.

    In another forest (ForestB) there are resouces for example: user, printers, etc.

    If Kerberos authentication is used, in a one-way or two-way trust
relationship will the web applications created in the Sharepoint 2013 Server (ForestA)
be able accessible to users in ForestB and if so, what kind of Kerberos does it have to
be Kerberos (constrained) or Kerberos (unconstrained)?

    Thank you
    Shabeaut

Hi all, 

I have a strange issue. In our environment we have 2 web applications with team site templates:

1. The first web application (https://abc.com), user's profile photo is displayed as Newsfeed. When I right click on properties and the user's profile photo it it shows the following URL:http://contoso:2222/user%20photos/Profile%20Pictures/<accountName>  (My Site which was set up some other vendor)
   
   
   
2. Second web application (https://def.com), when user's profile photo shows default generic image that SharePoint provides and when I right click on properties and the user's profile photo it it shows the following URL: 
   https://def.com/_layouts/15/userphoto.aspx?size=S&accountname=<accountName>%40.com&url=http://contoso:2222/user%20photos/Profile%20Pictures/<accountName>
   
   Both the web applications are associated with same User Profile Sync service. 
   

I referred to several sites that talk about this issue. 
http://www.wictorwilen.se/sharepoint-2013-enabling-cross-domain-profile-pictures (used PowerShell script but did not work for me)

http://sharepointadam.com/2010/11/18/import-user-profile-photos-from-active-directory-into-sharepoint-2010/ 

Any steps that we missed. It looks MySite is not configured properly for 2nd web application but 1st web application shows all the photos with same MySite configuration.  

Any help would be greatly appreciated

Thanks in advance.   

Sandy

There is a reference at https://technet.microsoft.com/en-us/library/cc263445.aspx that says  "Important: Do not use service account names that contain the symbol $. "

Of course the IT guys are screaming it can't be true.  Is there any information on what problems are created when using the $ in service accounts?

Hi,

I have created a sharepoint application page to access an active end point on ADFS and establish a fedauth session. All works well in single server. But when the page runs behind load balancer with 2 servers, it fails with key not valid for use in specified state exception. Stickiness is enabled on load balancer. verified that.

I had made few changes to config file in microsoft.identitymodel section to accomodate adfs custom login. This included removing securitytokenhandlers and issuertokenresolvers as well. Is this impacting the encryption/decryption in anyway?

Any pointers would help.

Reference point for my application page : http://blog.helloitsliam.com/Lists/Posts/Post.aspx?ID=76

Hello everybody,

We have a farm with several site subscriptions.

Each subscription should use single high-trust app on it's dedicated site collection.

There is no problem when we provide app for only one site subscription. Then we use site subscription realm for registering Trusted Security Token Issuer and for permissions applying.

$spUrl = "https://samarbetsrum-ind.testtenant.se"
$authorityName = "fasab apps trust tenant1"

$spWeb = Get-SPWeb $spUrl
$realm = Get-SPAuthenticationRealm -ServiceContext $spWeb.Site

$certificate = Get-PfxCertificate $publicCertificatePath
New-SPTrustedRootAuthority -Name $authorityName -Certificate $certificate
$fullIssuerIdentifier = $issuerId + '@'+ $realm
New-SPTrustedSecurityTokenIssuer -Name $issuerId -Certificate $certificate -RegisteredIssuerName $fullIssuerIdentifier –IsTrustBroker

$nameIdentifier = $clientId + "@" + $realm
$appPrincipal = Register-SPAppPrincipal -site $web -NameIdentifier $nameIdentifier -DisplayName $fullAppName
Set-SPAppPrincipalPermission -appPrincipal $appPrincipal -site $web -scope SiteSubscription -Right "Read"

So when we play with one tenant, everything is just fine.

Problems appear only when we start to configure several site subscriptions.

We have been trying 2 approaches:

1. register single Trusted Security Token Issuer. If we do so, user gets 401 error when exploring provider-hosted app page. Probably, it is because we registered farm realm and each site subscription.

2. register dedicated Trusted Security Token Issuer for each tenant. In this case we get error in PowerShell

New-SPTrustedSecurityTokenIssuer : Exception of type 'System.ArgumentException' was thrown.

Parameter name: newObj

At line:1 char:1

+ New-SPTrustedSecurityTokenIssuer -Name $issuerId -Certificate $certificate -Regi ...

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   + CategoryInfo         : InvalidData: (Microsoft.Share...rityTokenIssuer:SPCmdletNewTrustedSecurityTokenIssuer) [New-SPTrustedSecurityTokenIssu

   er], ArgumentException

   + FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletNewTrustedSecurityTokenIssuer

The only way we found to avoid this problem is generating different issuer id for each tenant.

Please share your ideas.

Should we use dedicated issuer id for each tenants? Then it will be extremely inconvenient, I guess.

Hi,

I'm running SharePoint 2013 Server with December 2014 CU. I'm using a 3rd Party Software called DocAve on this farm. This 3rd party service account needs DBO rights on all SharePoint DB to work.

Now everytime I install a new Cumulative Update on my SharePoint 2013 farm, the DBO rights for the 3rd party service account seems to get removed everytime. I'm using this 3rd party on my SharePoint 2007 farm and I don't get this behavior.

Anyone having the same issues with 3rd party that needs DBO rights on SharePoint 2013?

thank you

Good Morning,

I am trying to configure my Content Organizer Rules to send documents uploaded in one site (e.g. contoso.sharepoint.com/DropOffLibrary) to a library in a sub site (e.g. contoso.sharepoint.com/testSite/destintionLibrary). I have turned on the Content Organizer for both sites, checked the setting that "<label for="ctl00_PlaceHolderMain_enableCrossRoutingSection_crossRoutingCheckBox">Allow rules to specify another site as a target location", and </label>ensured the content type was on the Drop Off Library and the destination library. The Content Type was a custom type that included custom columns.

