.NET Tutorials, Forums, Interview Questions And Answers
Welcome :Guest
Sign In
Win Surprise Gifts!!!

Top 5 Contributors of the Month
Gaurav Pal
Post New Web Links

How can I change identity of User Profile Sync Service?

Posted By:      Posted Date: October 11, 2010    Points: 0   Category :SharePoint

1) I cannot remove duplicate managed account with remove-spmanagedaccount because this account is used by user profile synchronization service.

2) I cannot change the account in CA-Configure Service Accounts, it says "item has already been added..." because of duplicate managed account (1)

Is there a way of changing the account of user profile sync service so that it can be removed with remove-spmanagedaccount?


View Complete Post

More Related Resource Links

Restarting Server: How to restart User Profile Sync Service?


Greetings all,


We had to restart our server, and once restarted, the User Profile Service (that we so laboriously fixed/reconfigured a month back) isn't starting. We get a retry on "User Profile Sync is provisioning, please wait..." before it terminates.

Can someone please recommend the best order in which to re-start the services so User Profile Sync restarts and continues to update?

Thanks SO MUCH,


User Profile Sync Service Crashed


I had set up the user profile manually by usiing the walk-through at http://www.harbar.net/articles/sp2010ups.aspx which seems to be the best post on this based on the attention it is getting.

I determined that  the User Profile service had no tbeen updating. I went to the connections page and the original connection was not listed. When I tried to create a connection it would give me the error "Cannot navigate to the requested page while user profile synchronization is running.  Please wait for the current Synchronization to finish"  So I tried to stop all Profile Jobs manually.

Still unable to get acces to create a new connection

Found a post that recomended hotfix KB983497 should help the user profile issues. Installed  that / rebooted.

Now I can not even navigate to the User Profile Management Page. Get an error "File Not Found , Correlation ID: d3e18550-edd0-4f9e-bf9d-eee89c5dc3af ".

I tried to uninstall this update but it will not give me that option. It also shows this installed 3 times with today's date as install date.

On the Manage Service on this server Page > User Profile Synchronization Service is stuck i

Change Service Account for User Profile Service application



I change service account for user profile service application from spfarm to spservice . and then FIM Synchronization Service is stopped and i found this error in event viewer.

"The server encryption keys could not be accessed.

User Action

Verify that the service account has permissions to the following registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Forefront Identity Manager\2010\Synchronization Service

If the problem persists, run setup and restore the encryption keys from backup."

But i tried to set the permission for spservice in registry. Still can't start the FIM Synchronization Service and also the log on as "Account" is changed to spservice .

When I change to spfarm for User Profile Service Application, it is working fine.

Please advise me that what do i need to configure for spservice ?



Forefront Identity Manager errors when starting the User Profile Synchronization Service Application

I have seen several people who are having trouble getting the User Profile Synchronization Service to start.  None of those threads have the set of errors that I am seeing.  I have all the prerequisites installed and I am using the farm administrator account which has admin rights both on the SP server and the SQL box.  This is a split back-to-back extranet topology and there is a one way trust between the extranet domain and the internal domain.  The administrator account is an internal domain account.  I receive the following two Forefront errors every five seconds in the event log after starting the User Profile Synchronization Service Application:

.Net SqlClient Data Provider: System.Data.SqlClient.SqlException: HostId is not registered
   at Microsoft.ResourceManagement.Data.Exception.DataAccessExceptionManager.ThrowException(SqlException innerException)
   at Microsoft.ResourceManagement.Data.DataAccess.RetrieveWorkflowDataForHostActivator(Int16 hostId, Int16 pingIntervalSecs, Int32 activeHostedWorkflowDefinitionsSequenceNumber, Int16 workflowControlMessagesMaxPerMinute, Int16 requestRecoveryMaxPerMinute, Int16 requestCleanupMaxPerMinute, Boolean runRequestRecoveryScan, Boolean& doPolicyApplicationDispatch, ReadOnlyCollection`1& activ

User Profile Sync Service is not getting started


In SharePoint 2010.I have configured user profile service application after i was have started user profile service

and then i was trying to start user profile sync service but this is not getting started..it is showing starting but after some time it is getting stopped. Please help.  this is not standalone installation.




