Answered by:
Re-creating User Profile Service App (UPS) application and service - stuck on strange issues

Question
-
Hi everyone, I'm re-creating the User Profile Service (UPS) Application , following Harbar.net http://www.harbar.net/articles/sp2010ups.aspx articles, but I'm having a couple of issues.
First, when I first create the service application, after clicking the CREATE button, the process window just spins, and spins, and spins, and eventually (30+ minutes) I just close the window. However, it does create the application and it shows up in the list after refreshing the application page.
The other issue I have, is when I atempt to start and setup the UPS Service, the drop down to select the User Profile Application is empty (see below).
I'm wondering what I am missing, I'm sure it's something obvious, but I have picked through the Harbar.net directions, with no progress.
Can anyone give me some suggestions please?
EDIT: Yes, I have done an IISRESET, many times.
-Mike
- Edited by Mikewire MCP Thursday, December 20, 2012 10:11 PM
Thursday, December 20, 2012 10:08 PM
Answers
-
Was the service status stopping prior to running the commands? If so, we should probably get the service completely stopped prior, start it, then run the above.
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010- Marked as answer by star.wars Thursday, December 27, 2012 10:02 AM
Friday, December 21, 2012 11:13 PM
All replies
-
Are you deleting the Profile, Social, and Sync databases when you delete your UPA SA, or are you attempting to leverage existing ones?
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010Thursday, December 20, 2012 10:29 PM -
Thanks Trevor, yes I am deleting the 3 associated DB's, and I did make sure the managed account has full access to MSSQL - and are db_owner to all the SP databases in user mapping. FWIW, after deleting the DB's, and trying agin to create a new UPA SA does create new DB's, so permissions appear to be correct.
-Mike
Thursday, December 20, 2012 10:49 PM -
I take it you have not changed the service account for the UPA/UPSS, correct?
Have you cleared out the FIM certificates form the Local Computer store as well as the Forefront Identity Manager services? This can all be done via the MMC.
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010Thursday, December 20, 2012 10:53 PM -
I have tried changing the service account, but both of the accounts I tried are farm admins, have local login privs, and the proper local and domain permissions as I understand from reading on the harbar.net article for configuring UPA/UPSS. I'm a bit lost, they should be working fine.
I'm not familar with clearing FIM certificates, can you enlighten me on what that is all about? That could be part of the issue.
-Mike
Thursday, December 20, 2012 11:03 PM -
You cannot change the service account, this will break it. The account must be the same as the account running owstimer.exe.
Run mmc. Go to File -> Add -> Certificates -> Local Computer. You'll find them under Personal -> Certificates and Trusted People -> Certificates.
Again go to File -> Add -> Certificates -> Service Account -> Forefront Identity Manager Service (and Forefront Identity Manager Synchronization Service). It'll be under Trusted People -> Personal.
Make sure the FIM services are stopped prior to deleting the certs.
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010Thursday, December 20, 2012 11:07 PM -
Ok, thanks again Trevor - so when I re-created the UPA I used the same managed account as the timer service is using which is a domain service account domain\sharepoint. Now that will not break the UPA, correct?
Looking in to the MMC for the certificates, I have nothing setup. Not surprsing because this is a new install and the UPA/UPSS was never setup, as I am configuring it now to work properly.
Still, the issue that's most concerning is that the UPA is not showing up in the drop down when attempting to start the UPSS.
Any thoughts there?
-Mike
Friday, December 21, 2012 4:01 PM -
What is your farm version #?
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010Friday, December 21, 2012 4:52 PM -
Im on the Aug. 2012 CU, 14.0.6126.5000
I have one DB, and one WFE running 2008 R2, and SQL 2008 R2.
-Mike
Friday, December 21, 2012 4:54 PM -
Can you delete your UPA Service Application, Stop and restart the User Profile Service service, then recreate your UPA via PowerShell (must run this as the user who is running owstimer.exe, otherwise you'll run into schema ownership issues on the Profile database)?
$upa = New-SPProfileServiceApplication -Name "User Profile Service" -ApplicationPool "SharePoint Web Services System" -ProfileDBName "Profile" -ProfileDBServer SQL01 -SocialDBName "Social" -SocialDBServer SQL01 -ProfileSyncDBName "Sync" -ProfileSyncDBServer SQL01 New-SPProfileServiceApplicationProxy -Name "User Profile Service Proxy" -ServiceApplication $upa -DefaultProxyGrou
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010Friday, December 21, 2012 5:04 PM -
I seem to be having an issue with the above script, possibly syntax related? Below is your script, modified, substituting my own vars in for SQL01 (my WFE is named sharepointweb1) and naming the DB's (appending an "RSH" to the end of each).