I created a rule based upon one of those columns that sent the document to the correct library (site) based upon the choice made. The column did not accept any value except the choices provided. When I try to enter the destination for the document, the sub-sites are not listed as options to select and neither are the libraries contained within them. When I enter in the URL for the targeted library, the message "A valid target path must be selected." appears. If I create the same rule, targeting the local library, it works.

Any ideas on why this is not working for me?

Greetings,

I am working on a SharePoint 2013 farm and seeing errors in event logs:

Database 'SharePoint_AdminContent_92546d5b-3d3f-408b-b2c1-3fbf86da0bbf' on SQL Server instance 'A_PROD_SP01' is not empty and does not match current database schema.

Database 'SharePoint_Config' on SQL Server instance 'A_PROD_SP01' is not empty and does not match current database schema.

Is this because one of the servers in this farm isn't at the same CU/PU level?

Thank you!

Greetings,

I am in the process of provisioning enterprise search service application.  I am doing this via PowerShell script.  I am confident in the PowerShell script.  I receive an exception during the call to New-EnterpriseSearchServiceApplication.  I receive the following exception:

New-SPEnterpriseSearchServiceApplication : A database exception occurred when creating Search Application: User does not have permission to perform this action.
At \\pac\data\PTS\FS01_STORE\Technology\Vendor\Microsoft\SharePoint_2013\scripts\Install\Provision-SearchServiceApplication.ps1:52 char:29
+         $searchServiceApp = New-SPEnterpriseSearchServiceApplication -Name $serv ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidData: (Microsoft.Offic...viceApplication:NewSearchServiceApplication) [New-SPEnterpriseSearchServiceApplication], ApplicationException
    + FullyQualifiedErrorId : Microsoft.Office.Server.Search.Cmdlet.NewSearchServiceApplication

However, the Search Service Application IS created and the (4) associated databases.  Obviously, since this happens, the script fails on the next call to create the proxy.

What would cause the service application and databases to be created but then indicate the user doesn't have permissions?

Thank you in advance for your help!

Bob

1. I created a site column based on the managed metadata type named color.

2. I changed the managed property owstaxIdcolor to refinable:yes.

3. I added the managed property owstaxIdcolor in the refinement Web Part and request it to be sorted by name in ascending order.

4. The order stays displayed by number in the refinement panel. It doesn't want to show by alphabetical order. I already have used it with success on other types of column. Have you experience the same effect? Do you know how to obtain an alphabetical order?

Office 2013, SharePoint 2013 server standard on prem, Office Web Apps yes, Excel Services no

When I open an Excel file in the client application, even if I never clicked on the "Modify" button, I can write in the file. Is it a normal behavior? Why?

In Word and PowerPoint, I'm blocked for editing as long as I don't click the 'Modify' button. It makes more sense.

We recently put up a new server to host BIRT content. The implementation of this site is complete. One thing that didn't work as expected was that on the various pages, people's thumbnail pictures didn't show up.

We have an older 2007 site that hosts our old corporate directory, and was configured to be the site where people would import photo's, and those would get imported in to active directory.  This is working, and those thumbnail pictures exist.

The new SP server though is not picking up those photo's.  I read up on how to create the import job from AD in the User Profile Sync - Manage user properties.  I think I did that correctly.  After sync though, the photo's didn't show up.

In another post, someone gave me this command to run.

$url ="https://my.sharepoint.com"
$mysitesHost =get-spsite-identity $url

update-SPProfilePhotoStore-MySiteHostLocation $mysitesHost-CreateThumbnailsForImportedPhotos $true

I ran that, then ran a sync, and it worked.  The picture showed up.  Then over the weekend, we migrated the hostname from the old BIRT system to the new.  So essentially I changed DNS to point to the new server, did host-header configuration in IIS, then did alternate access mappings to match.  This all worked, and now the site instead of being http:servername:5959 is nowhttp://hostname.domain.com and https://hostname.domain.com

Sometimes in this time frame, the pictures broke again.  Now, not even the AD data, like someone's title, etc, show up.  There is a broken image and when you click the drop down by your name, and select "abount me" which takes me to a link

http://servername/my/Person.aspx

There is no page.  So i'm a little at a loss.  I don't know enough about how this portion of sharepoint works.  I know there is a mysite feature, but I'm not sure if that needs to be fully deployed/configured to get just this AD user profile sync with the picture in to the site, or if there is something else I missed.  It seems changing the URL's completely hosed this.

My main question for you guys is, do I need mysites to get this little bit of information into the site?  My thinking is no, that I only need UPS working right and some correct user property mappings.  Before I go down some long road reading and possibly working on mysites configuration I would like to know.

Any help is greatly appreciated!

I can’t save *new* documents back to SharePoint. We have a SharePoint 2013 development environment, running on Windows Server 2012 and a Windows 7 Client Computer with Office 2010.

Every time I click „new document“, SharePoint opens the corresponding template file in the client application (Word, Excel,…) So far, so good. When i select „Save“, the client application brings up a local save path on the client computer, not the SharePoint document library.

I did some research and tried many approaches, but none of them worked.

I installed the Desktop Experience Feature on the Windows Server 2012, added the server address to trusted sites, gave the user farm-administrator rights (to make sure it is no security problem) and switched the authentication mode for the web application.

Does anyone know this problem and found a solution?