Profile User Synchronisation Service

Hi, I have a problem to open Profile User Synchronisation. It doesn' work, I tried to verify this problem by opening services.msc but It show an error when I try to restart the service : Error 1068 The service or the groupe of dependency can't be restarted.   Thanks

User Profile Service account Write to AD Permissions

I followed this guide here (http://www.harbar.net/articles/sp2010ups.aspx) to provision the UPS service in sharepoint 2010. I found the guide very helpful and informative. Everything is working correctly except for the write back to AD I've followed the steps and have assigned the listed permissions to the UPS service account, however I still get permissiong errors in the FIM GUI Our AD is running in a 2008 environment but is in 2003 mode, so I made sure to add the UPS account to Pre Windows 2000 Compatible access built in group and restart the server so that the new group settings would take affect. Do I need to reprovision the UPS service or something? Or am I missing something completely. (Hopefully the latter lol!) Thanks RKB

Unable to start user profile synchronization service

Hello, I have the following problem. user profile synchronization service doesn't start up, with the following error in log: The service encryption keys could not be found. User Action Verify that the service account has permissions to the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Forefront Identity Manager\2010\Synchronization Service If the problem persists, run setup and restore the encryption keys from backup. Permissions for registry are availabele. Thank you.    

Sharepoint 2010: User Profile Sync with Person attributes

Sorry for opening another post following this, but I think this case is quite concrete: http://social.msdn.microsoft.com/Forums/en-US/sharepoint2010general/thread/2fa02093-630e-4131-bdc7-0b979067f601 When trying to configure in Sharepoint 2010 - User Profile Application, an additional sync source from BDC (as at least, one LDAP Profile is required). The first approach was to create a straightforward SQL Connection with SP Designer, and it seemed everything ok, except I'm not able to setup synchronization of "Manager" property, which is great in order to see Silverlight Organization Explorer Webpart. As I have read in the previous post, someone pointed to setup a BDC with Visual Studio 2010, so one attribute is of type: Microsoft.SharePoint.SPUser. It seamed very logical, and so I tried to do such task. Once I have deployed correctly a BDC with this strong type (SPUser), the result is that I'm still unable to see any attribute when trying to synchronize Manager attribute. In Sharepoint 2007 this was possible, but not able in SP 2010. Any idea of how to do it? Just a bug? I have one very dirty workaround: setup a Timer job to run after Sync, so I can setup this field by code. But, for doing this, I would not need to run Sync process with BDC anymore.    Evotec Consulting

Manage User Profile -- cannot change order

Hi, Is there any reason why I can't change the order of some of the properties in Manage User Profile. E.g  "about me " and "account name". I clicked the move down error, but it doesn't move Please advice, your help would be greatly appreciated.

User Profile Service - "The specified user or domain group was not found"

Hi there, I had configured the User Profile Service and all was working well (Syncing with AD etc.). However, something has gone wrong. The services still appear to be running; both Forefront Identity Manager services are running, and the services show as 'Started' in Central Administration. The 'My Profile' and 'My Site' options have disappeared though, and browsing to the My Sites page results in an error (Could not load user profile). To make matters much worse, it seems to have also broken the Central Administration site. If I try and go to 'Manage Service Applications' I get another error (The specified user or domain group was not found). This error seems to come up on around half of the pages on the Central Administration site. Looking up the error (abb6b174-0f71-413a-a27a-41cdc87b66d0) in the logs I find this: 09/06/2010 15:35:45.44  w3wp.exe (0x0868)                        0x06A0 SharePoint Portal Server       User Profiles                  cm6y High     User Profile Application Proxy failed to retrieve partitions from User Profile Application: Microsoft.Office.Server.UserProfiles.UserProfileA

User Profile Sync not starting anymore

Hi! http://www.harbar.net/articles/sp2010ups.aspx Followed this guide to enable User Profile syncronization excluded the creation of the two Web applications and User Profile Service. I had these already setup by default when I installed SharePoint Server 2010. The first time I started Syncronization service it did succesfully started the Forefront services in windows and the sync service, but when I began configuring import connection settings I got connection to AD and saw all the users in AD groups, but never got it done because a error that said something about "??? WA"...don't remember anymore. I figured out that it was just because that I didn't do "IIS reset" nor the  system restart. So I did IIS reset and also restarted the system just incase. When system got back up ForeFront Manager Service was down, cause everyone told that you shouldn't mess around Service.msc so I figured that I could just stop sync service and start it again. And here I am figuring out why nothing will come back on. Both ForeFronts are in disabled state and sync service stopped. When I try to start sync service it tries a while, "ForeFront sync service" -startup change to automatic but returns to disabled state and in SharePoint sync service comes back to stopped state. Yes SharePoint farm account is in local admin group! Any suggestion