I have a app pool called SharePoint Web Services System, but it's not recognizing it?
Error: "New-SPProfileServiceApplication : An invalid application pool was specified."
$upa = New-SPProfileServiceApplication -Name "User Profile Service" -ApplicationPool "SharePoint Web Services System" -ProfileDBName "Profile RSH" -ProfileDBServer sharepointDB -SocialDBName "Social RSH" -SocialDBServer sharepointDB -ProfileSyncDBName "Sync RSH" - ProfileSyncDBServer sharepointDB New-SPProfileServiceApplicationProxy -Name "User Profile Service Proxy" -ServiceApplication $upa - DefaultProxyGroup
I must be missing something here, do I need to create a new app pool?
-Mike
- Edited by Mikewire MCP Friday, December 21, 2012 7:47 PM
Friday, December 21, 2012 7:46 PM -
Looks like your service application pool is not "SharePoint Web Services System", which is fine. But you need to provide the right SA App Pool. Run Get-SPServiceApplicationPool to get a valid list of pools you can use on this command.
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010Friday, December 21, 2012 7:49 PM -
Looks like your service application pool is not "SharePoint Web Services System", which is fine. But you need to provide the right SA App Pool. Run Get-SPServiceApplicationPool to get a valid list of pools you can use on this command.
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010Now I'm totally confused here because it looks vaild - I'm really starting to feel like an idoit, I'm sorry. Just for kicks, I removed "User Profile Service Application RSH" and added is (both through PS) and I am still getting the same error:
PS C:\Users\sharepoint> Get-SPServiceApplicationPool
Name ProcessAccountName
---- ------------------
RSH Search Admin Web 1 YCCHD\sharepoint
RSH Search App Pool 1 YCCHD\sharepoint_search
SecurityTokenServiceApplicationPool YCCHD\sharepoint
SharePoint Web Services Default YCCHD\sharepoint
SharePoint Web Services System YCCHD\sharepoint
User Profile Service Application RSH YCCHD\sharepointMaybe I should just hang my SP Admin hat up for the holidays :X
Again, here's the script:
$upa = New-SPProfileServiceApplication -Name "User Profile Service" -ApplicationPool "User Profile Service Application RSH" -ProfileDBName "Profile RSH" -ProfileDBServer sharepointDB -SocialDBName "Social RSH" -SocialDBServer sharepointDB -ProfileSyncDBName "Sync RSH" -ProfileSyncDBServer sharepointDB New-SPProfileServiceApplicationProxy -Name "User Profile Service Proxy" -ServiceApplication $upa -DefaultProxyGroup
"New-SPProfileServiceApplication : An invalid application pool was specified.
At line:1 char:39"-Mike
Friday, December 21, 2012 8:34 PM -
Try this:
$pool = Get-SPServiceApplicationPool | where {$_.Name -eq "SharePoint Web Services System"}
Then run:
$upa = New-SPProfileServiceApplication -Name "User Profile Service" -ApplicationPool $pool -ProfileDBName "Profile RSH" -ProfileDBServer sharepointDB -SocialDBName "Social RSH" -SocialDBServer sharepointDB -ProfileSyncDBName "Sync RSH" - ProfileSyncDBServer sharepointDB New-SPProfileServiceApplicationProxy -Name "User Profile Service Proxy" -ServiceApplication $upa - DefaultProxyGroup
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010Friday, December 21, 2012 8:36 PM -
Sooo close!!
New-SPProfileServiceApplication : Cannot bind parameter because parameter 'Name ' is specified more than once. To provide multiple values to parameters that ca n accept multiple values, use the array syntax. For example, "-parameter value1 ,value2,value3".
So I split the two commands up, and the first one ran fine.
New-SPProfileServiceApplication runs, the DB's are created, the service status is "Stopping". How long do I need to wait?
Haven't run the New-SPProfileServiceApplicationProxy script yet.
-Mike
Friday, December 21, 2012 8:53 PM -
Was the service status stopping prior to running the commands? If so, we should probably get the service completely stopped prior, start it, then run the above.
