PeoplePIcker LDAP Error

March 19, 2015, 2:48 pm

≫ Next: What is ../_layouts/15/people.aspx?MembershipGroupId=0?

≪ Previous: How to set SharePoint to pick up changes in Active Security groups?

$

0

0

Greetz!

I hooked up netmon and tried to resolve a user in my two way trusted (forest wide) domain which has been unable to resolve any users and got this error:

SearchResultDone: Status: Referral, MatchedDN: NULL, ErrorMessage: 0000202B: RefErr: DSID-0310082F, data 0, 1 access points ref 1: 'client.local'

I tried to get info on RefErr: DSID-0310082F but only found some german language articles.

I have referral chasing set to ALL on the picker. I've got it set to a specific OU for the HNSC site. Even when I take that off it won't resolve.

Any ideas on what that error is or debug tips?

Thanks!

---

Love them all...regardless. - Buddha

---

What is ../_layouts/15/people.aspx?MembershipGroupId=0?

April 1, 2015, 1:14 pm

≫ Next: Self-Signed certificate for ADFS and Web Application Proxy

≪ Previous: PeoplePIcker LDAP Error

$

0

0

Hello,

I discovered in my People and Groups that I can set the MembershipGroupId to 0, like the following:

http://site/_layouts/15/people.aspx?MembershipGroupId=0

I see a list of users and groups, but what does this MembershipGroupId = 0 mean?

Thanks,

---

Paul

Self-Signed certificate for ADFS and Web Application Proxy

April 1, 2015, 12:39 pm

≫ Next: Impersonation NT authority\IUSR insufficient permission

≪ Previous: What is ../_layouts/15/people.aspx?MembershipGroupId=0?

$

0

0

Hello All,

Is it possible to use the Self-Signed certificate for ADFS and Web Application Proxy or do I need to have a Valid CA signing certificate.

Is it possible to purchase CA signed certificate for internal DNS

Thanks & Regards

---

pankaj

Impersonation NT authority\IUSR insufficient permission

April 1, 2015, 3:09 pm

≫ Next: Who can add users to the Term Store Administrators field in the termstoremanager.aspx

≪ Previous: Self-Signed certificate for ADFS and Web Application Proxy

$

0

0

Can someone please help with this error.

EVENT LOG	Application
EVENT TYPE	Error
OPCODE	Info
SOURCE	Microsoft-SharePoint Products-SharePoint Foundation
CATEGORY	Database
EVENT ID	5214
USERNAME	NT AUTHORITY\IUSR
DATE / TIME	4/1/2015 4:25:57 PM
COMPUTERNAME	ICBWFE
MESSAGE	Insufficient SQL database permissions for user 'Name: NT AUTHORITY\IUSR SID: NT AUTHORITY\IUSR ImpersonationLevel: Impersonation' in database 'SP_CONTENT_MySites' on SQL Server instance 'PRODSQLSPCONTENT'. Additional error information from SQL Server is included below. The EXECUTE permission was denied on the object 'proc_GetTpWebMetaDataAndListMetaData', database 'SP_CONTENT_MySites', schema 'dbo'.

also, the "SQL Server instance 'PRODSQLSPCONTENT'" isn't even the name of our SQL server instance.

Who can add users to the Term Store Administrators field in the termstoremanager.aspx

March 26, 2015, 2:48 am

≫ Next: Deploying Farm from the Dev envoirment to the Production envoirment

≪ Previous: Impersonation NT authority\IUSR insufficient permission

$

0

0

In the Term Store management tool (_layouts/15/termstoremanager.aspx) what permissions does a user need to have to be able to add/change/remove accounts and groups listed in the Term Store Administrators field.

I am guessing that they need to be Administrators of the Managed Metadata Service Application?

I ask because I have a user who is Admin of the MM Service App and is listed in the Term Store Admin field but cannot add or remove users in the Term Store Admins field in the Term Store management tool

Thanks

J

Deploying Farm from the Dev envoirment to the Production envoirment

March 8, 2014, 10:10 am

≫ Next: Incoming Email not working for one web app, but IS working for others in same farm.