User Profile Sync - Profile Picture Export to AD Problem

To start, I think I've read every post/blog/etc there is on this subject.  Currently I have user profile import to Sharepoint 2010 working.  It imports profile data just fine.  Everything in the FIM Synchronization manager show success even.  Its the export from Sharepoint to AD of the user profile picture that isn't working at all.  I've gone thru the steps of adding the thumbnailphoto export under the picture properties.  I can see the export inside of the FIM manager.  I notice though that in FIM there is there a DS_EXPORT of the objects.  I've looked into the SyncDB and noticed in the metaverse table the SPS_MV_OctetString_PictureURL never gets updated with the information from the PictureURL column of the ProfileDB.  It is always Null.  Actually in FIM it only shows one person with an update, and keep showing the PictureURL property as being not applied, which is probably because it is showing it as blank only.  In the connector for the object in FIM, I get the error that I've seen in some blog posts where it says PictureURL (String) is not compatible with SPS_MV_OctetString_PicutreURL (binary), but that seems to be how Sharepoint builds the connection even though FIM finds it invalid.  I've had that created, deleted several times, so I guess that is ordinary, and not sure that is even the problem.

a bit confuse with the requirements of the user profile sync

Hi,   I'm setting up a SP 2010 farm environment, where I want to configure the user profile synchronization (AD based). After some difficulties resolved, I finally was able to make it works.   After that, the health analyser tells me it's bad to have services running with a user in the local administrator group. However, the setup guide tells me to add the user to the group.   In order to clarify, can you tell me what are the exact prerequisites of the user account for : * the service User profile synchronization service (same as farm admin service) ? On my farm, domain\spadmin by now * the instance of the user profile synchronization application ? On my farm, domain\spusersync   I've granted on the domain (w2K3 domain) all required permissions to write properties on both accounts (spadmin and spuser).   What are the next steps ? as my profile synchronization is set up, can I simply remove the user from the local admin group ?   thanks for clarifications, steve  Paying back the community for its help by writing articles : Have a Nice Day.Net Blog

User Profile Service Synchronization Connection: Client Timout

Hi, I have scenario on configuring User Profile Synchronization service on customer site as below. Window AD Server 2003 Domain NetBIOS: foo FDQN: foo.bar.com  User Account to connect: foo\ad-connect This account already set permission as describe in http://technet.microsoft.com/en-us/library/ee721049.aspx  when I try to create connection, system took long time to process then return error as "Client Timeout". I try to check FIM and it's seems to work fine (no error return and can get users data). So could anyone told me what's wrong? Since I've didn't have much knowledge on Network and AD, please advice.Theeraphat.P SharePoint Information Worker

User Profile Service lookup in dataview web part

I'm attempting to setup a web part in SharePoint Designer 2007 that will list team members that are currently on call.  I've created the data connection to our oncall database and a dataview web part that has two columns.  One column lists the users ID, and the other lists their oncall priority.  This part works great! Example: USERID  |   PRIORITY ID1234   |       1 ID5678   |       2 Now, what i would like to see instead is the user's name instead of their ID. Example: USERNAME  |   PRIORITY John, D       |       1        Jane, B       |       2 I thought originally i could pull this information from AD using the user profile service from here:  http://<servername>/_vti_bin/userprofileservice.asmx?wsdl I've created the data connection to the user profile service, but at this point, i'm unsure how to merge the two data connection columns and get the right user data to display. Any tips?  Has anyone done this before?

Error while trying to access User Profile Service

Hi, I'm tryiong to setup UPA service but having some issues after running the UPA service.UPA service appears running, but clicking on the link in Central Administration does not take me to the Service Configuration page. Instead Central Admin flashes unknown error. Error log shows error message similar to the following o    User Profile Application Proxy failed to retrieve partitions from User Profile Application: Microsoft.Office.Server.UserProfiles.UserProfileApplicationNotAvailableException: No User Profile Application available to service the request. Contact your farm administrator.     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.get_ApplicationProperties()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.get_PartitionIDs()     at Microsoft.Office.Server.Administration.UserProfileApplicationProxy.IsAvailable(SPServiceContext serviceContext)                34e709d0-90b0-4419-afd0-44aff54ac385 We have a central admin server and two WFE servers. User Profile Application is created on the application pool in central admin server and the Instance (only instance) runs on the Central Admin Server. If anyone has faced the same issue kindly revert back to me. Regards, A
ASP.NetWindows Application  .NET Framework  C#  VB.Net  ADO.Net  
Sql Server  SharePoint  Silverlight  Others  All   

Hall of Fame    Twitter   Terms of Service    Privacy Policy    Contact Us    Archives   Tell A Friend