Provisioning The User Profile Service Application

July 9 2010 79 comments

As I wrote earlier, SharePoint 2010 ships with a profile synchronization engine from ForeFront Identity Manager. After performing several SharePoint 2010 environment installations, this seems also to be the most fragile part of the SharePoint 2010 architecture especially when using a least privileged accounts install model.

There are lots of content in the blogs and TechNet related to configuring user profile synchronization. In my experience, launching the services has to be done in the order described below. In most of the environments this is enough, but in some places I am still struggling to get this to work. The step 5 seems to be the most critical, as the FIM services create certificates and establish database connections, and there are several error-prone phases in that process.

1. Add the farm account into the local administrators group. This is stated in the TechNet article:

The Server Farm account, which is created during the SharePoint farm setup, must also be a member of the Administrators group on the server where the User Profile Synchronization service is deployed.

There seems to be some conflicting opinions about the correct permissions, as this will cause the SharePoint Health Analyzer to create a warning:

Accounts used by application pools or service identities are in the local machine Administrators group. Using highly-privileged accounts as application pool or as service identities poses a security risk to the farm, and could allow malicious code to execute.

Also grant the Replicate Directory Changes permission for the farm account account used in the synchronization connection. Reboot the server to make sure that all the services using the farm account run with the new privileges.

2. Start the User Profile System Service.

3.  Create User Profile Service Application by using the wizard or PowerShell. Remember that you need to have a site collection for the My Site Host even when you do not plan to use my sites yet.

4. Set the farm account to have full control of the Service Application: select SA from the SA list and use Administrators and Permissions actions in the ribbon.

5. Launch User Profile Synchronization system service. It make take several minutes for the service to move from the starting stated to started state. The system service starts two Windows services with the farm account: first the ForeFront Identity Manager Synchronization Service and then the ForeFront Identity Manager service. While these are launched, monitor the event log to see any errors related to these two services and use the Internet resources to find the answers.

For example if you get a warning event 1004:

Detection of product ‘{90140000-104C-0000-1000-0000000FF1CE}’, feature ‘PeopleILM’, component ‘{1C12B6E6-898C-4D58-9774-AAAFBDFE273C}’ failed. The resource ‘C:\Program Files\Microsoft Office Servers\14.0\Service\Microsoft.ResourceManagement.Service.exe’ does not exist.

grant the Network Service account access to the folder C:\Program Files\Microsoft Office Servers\14.0 as described here.

6. After the system service is in the started state, you should be able to access the SA administration page and configure the profile synchronization according to TechNet. As described in my earlier post, the SharePoint will not update anything in the Active Directory by default even though the synchronization has the export stages as well. Also note that the profile synchronization in SharePoint 2010 takes several minutes compared to 2007 where it was usually a matter of seconds.

As the RTM celebrations are over and Microsoft starts to patch the brand new 2010, I expect the user profile -related binaries to be among the top priority components where the stability and quality should be improved. The first step should be to make the error messages more verbose.

Popularity: 13% [?]

79 comments to “Provisioning The User Profile Service Application”

  1. Good day, Nice submit. We have a problem with the web site around industry, may take a look at? IE even now is definitely the industry director as well as a good portion connected with other people may take out your own wonderful composing because of this problem.

  2. Excellent article. I’m experiencing a few of these
    issues as well..

    louboutin sneakers femme

  3. Admiring the time and effort you put into your blog and detailed
    information you offer. It’s awesome to come across
    a blog every once in a while that isn’t the same outdated rehashed material.
    Great read! I’ve bookmarked your site and I’m adding your RSS
    feeds to my Google account.

  4. back ribs says:

    Fantastic website. Plenty of useful information here.

    I am sending it to several pals ans additionally sharing in delicious.

    And certainly, thanks in your effort!

  5. Instant VPS says:

    Ordinarily I wouldn’t learn report for websites, however desire to declare that this write-up very forced me to take a look at and also take action! Your own way with words has been shocked me. Thanks a lot, great post.

  6. What a information of un-ambiguity and preserveness of precious
    know-how concerning unexpected emotions.

  7. jewelry sets says:

    Hi, I check your blog like every week. Your humoristic style is awesome, keep up the
    good work!