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010- Marked as answer by star.wars Thursday, December 27, 2012 10:02 AM
Friday, December 21, 2012 11:13 PM -
Ok, I took a break from this over the break, but I'm back at it now and need to resolve this issue. At the last post, I was still stuck. Right now when I run Get-SPServiceApplicationPool I get this list:
Name ProcessAccountName
---- ----------------
RSH Search Admin Web 1 domain\sharepoint
RSH Search App Pool 1 domain\sharepoint
SecurityTokenServiceApplicationPool domain\sharepoint
SharePoint Web Services Default domain\sharepoint
SharePoint Web Services System domain\sharepoint
User Profile Service Application domain\sharepointHere's a screen print of my service app screen:
And here's another of my services:
And when I go to select a service application, I still get a blank/empty drop down, just like before.
I normally am able to tackle this kind of issue myself, but I'm realyl stumped on this one. Thank much for the help so far...
Mike
-Mike
Friday, January 4, 2013 10:46 PM -
So when going to New on the Service Application page, nothing appears?
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010
-----------------------
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.Saturday, January 5, 2013 8:13 AM -
So when going to New on the Service Application page, nothing appears?
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010
-----------------------
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.
No, I can create SA's and all that, but the problem still is that I have nothing to choose from in the drop down when configuring the SA Service. See my orginal first post for the screen shot.-Mike
Monday, January 7, 2013 4:58 PM -
Can you provide the output of Get-SPServiceApplication | where {$_.TypeName -eq "User Profile Service Application"} | Format-List
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010
-----------------------
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.Monday, January 7, 2013 5:15 PM -
Yes, and there is null output. Because I have removed the SA.
The screen shot in the original post is from when I had the SA in the system, and it still was not showing up in the drop down.
So I suppose we have come full circle here...I need to create the SA, and have it show up in the drop down menu in the service config.
Maybe a second try adding the SA via powershell?
-Mike
Monday, January 7, 2013 5:53 PM -
If you do create the SA via PowerShell, just make sure to run it as the Farm Admin account. But yes in order to get output from the command you would have to have the SA in place.
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010
-----------------------
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.Monday, January 7, 2013 5:54 PM -
Ok I used the above script you provided earlier to create the SA, and ran the output:
PS C:\Users\sharepoint> Get-SPServiceApplication | where {$_.TypeName -eq "User Profile Service Application"} | Format-List MaxSynchronizationRunRetryCount : 3 ContinousSyncRunInterval : 0 FIMWebClientTimeOut : 300000 NoILMUsed : False IsUsersOnlyILMImport : False ActiveDirectoryImportOUFilterExpirationDays : 7 ActiveDirectoryImportDefragIncrement : 5000 ActiveDirectoryImportDefragThresholdInMilliseconds : 30000 SkipBDCImport : False NetBIOSDomainNamesEnabled : False IsSynchronizationRunning : DaysWorthOfActivityFeedsToKeep : 14 ManageLink : Microsoft.SharePoint.Admin istration.SPAdministration Link PropertiesLink : Microsoft.SharePoint.Admin istration.SPAdministration Link ApplicationClassId : e12223eb-f793-4e73-9f5b-3b fcc06ed092 ApplicationVersion : 14.0.6126.5000 Status : Unprovisioning DisplayName : User Profile Service TypeName : User Profile Service Appli cation IisVirtualDirectoryPath : SharePoint Web Services\41 6670c96d9245f0946a6817582e 2e20 ApplicationPool : SPIisWebServiceApplication Pool Name=SharePoint Web S ervices System PermissionsLink : Microsoft.SharePoint.Admin istration.SPAdministration Link Endpoints : {http, https} DefaultEndpoint : SPIisWebServiceEndpoint Na me=http Uri : urn:schemas-microsoft-com: sharepoint:service:416670c 96d9245f0946a6817582e2e20# authority=urn:uuid:e2ce67c 700ae410fbc3fa7668753753c& authority=https://sharepoi ntweb1:32844/Topology/topo logy.svc Shared : False Comments : TermsOfServiceUri : Service : UserProfileService ServiceInstances : {} ServiceApplicationProxyGroup : SPServiceApplicationProxyG roup CanUpgrade : True IsBackwardsCompatible : True NeedsUpgradeIncludeChildren : False NeedsUpgrade : False UpgradeContext : Microsoft.SharePoint.Upgra de.SPUpgradeContext Name : User Profile Service Id : 416670c9-6d92-45f0-946a-68 17582e2e20 Parent : UserProfileService Version : 315851 Properties : {Microsoft.Office.Server.U tilities.SPPartitionOption s} Farm : SPFarm Name=SharePoint_Con fig UpgradedPersistedProperties : {}
-Mike
Monday, January 7, 2013 6:34 PM -
That SA is unprovisioned. Can you run the following:
$sa = Get-SPServiceApplication | where {$_.DisplayName -eq "User Profile Service"} $sa.Status = "Online" $sa.Update()
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010
-----------------------
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.Monday, January 7, 2013 11:08 PM -
Well man! That was easy...it showed up in the list, hoorah!