≪ Previous: Who can add users to the Term Store Administrators field in the termstoremanager.aspx

$

0

0

hello experts

I need to deploy Fram from a Dev envoirnment to a Production envoirnment. Exactly same IIS, SQL, Index servers.

What's the best course of action?

Thank you!

Incoming Email not working for one web app, but IS working for others in same farm.

March 24, 2015, 7:58 am

≫ Next: MySites - all edit actions Access Denied

≪ Previous: Deploying Farm from the Dev envoirment to the Production envoirment

$

0

0

I have enabled incoming email in a large multi-web application farm running SharePoint 2013 SP1 and the Feb 2015/March 2015 CUs that were pushed down in Windows Updates.  It works just fine for two web applications, but it will not work for one particular web application. I see the email land in the /drop folder. If I remove the email address from the library in http://nonworkingapp web application and use it on a library in a http://working web application, then the email is processed successfully. Conversely, if I take an address from a library in http://working and move it to a library inhttp://nonworkingapp it does not work. I've tried multiple site collections on http://nonworkingapp. This rules out any SMTP issues, etc. and means the issue is bound to this web application. Permissions are the same between the "non-working" and "working" locations: domain users are members on the site, and the library inherits permissions from the site.  The App Pool and Timer Service accounts have rights to the folder and to the library.

The error in the ULS log is the typical error processing message, but it gives no additional information even though I have enabled Verbose logging.

The Incoming E-Mail service has completed a batch. The elapsed time was 00:00: 00.0156294. The service processed 2 message(s) in total. Errors occurred processing 2 message(s): Message ID: Message ID:

Typically, you see "alias not found" or some permissions or quota issue here, but this issue is NOT the same as those. In this case NO additional information is provided in ULS.

Edit: running stsadm.exe -o refreshdms -url http://one/failing/site fixed some similar issues where "Unknown alias" was reported even though the list did have an alias (see here:http://blogs.technet.com/b/vinitt/archive/2009/07/15/e-mail-enabled-list-alias-information-is-not-synchronized-between-configuration-database-and-content-database.aspx). This did not fix the issue for the case mentioned above.

What could possibly be the issue preventing incoming email from working on this one web application?

MySites - all edit actions Access Denied

April 2, 2015, 4:37 am

≫ Next: MOSS 2007 gives cross browser compatabity issue on firefox and chrome and also in higher version of IE (9 & 11)

≪ Previous: Incoming Email not working for one web app, but IS working for others in same farm.

$

0

0

Hi,

I've got the MySites working on our SharePoint 2013. But when we go to the MySite and try to complete the 'welcome' wizard to enable the feed and click OK

we get 

There is no problem moving around on the mysites and we get the input fields and such to change our own properties, but when we click 'Save all and close', we first get the modalbox 'Your settings have been saved' and when clicking OK, we get a full page of http error 403 forbidden.

The same happens for farm admin accounts.

In the UPA, I have set Authenticated Users and NT AUTHORITY\Authenticated with all 3 permissions.

In the logs, it's also only said that everything is 'Access denied'.

So I am wondering why we cant edit the MySites. Any idea what can be the cause of this and what I have to change to make it work?

Thanks in advance!

Kind regards,

Nils

---

MOSS 2007 gives cross browser compatabity issue on firefox and chrome and also in higher version of IE (9 & 11)

April 2, 2015, 2:46 am

≫ Next: Business Intelligence and performance point problem

≪ Previous: MySites - all edit actions Access Denied

$

0

0

I am getting browser compatablity issue when MOSS 2007 is used on IE 9 & 11 and on other browsers like firefox and chrome.

I also face issue while using the latest version of third party Intersoft WebUI 2014 R2 controls. Although the older version of Intersoft WebUI 2008 controls were working fine with MOSS in IE7 browser. But recently WebGrids are not loading properly and the WebCombo dropdowns doesn't work. After apporaching the Intersoft on tis issue they said their latest version of Intersoft is compatible with MOSS 2007.

