wrangling the user profile service

20
SharePoint Saturday Dayton, Ohio June 30, 2012 Wrangling The User Profile Service James Grizzle Senior Consultant – Cardinal Solutions

Upload: thanos

Post on 23-Feb-2016

45 views

Category:

Documents


0 download

DESCRIPTION

Wrangling The User Profile Service. James Grizzle Senior Consultant – Cardinal Solutions. General Information. Tweet it Out!! Hashtag for this event: # SPSDayton Follow us: @ SPSDayton Include your presenters Check out SPTV Tweets will display throughout the day on the screens. - PowerPoint PPT Presentation

TRANSCRIPT

Page 1: Wrangling The User Profile Service

SharePoint SaturdayDayton, Ohio

June 30, 2012

Wrangling The User Profile ServiceJames Grizzle

Senior Consultant – Cardinal Solutions

Page 2: Wrangling The User Profile Service

General Information• Tweet it Out!!– Hashtag for this event: #SPSDayton– Follow us: @SPSDayton– Include your presenters

• Check out SPTV – Tweets will display throughout the day

on the screens.– Footage will be shown at http://mysp.tv

Page 3: Wrangling The User Profile Service

Overview• Setting up the User Profile Service• Debugging the UPS (and sync)• Advanced UPS Features and

Customizations

Page 4: Wrangling The User Profile Service

Assumptions– No Farm Config Wizard– Using Active Directory– Domain Accounts– NetBIOS name is the same as the FQDN– Users in AD

Page 5: Wrangling The User Profile Service

Permissions• Farm Account– Log on Locally (Set first)– Administrator (Only during Provisioning)

• Sync Account– Replicating Directory Changes

Permissions• Content Access Account• User Profile Service Account

Page 6: Wrangling The User Profile Service

Demo

Page 7: Wrangling The User Profile Service

• Add NETWORK-SERVICE to WSS_WPG group

Errors

Page 8: Wrangling The User Profile Service

Plan Sync• Plan Profile Properties• Plan OUs to Sync• Plan Sync Connection Filters• Sync Back?

Page 9: Wrangling The User Profile Service

AD to SharePoint Property MappingProperty Display Name

Property Name Value Custom Prop Custom AD

PropMapped To (AD Property)

Originally Mapped To

Shows on Profile Page

Replicable to Sites

Corp ID CorpID Yes No employeeID   Yes Yes

Name PreferredName No No cn displayName Yes Yes

Work phone WorkPhone No Yes otherTelephone telephoneNumber Yes Yes

Fax Fax No No facsimileTelephoneNumber   Yes Yes

Address Address Yes No streetAddress   No No

Building Building Yes No Street   No No

City City Yes No l   No No

State State Yes No st   No No

Zip Code ZipCode Yes No postalCode   No No

Division Division Yes No division   Yes Yes

Page 10: Wrangling The User Profile Service

Advanced Sync Topics• Map custom AD attributes• User Profile sub-types• Create advanced profile import filters–Multiple And / OR– CANNOT GO BACK TO CA UI!!!!

• FIM• Global Audiences

Page 11: Wrangling The User Profile Service

Demo

Page 12: Wrangling The User Profile Service

Diagnosing Common Issues• FIM• 99% of the time, permissions are the issue– Farm Account must be local admin during the

sync– Farm Account must have “Allow Log on Locally”– Sync Account needs “Replicating Directory

Changes” permission in AD• IISRESET, Logon / Logoff, and Restart

SharePoint Timer Service before starting the UPSA

• IISRESET after starting the UPSA

Page 13: Wrangling The User Profile Service

• FIM• Status –

Stopped-connectivity

• Connection Status – Failed search

• Replicating Directory Changes Permissions

Sync Issues – Domain Permissions

Page 14: Wrangling The User Profile Service

FIM - Connection Log

Page 15: Wrangling The User Profile Service

Tips• Add a link to the User Profile Service

and Search Service on the resources list on the homepage and on possibly the Top Link bar

• Install SP1 and the August 2011 CU at least– April CU refresh offers even better UPS

goodies

Page 16: Wrangling The User Profile Service

Gotchas• Oct 2011 CU breaks profile photos.• Sync Database size

– Fixed in April CU (be careful of the version of April CU since it was rescinded by Microsoft – new v .5006)

– Also can be handled by deleting the Sync DB and reprovisioning UPA. • Remember the Sync DB is only a staging environment• Keep the social and profile DBs!

• Politics– Who owns the identities, does the data come from

multiple teams, how will the connections work, if you do write-back, who becomes the authoritative source?

Page 17: Wrangling The User Profile Service

Resources• Rational Guide to implementing UPS

http://www.harbar.net/articles/sp2010ups.aspx• Stuck on Starting – Common Sync Issues

http://www.harbar.net/articles/sp2010ups2.aspx• Creating User Profile Sync Filters

http://www.harbar.net/archive/2011/02/22/323.aspx• Mapping User Profile Properties to LDAP

attributeshttp://blogs.msdn.com/b/tehnoonr/archive/2010/11/22/mapping-user-profile-properties-in-sharepoint-2010-to-ldap-attributes.aspx

• User Profile Sub Typeshttps://www.nothingbutsharepoint.com/sites/eusp/Pages/Applied-SharePoint-2010-Governance-Part-3-User-Profile-Sub-Types.aspx

Page 18: Wrangling The User Profile Service

Questions and Evals…

• Fill out your evaluations to receive– Parking Pass– SPS Dayton T-Shirt

Page 19: Wrangling The User Profile Service

Brixx Ice Co.500 East First St., Dayton

Page 20: Wrangling The User Profile Service

SharePoint Saturday Dayton has been made possible because of generous sponsorship from the following friends…