  8. Pretty nice post. I simply stumbled upon your weblog and wanted to mention that I’ve really enjoyed browsing
    your blog posts. After all I will be subscribing to your rss feed and I’m hoping you write once more very soon!

  9. Google says:

    No one routes for the evil villan who’s run off with the hero’s beau,
    same applies to a site that’s been stuck in Google‘s naughty
    corner. * Let you know there are things you can do to improve y0ur ranking.

    But it seems Memorial Day wasn’t important enough to Google.

  10. I am genuinely grateful to the owner of this web site who has
    shared this fantastic piece of writing at at this place.

  11. tutaj says:

    If you are going for finest contents like myself, just pay a visit this web page everyday for the reason that it provides feature contents, thanks

  12. Valuable information. Fortunate me I found your website accidentally, and I am surprised why this twist
    of fate didn’t took place earlier! I bookmarked it.

  13. There are lots of satisfied users that verify fat loss of up to
    5lbs a week or maybe more, even though, like all weight-loss
    product, benefits vary from anyone to a higher. These are of course
    not healthy, but will result in dramatic weight loss, and are seldom
    fatal. Phen375 however is produced under controlled facilities, is authorized and helpful to you, the customer, without doctor’s
    prescription.

    Feel free to surf to my web site Phen375 reviews

  14. I was recommended this blog by my cousin. I am not sure whether this post is written by him as
    no one else know such detailed about my problem.
    You’re amazing! Thanks!

  15. This paragraph presents clear idea for the new users of blogging, that in fact how to do running
    a blog.

  16. As an added bonus, you will also get understanding of their development in how they manage shedding and cope with other people.
    Know that there is a creative force within all of us. Simply signing up and
    having a company replicated website has never been the formula for success or profitability.

  17. krazie.net says:

    WOW just what I was looking for. Came here by searching for order online

  18. Great blog here! Also your site loads up very fast!
    What Is Old School New Body host are you using?
    Can I get your affiliate link to your host? I wish my site loaded
    up as quickly as yours lol

  19. Omer says:

    The discounts are unbeatable, and the wide range of apparels, shoes and outing gears for both the young and toddlers offers a World of Choices.
    Yesterday, according to Wang Hui’s offer clues
    to the near the train station is located in Shaoxing shared some second-hand shoes to an interview.
    The high profile Jordan Retros that continue to be released
    always seem to get the most attention.

  20. I got this web site from my pal who shared with me about this web site
    and now this time I am browsing this web page and reading very informative
    articles at this time.

    my webpage conservacion celulas madre

  21. Excellent blog here! Additionally your web site lots up very fast!
    What web host are you the use of? Can I get your associate link in your host?
    I wish my website loaded up as quickly as yours lol

    My blog – free contextual backlinks

  22. No matter if some one searches for his required thing, therefore he/she desires to be available
    that in detail, thus that thing is maintained over here.

    My blog Construction Cleanup (challengepost.com)

  23. m88 says:

    great put up, very informative. I ponder why the other specialists of this sector don’t realize this.

    You should continue your writing. I am confident, you’ve
    a great readers’ base already!

  24. If you would like to grow your experience simply keep
    visiting this web page and be updated with the hottest news posted here.

  25. What’s up friends, how is everything, and what you would like to say regarding this
    article, in my view its actually amazing for me.

    My web site ęîđĺęöč˙ íŕ íîń

  26. May I simply say what a comfort to uncover somebody who actually knows what they
    are talking about on the net. You certainly realize how to bring a problem to light and make it important.

    A lot more people ought to look at this and understand this side of the story.
    I was surprised that you’re not more popular because you surely have the gift.

    My web page aviation college

  27. If some one wishes expert view on the topic of blogging
    after that i suggest him/her to visit this blog, Keep up the good job.

    My web site lewy body dementia Life Expectancy

  28. It’s truly create a blog free great
    and useful piece of info. I’m satisfied that you simply
    shared this helpful information with us. Please keep us informed like this.
    Thank you for sharing.

  29. Leatha says:

    To some extent, they will be more out of your thoughts if they’re out of sight and you will not
    must see as much of what their relationship is like.

Leave a Reply