In this process of upgrade I learnt that the Intersoft Sample which comes with their setup can be run on Visual Studio 2010 and above. So I would like to know whether MOSS 2007 support VS 2010 or not.

Accepting response on my queries.

Business Intelligence and performance point problem

April 2, 2015, 5:49 am

≫ Next: High trust applications and multitenancy

≪ Previous: MOSS 2007 gives cross browser compatabity issue on firefox and chrome and also in higher version of IE (9 & 11)

$

0

0

Hi Everyone,

Please does anyone know why creating a dashboard from a Sharepoint list is such a hassle. I have configured performance point services, a secure store and a business intelligent website that has a data connection library and  Performance Point content list . Unfortunately anytime I try to use dashboard designer to create a new data source and specify the site settings(using unattended account method) I can't save it. It gives me an error claiming that I either don't have permissions or the data source doesn't exist.

A search around the web for answers doesn't seems to solve my problem as it suggests that the problem is associate with many things which I'm not clear about. Please could someone who is good at this at least tell me the critical things to check and the clearest way to set this up.

Thanks,

Dominic

High trust applications and multitenancy

March 24, 2015, 12:18 pm

≫ Next: culture-specific results when adding localized contenttypes by eventreceiver - problem

≪ Previous: Business Intelligence and performance point problem

$

0

0

Hello everybody,

We have a farm with several site subscriptions.

Each subscription should use single high-trust app on it's dedicated site collection.

There is no problem when we provide app for only one site subscription. Then we use site subscription realm for registering Trusted Security Token Issuer and for permissions applying.

$spUrl = "https://samarbetsrum-ind.testtenant.se"
$authorityName = "apps trust tenant1"

$spWeb = Get-SPWeb $spUrl
$realm = Get-SPAuthenticationRealm -ServiceContext $spWeb.Site

$certificate = Get-PfxCertificate $publicCertificatePath
New-SPTrustedRootAuthority -Name $authorityName -Certificate $certificate
$fullIssuerIdentifier = $issuerId + '@'+ $realm
New-SPTrustedSecurityTokenIssuer -Name $issuerId -Certificate $certificate -RegisteredIssuerName $fullIssuerIdentifier –IsTrustBroker

$nameIdentifier = $clientId + "@" + $realm
$appPrincipal = Register-SPAppPrincipal -site $web -NameIdentifier $nameIdentifier -DisplayName $fullAppName
Set-SPAppPrincipalPermission -appPrincipal $appPrincipal -site $web -scope SiteSubscription -Right "Read"

So when we play with one tenant, everything is just fine.

Problems appear only when we start to configure several site subscriptions.

We have been trying 2 approaches:

1. register single Trusted Security Token Issuer. If we do so, user gets 401 error when exploring provider-hosted app page. Probably, it is because we registered farm realm and each site subscription has it's own different realm.

2. register dedicated Trusted Security Token Issuer for each tenant. In this case we get error in PowerShell

New-SPTrustedSecurityTokenIssuer : Exception of type 'System.ArgumentException' was thrown.

Parameter name: newObj

At line:1 char:1

+ New-SPTrustedSecurityTokenIssuer -Name $issuerId -Certificate $certificate -Regi ...

+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

   + CategoryInfo         : InvalidData: (Microsoft.Share...rityTokenIssuer:SPCmdletNewTrustedSecurityTokenIssuer) [New-SPTrustedSecurityTokenIssu

   er], ArgumentException

   + FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletNewTrustedSecurityTokenIssuer

The only way we found to avoid this problem is generating different issuer id for each tenant.

Please share your ideas.

Should we use dedicated issuer id for each tenants? Then it will be extremely inconvenient, I guess.

culture-specific results when adding localized contenttypes by eventreceiver - problem

April 2, 2015, 6:46 am

≫ Next: SP 2013 and SQL SSRS 2012 integration

≪ Previous: High trust applications and multitenancy

$

0

0

Hi,

quick scenario info:

Product

• SharePoint 2013 product [english]
• German Language Pack

Environment

• Contenttypes are localized with resource files (en-US, de-DE)
  
• We have a listadded eventreceiver that runs synchronous. This eventreceiver attaches our contenttype and removes "document" from the document library.

