This is how I setup user profile sync for SharePoint Server 2010 Beta on my machine. You should not take this as an official guide. But the steps may help if you have been drive crazy. 🙂
[Update - we are considering to gather all information and put it back to TechNet article, could be video walkthrough, screenshots, and hope that could help. After that is done, i may remove the content here.]
The following steps in done on Windows Server 2008 R2. But it also applies to Windows Server 2008. The WCF fix for R2 and Win7 is
not currently available to public but it will be released in coming days here.
- Start with a fresh SharePoint Farm installation, make sure WCF fix (Please refer to my pervious post) is already applied on the machine.
- A web application is already created at port 80. A site collection is also created.
- Don’t do anything on User Profile Service Application now…If you did, you may need to rebuild the farm. (am i kidding? no… this is beta.)
- Click System Settings – Manage Services on server.
- Start Microsoft SharePoint Foundation User Code Service – this maybe not necessary, but I always do it first.
- If you are on Domain Controller, run the following script to make sure User Code Service has the right permission to run.
$acl = Get-Acl HKLM:\System\CurrentControlSet\Control\ComputerName
$person = [System.Security.Principal.NTAccount]"Users"
$access = [System.Security.AccessControl.RegistryRights]::FullControl
$inheritance = [System.Security.AccessControl.InheritanceFlags]"ContainerInherit, ObjectInherit"
$propagation = [System.Security.AccessControl.PropagationFlags]::None
$type = [System.Security.AccessControl.AccessControlType]::Allow
$rule = New-Object System.Security.AccessControl.RegistryAccessRule($person, $access, $inheritance, $propagation, $type)
Set-Acl HKLM:\System\CurrentControlSet\Control\ComputerName $acl
- Start User Profile Synchronization Service. After you click the link, it should show something like this:
- Although the service is “Starting”, we can check the timer job if it is running properly. Click Monitoring – Check job status. Now you may find a job “ProfileSynchronizationSetupJob” is running. This may take several minutes to finish. If it finished instantly then something is wrong, you may have to rebuild it again.
- When it’s finished, the job will disappear from Running category. Now check Services again, user profile sync service should be “Started”.
- Time to setup connection! Click Application Management – Manage service applications. Scroll down to find and click User Profile Service Application. (Hint: you can copy the link to this item and add this to Resource links on Central Administration main page to save time in the future. You can do the same to Search and Managed Metadata.)
- It is possible that you get an empty status now. It’s okay.
- Click Configure Synchronization Connections.
- Oh – why I got this? “An error has occurred while accessing the SQL Server database or the SharePoint Server Search Service. If this is the first time you have seen this message, try again later. If this problem persists, contact your administrator.”
- Do a IISRESET in cmd line. Refresh the page, problem solved.
- Now, click Create New Connection.
- Fill in your domain information. Choose the users or OU you want to import. Click Ok.
- The connection you just created should be there. If not, you may need to rebuild. (I’m a bad guy, always telling you bad news.)
- Now go back to User Profile Service Application, the numbers should be shown on the side.
- You can choose to Start Profile Synchronization now. After some time, the number would change. It depends on the size of the OU you just chose.
- Click Manage User Profiles, and try to find a user. Yes, he is there!
Technical Product Manager, SharePoint