Cycled IIS...now the SA is started - the service is not. When I go to start the service, type the password for the account, I get "An unexpected error has occurred. "
Progress!
Guess I need to check log files etc., huh?
-Mike
Monday, January 7, 2013 11:25 PM -
Yes, check the log files (do a Merge-SPLogFile if >1 server is in the farm) and post back here.
SharePoint - Nauplius Applications
Microsoft SharePoint Server MVP
MCITP: SharePoint Administrator 2010
-----------------------
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.Monday, January 7, 2013 11:35 PM -
I can honestly say I have never had as hard of a time using any system. BMC, Cerner, etc. have never given me as many hassles as SharePoint 2010. [/vent] I realize, most of my probelms are most likely self induced, but man, I wish this install would give me a break.
With that said, SP seems to be working well for us as an organization. Worked on this for a bit yesterday - My timer job page was giving errors. Turns out I had some one-time UPS timer jobs with erronious datetimes (01/01/0001...), probably from attemping to get the SA and service running. After removing them from the system via PS, I could load the page.
Now, on to trying to merge the logs, I am getting errors. I am logged in as the Farm account (mydomain/sharepoint) and I have SP Powershell v2.0 (running as administrator) and I am running this script:
Merge-SPLogFile -path "C:\SPlogs\mergelog.log" -overwrite -StartTime "1/23/2013 08:00" -EndTime "1/23/2013 09:00"
It fails, and I get this error output:
PS C:\Users\sharepoint> Merge-SPLogFile -path "C:\SPlogs\mergelog.log" -overwri e -StartTime "1/23/2013 08:00" -EndTime "1/23/2013 09:00" WARNING: Unable to start job CollectLogFiles_SHAREPOINTWEB1_147590968 on server SHAREPOINTWEB1. Merge-SPLogFile : The pipeline has been stopped. At line:1 char:16 + Merge-SPLogFile <<<< -path "C:\SPlogs\mergelog.log" -overwrite -StartTime "1 /23/2013 08:00" -EndTime "1/23/2013 09:00" + CategoryInfo : InvalidData: (Microsoft.Share...letMergeLogFile: SPCmdletMergeLogFile) [Merge-SPLogFile], PipelineStoppedException + FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletMergeLog File Merge-SPLogFile : None of the collecting jobs finished successfully. At line:1 char:16 + Merge-SPLogFile <<<< -path "C:\SPlogs\mergelog.log" -overwrite -StartTime "1 /23/2013 08:00" -EndTime "1/23/2013 09:00" + CategoryInfo : OperationStopped: (:) [Merge-SPLogFile], SPExcep tion + FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletMergeLog File
Any pointers here? I'd love to post up my log file so we can get this UPS issue fixed.- Edited by Mikewire MCP Wednesday, January 23, 2013 7:09 PM
Wednesday, January 23, 2013 7:08 PM -
I only have one WFE, and one DB server. I bet that's the issue.
What can I pull out of the log file that would be helpful? A specific process, category, area or event ID?
-Mike
Wednesday, January 23, 2013 8:36 PM -
I am getting the same error running Merge-SPLogFile -Path "z:\Prod_ULS_Unexpected.log" -Overwrite -Level Unexpected
Have you found a resolution on this issue yet? I have a 6 server farm (2WFE/4APP). Funny thing is that it runs fine in our identical test environment. I have tried to set powershell to unrestricted but that didnt help.
Monday, November 18, 2013 6:50 PM -
Even though I get that error the merge-splog seems to return results...Monday, November 18, 2013 6:56 PM
-
I only have one WFE, and one DB server. I bet that's the issue.
What can I pull out of the log file that would be helpful? A specific process, category, area or event ID?
-Mike
If you only have a single SharePoint server, just grab the log file. You can filter it with the ulsviewer.Trevor Seward, MCC
Follow or contact me at...
  
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.
Monday, November 18, 2013 7:15 PM