Culture

• Site Collection created with language code 1031/de-DE/Germany
• Powershell runs in culture en-US/1033
  

Situation

• When a user adds a document library then the contenttype is added to the library using its German (de-DE) representation of the contenttype. 
• When I add the document library using Powershell then the English (en-US) representation is chosen
  

Powershell snippet:

$listTemplate = [Microsoft.SharePoint.SPListTemplateType]::DocumentLibrary
$web.Lists.Add("My Documents","My Doc Library",$listTemplate)

Even if I try to use the culture of the website, it has NO effect. The library is still using the english resource files on the same website.

$web = Get-SPWeb "http://site"
[int]$lcid = $web.Language
$culture = new-object "System.Globalization.CultureInfo" $lcid
[System.Threading.Thread]::CurrentThread.CurrentUICulture = $culture

Has anyone an idea why this happens?

Sven

SP 2013 and SQL SSRS 2012 integration

March 31, 2015, 10:40 am

≫ Next: User Profile Synchronization Service not starting

≪ Previous: culture-specific results when adding localized contenttypes by eventreceiver - problem

$

0

0

I've done this installation successfully a few times before.  On all other times for SP 2013 with SQL 2012 SSRS, I installed on the application server because it was the only server.

This time I'm installing into a FARM.  One of the DEV guys asked me to install it on one of the WFE server in the farm so i did.  The installation was successful.  to verify the installation I run this command.

get-spserviceinstance -all |where {$_.TypeName -like "SQL Server Reporting*"} | Start-SPServiceInstance
and I get this reply..
WARNING: 'SQL Server Reporting Services Service' is already started on server 'Server1'
The next steps are to create a reporting services application.  However, in central admin, that option doesn't show up under "Manage Service Applications" - "New"
The Microsoft instructions say this means it wasn't installed correctly.  When I go to manage services, then select my WFE server, it doesn't show SQL Server Reporting Services Service 
Yet when I go back and re-run the shell command it says it's installed and running.  I've rebooted the farm to no avail.  Anyone know what I did wrong?
Am I supposed to install this on the application server instead of the WFE?
Any help is greatly appreciated.

User Profile Synchronization Service not starting

March 31, 2015, 2:47 am

≫ Next: SharePoint 2013 Install Error

≪ Previous: SP 2013 and SQL SSRS 2012 integration

$

0

0

Hey everyone,

I've just installed sharepoint 2013 on sql always on 2014 with all the latest updates, everything is running ok but i can't start the User Profile Synchronization Service. I've been searching for a few days but cant seem to find a solution.

SP_farm account has all the rights on the db's, when i try to start fim sync service manually i get in event viewer system:

The Forefront Identity Manager Synchronization Service service terminated with the following service-specific error: 
%%2148732962

And in app: 

 

The server encountered an unexpected error and stopped.

