none
FIM SYNC service does not start RRS feed

  • Question

  • hello,

    I should ask this on mim forum but since there is no forum for that, i started here.

    the problem is after i install and configure sharepoint 2013, as a requirement, i should enable and start fim sync service on my fim server. but it does not get started and shows error "error 1069: the service did not start due to a logon failure". also why the logon account is like this. once i installed the sharepoint the logon became like this:

    any help?

    Monday, June 19, 2017 8:30 AM

Answers

All replies

  • You'll need to reconfigure the Sync Service with a valid account.

    The easiest way is to re-run the installation for the Sync Service.

    I can also see that you'll also need to re-configure the Forefront Identity Manager Service. It should not run as "Local System".


    Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!


    Monday, June 19, 2017 8:50 AM
  • thanks. i did what you said.

    now the service is ok and started but the console never starts. actually it stays forever like this:

    behind this windows it throws error:

    Unable to connect to the Synchronization Service.

    Some possible reasons are:

    1) The service is not started

    2) Your account is not a member of a required security group.

    after this i noticed that the MIM groups are empty with no members..I had already created the groups in AD.

    what I did now, was to add the identical MIM groups a member of their local MIM groups. I mean "Contoso\MIMSyncAdmins" is added to "Local\MIMSyncAdmins".

    I have started to thing to roll back to fim 2010 R2.

    • Edited by MatCollins Monday, June 19, 2017 9:55 AM
    Monday, June 19, 2017 9:46 AM
  • The Sync Service is essentially the same in MIM2016 as in FIM2010R2.

    It's a matter of configuration during the installation that you just re-ran. What groups did you enter during the installation?

    You need to add the relevant accounts as members to these groups (most notable the MIM Sync Admin-group).

    Also check that the service is running and confirm the Service Account on the service.


    Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!



    Monday, June 19, 2017 11:16 AM
  • This is the SharePoint User Profile Service you are dealing with, not a Normal FIM\MIM, however, the same requirements apply.

    So, you need to ensure the pre-requisities for a FIM Install are also considered.  Unfortunately, I don't think there is any literature that tells you this.  SharePoint itself works on a number of platforms, but UPS (FIM) will not.

    1- SQL Server, cannot be a SQL Express edition. If this SharePoint is not installed on a suppered SQL Server, this will not work.

    2- Credentials provided need to comply with the FIM requirements.

    Grant Allow login as service to the account you are using.


    Nosh Mernacaj, Identity Management Specialist

    Monday, June 19, 2017 5:35 PM
  • Are you sure it's SharePoint Profile Sync Nosh?

    The SUP does not include the "Forefront Identity Manager" Service. I don't think it's upgraded to MIM either...

    But yeah, it's a Service Account problem.


    Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!

    Tuesday, June 20, 2017 6:47 AM
  • ok i did reinstall so i thoght there is a problem within installation. what i can not configure mim to use pre-created groups like FIM? look this pic:

    and yes the groups are already created in AD under an ou.

    Tuesday, June 20, 2017 1:11 PM
  • Please see e.g. this thread:

    https://social.technet.microsoft.com/Forums/en-US/fdf36770-3bee-4e8c-b89c-f57ba6df5e2c/installation-synchronization-services?forum=ilm2

    Please check that the account installing is entitled to access the AD Groups. Also check the spelling.


    Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!

    • Marked as answer by MatCollins Wednesday, June 21, 2017 6:19 AM
    Tuesday, June 20, 2017 2:21 PM
  • since the first step of troubleshoot is done i will create another thread for second part.
    Wednesday, June 21, 2017 6:20 AM
  • I'm curious, what part of the thread solved your problem Mat?

    Did my post help? Please use "Vote As Helpful", "Mark as answer" or "Propose as answer". Thank you!

    Wednesday, June 21, 2017 7:15 AM
  • the AD groups which was created for MIM in AD, were missing a letter 'r' in their naming. once i fixed, it resolved.

    now the problem is changed. the sync service console never opens and after long wait, it shows an error. the full thread is at this link:

    https://social.technet.microsoft.com/Forums/windowsserver/en-US/9283aafc-3802-4615-a575-181d401384de/mim-syns-service-console-not-opening-stays-forever?forum=ilm2

    i would be grateful if you could help me in that,

    Thursday, June 22, 2017 6:41 AM