 "BAIL: MMS(6324): sql.cpp(2325): 0x80230404 (The operation failed because the attribute cannot be found)
ERR: MMS(6324): storeimp.cpp(5813): Failed to get computer id info from db.
BAIL: MMS(6324): storeimp.cpp(5815): 0x80230447 (Service start up has failed.  Cannot read computer_id from the FIM Synchronization Service database.)
BAIL: MMS(6324): storeimp.cpp(5892): 0x80230447 (Service start up has failed.  Cannot read computer_id from the FIM Synchronization Service database.)
BAIL: MMS(6324): storeimp.cpp(482): 0x80230447 (Service start up has failed.  Cannot read computer_id from the FIM Synchronization Service database.)
BAIL: MMS(6324): server.cpp(388): 0x80230447 (Service start up has failed.  Cannot read computer_id from the FIM Synchronization Service database.)
BAIL: MMS(6324): server.cpp(3860): 0x80230447 (Service start up has failed.  Cannot read computer_id from the FIM Synchronization Service database.)
BAIL: MMS(6324): service.cpp(1539): 0x80230447 (Service start up has failed.  Cannot read computer_id from the FIM Synchronization Service database.)
ERR: MMS(6324): service.cpp(988): Error creating com objects. Error code: -2145188793. This is retry number 0.
BAIL: MMS(6324): clrhost.cpp(283): 0x80131022 
BAIL: MMS(6324): scriptmanagerimpl.cpp(7670): 0x80131022 
BAIL: MMS(6324): server.cpp(251): 0x80131022 
BAIL: MMS(6324): server.cpp(3860): 0x80131022 
BAIL: MMS(6324): service.cpp(1539): 0x80131022 
ERR: MMS(6324): service.cpp(988): Error creating com objects. Error code: -2146234334. This is retry number 1.
BAIL: MMS(6324): clrhost.cpp(283): 0x80131022 
BAIL: MMS(6324): scriptmanagerimpl.cpp(7670): 0x80131022 
BAIL: MMS(6324): server.cpp(251): 0x80131022 
BAIL: MMS(6324): server.cpp(3860): 0x80131022 
BAIL: MMS(6324): service.cpp(1539): 0x80131022 
ERR: MMS(6324): service.cpp(988): Error creating com objects. Error code: -2146234334. This is retry number 2.
BAIL: MMS(6324): clrhost.cpp(283): 0x80131022 
BAIL: MMS(6324): scriptmanagerimpl.cpp(7670): 0x80131022 
BAIL: MMS(6324): server.cpp(251): 0x80131022 
BAIL: MMS(6324): server.cpp(3860): 0x80131022 
BAIL: MMS(6324): service.cpp(1539): 0x80131022 
ERR: MMS(6324): service.cpp(988): Error creating com objects. Error code: -2146234334. This is retry number 3.
BAIL: MMS(6324): service.cpp(1002): 0x80131022 
Forefront Identity Manager 4.0.2450.49"

Has anyone encountered this or know a solution?

Kind regards,

Borrie

*Edit I've noticed that in the Sync Database in table dbp.mms_server_configurtion alot of fields are null

SharePoint 2013 Install Error

April 2, 2015, 8:12 am

≫ Next: Printing Word documents to PDF from Office Web Apps Server 2013 yields inaccessible PDF files

≪ Previous: User Profile Synchronization Service not starting

$

0

0

Hi All, I am trying to create a new farm after mistakenly removing my SQL Server from the domain. I have re-added and am running Configuration wizard and I get this error “Cannot connect to Database Master at SQL Server at SSRS.  The database might not exist, or the current user does not have permission to connect to it.”

I’ve followed this to verify I had all my settings and I logged into the SQL server with the account.  https://mohamedelkassas.wordpress.com/tag/cannot-connect-to-database-master-at-sql-the-database-might-not-exist-or-the-user-does-not-have-the-permission-to-connect-it-sharepoint-2013/ 

---

Michael K. Tyson

---

Printing Word documents to PDF from Office Web Apps Server 2013 yields inaccessible PDF files

April 2, 2015, 9:22 am

≫ Next: Content type not available everywhere when setting it to be not visible on the new button

≪ Previous: SharePoint 2013 Install Error

$

0

0

I have Office Web Apps Server 2013 SP1 with March 2015 CU applied. The version shows up as "15.0.4569.1506" using Todd Klindt'smethod. When anonymous users view the Word documents online through the Office Web Apps, they have an option to print them to PDF. The PDF file that gets generated as a result isn't accessible (i.e. it isn't WCAG-compliant). using Adobe Acrobat Pro to check it I can see that it is missing tags, for example. The source Word document was made fully accessible from the point of view of Microsoft Office accessibility tools.

When viewing the same document in Word Online in Office 365, I get an extra option  "Download as PDF". The PDF document produced is accessible. If I save a Word 2013 document as a PDF from within the Word editor, it also generates accessible PDF.

I was wondering if the reason for the accessibility problem that I have misconfigured my on-premises Office Web Apps,  or perhaps the accessibility compliance isn't built in yet. If the latter is true, I was wondering if someone could indicate whether or not this is on the list of upcoming CUs.

thanks in advance. 

Content type not available everywhere when setting it to be not visible on the new button

April 2, 2015, 8:50 am

≫ Next: Using SharePoint Online (o365) how do I setup External List from a SQL Azure table with Business Connectivity Services and Secure Store

≪ Previous: Printing Word documents to PDF from Office Web Apps Server 2013 yields inaccessible PDF files

$

0

0

We set up a content type and added to a document library, where we could pick it when creating a document, uploading a document or editing a documents properties.

However when we set the content type to be not visible on the new button, it also becomes not visible when uploading or editing a documents properties. Is there a way so it can be hidden from the new button but available everywhere else?

Thanks

Using SharePoint Online (o365) how do I setup External List from a SQL Azure table with Business Connectivity Services and Secure Store

April 2, 2015, 11:44 am

≫ Next: Exclude expired accounts in user profile synchronization

≪ Previous: Content type not available everywhere when setting it to be not visible on the new button

$

0

0

I have followed the instruction I found on "https://support.office.com/en-sg/article/Make-an-External-List-from-a-SQL-Azure-table-with-Business-Connectivity-Services-and-Secure-Store-466f3809-fde7-41f2-87f7-77d9fdadfc95?CorrelationId=032847dc-8477-4971-99d1-580b6c434024&ui=en-US&rs=en-SG&ad=SG#__toc350352764"

Step 1 asks me to set permissions on the BCS Metadata store, but the link provided is for SharePoint 2013. The instructions seem to me to be based off Screens from 2013 that do not correlate to the SharePoint Online site I'm working on. 

Is their a need to have 2013 and Online to make this happen?

If there is any better material for this, or proper steps to do this, I'd really appreciate getting them.

Thanks

Exclude expired accounts in user profile synchronization

April 2, 2015, 5:39 am

≫ Next: Issues with Sharepoint 2013 Evaluation download from TechNet Evaluations

≪ Previous: Using SharePoint Online (o365) how do I setup External List from a SQL Azure table with Business Connectivity Services and Secure Store

$

0

0

Hi 

I would like to exclude the expired accounts from the AD import in SharePoint 2013 user profile sync.

I managed to exclude disabled accounts using userAccountControl bit equals on 2.

Could you please suggest on how the exclusion filter can be used to exclude expired accounts.

Thanks.

Issues with Sharepoint 2013 Evaluation download from TechNet Evaluations

April 2, 2015, 1:03 pm

≫ Next: Sharepoint 2013 Workflow Manager Farm Configuration error, WARNING: Endpoint https://servername:12290 is not responding

≪ Previous: Exclude expired accounts in user profile synchronization

$

0

0

                         

I am trying to complete the installation and testing of SharePoint Server 2013.  I downloaded the SharePoint 180 day evaluation installation package from the TechNet Evaluation site.  When installing the package it asks for the license key: NQTMW-K63MQ-39G6H-B2CH9-FRDWJ.  I get an error message that this license key is not valid?!?

I contacted TechNet (MSDN) support and the call agent, after looking into the issue on the license key, informed me that the keyisvalid but she couldn't help me.  I was instructed to submit the TechNet site feedback form. I don't expect to get my answer resolved soon enough through the TechNet Evaluation Site feedback form so I am posting questions through this forum.

I have an MSDN subscription.  My subscription is a level that does not include Microsoft SharePoint Server for download.  This is why I am trying the evaluation version.

I have convinced our CIO and our Director of Enterprise Architecture to support a POC evaluation of SharePoint Portal Server instead of upgrading our current Oracle Portal platform.  If it is going to be this difficult to get an evaluation copy installed, I think this will scare them off from considering SharePoint as an enterprise solution.

Thank you,

Scot