none
SharePoint Server 2010 Search - not returning results but crawling without errors

    Question

  • I have created a Search Service Application on a SharePoint Server 2010 (RTM) Farm and used the default Content Source. I started a Full Crawl and it suceeded with no errors etc. I ran it a few times and no issues.

    But if I go to the Intranet Portal Web Appliaction and do a search for a document that would have been crawled it does not show up in search results...nothing does. I am not getting any errors in Event Log or ULS Logs relevant to Search.

    How can I troubleshoot this problem further?


    SharePoint Solution Architect, Perth Australia - Microsoft Virtual Technology Specialist - MCTS WSS Dev, WSS Adm, MOSS Dev, MOSS Adm - http://wss.made4the.net/ - Founder of http://www.sharepointdevwiki.com/
    Tuesday, June 8, 2010 8:29 AM

Answers

All replies

  • Jeremy,

    Try seeing if you can get any results at all from your content source.  For example use a query such as ContentSource:"Local SharePoint Sites".  This will give you an idea of what is in your index.

     

    Thanks,

    Corey


    Corey Roth blog: www.dotnetmafia.com twitter: @coreyroth
    Wednesday, June 9, 2010 5:04 PM
  • Hi, I have same problem. I see that I search with the same user of search service it work!! I not understand....
    Thursday, June 17, 2010 6:00 PM
  • Might be a silly question but did you manually create a Search Center and wire it up?
    John Ross
    SharePoint Server MVP | Sr. Consultant SharePoint911: SharePoint Consulting
    Blog: http://www.sharepoint911.com/blogs/john
    Twitter: @JohnRossJr

    Professional SharePoint 2010 Branding and User Interface Design
    Thursday, June 17, 2010 7:15 PM
  • Yes, I've also setup by hand ... but nothing. Now try again but for the sake ...
    It works perfectly with the administrator account or the account of FARM research service. No ordinary user sees nothing.
    Absolutely nothing!

    Friday, June 18, 2010 3:13 PM
  • If farm admin can see the result that means you may have wrong permission. Security trimming happened and user cannot see the result.

    Friday, June 18, 2010 4:01 PM
  • You're right, I think this too, but I checked everything several times without success. I created a local user in the users group and I have added as users visit a site. This user correctly performs the search. At this point I have a problem with domain users ... but where?! I have to give rights of access / use the application search?

    Any ideas?
    Thank you.
    Sunday, June 20, 2010 7:06 AM
  • I've just blogged on configuring SharePoint 2010 search and "search" service account provisioning... It might help you visualize any settings that may have been missed.

    http://sharepointgeorge.com/2010/configuring-enterprise-search-sharepoint-2010/


    Blog: http://sharepointgeorge.com Twitter: http://twitter.com/georgekhalil
    Monday, June 21, 2010 9:31 PM
  • Thanks and congratulations for the article.
    Unfortunately I did everything well, although I used always the same account. But this is not the problem.

    Instead, I noticed that I can not insert a new managed account. When I try to do so, the system answers me: "The given key was not present in the dictionary.".

    If I do I force the thing through PowerShell, let me go but then the GUI no longer works.

    Although I try Configure Synchronization Connections, tells me that "Cannot navigate to the requested page while User Profile Synchronization is running. Please...". The Sync is not running and the Search is also stopped...

    I try another machine. I would not like the change from RC> RTM has caused problems.

    We'll let you know and if you can think of more ...

    Thank you.

    Tuesday, June 22, 2010 7:40 AM
  • No! Same problems.
    Then the problem is really the use of a single domain account for all services?
    I put the machine as an administrator, SQL Server, but nothing changes!
    Local users (group users) configured in the SharePoint group visitors can see the results, domain users not! I put the Domain Users but no result.

    The'm trying them all. Provo also users of different service but I do not want to believe it....

    Tuesday, June 22, 2010 1:51 PM
  • Hello, you have any ideas?

    I installed a new environment with another new domain and everything worked properly.
    The research work for administrator users, services and visitors.

    So the problem may be the domain in production? But where? There must be a solution, what does the domain with the search for data in "local"?

    Help, I'm going crazy!

    Thursday, July 1, 2010 8:16 AM
  • sorry forgot to come and add solution as resolved with product team:

    Just had a look in logs and discovered this after tuning ULS:

     

    06/10/2010 10:33:02.72          w3wp.exe (0x1594)                0x1064    SharePoint Server Search     Query Processor    g2j3                High        AuthzInitializeContextFromSid failed with ERROR_ACCESS_DENIED. This error indicates that the account under which this process is executing may not have read access to the tokenGroupsGlobalAndUniversal attribute on the querying user's Active Directory object. Query results which require non-Claims Windows authorization will not be returned to this querying user. da324c89-8a72-4b2b-a2b9-ed5cab78c16d

     

    Found this in support web site:

    http://support.microsoft.com/kb/842423

    and

    http://blogs.msdn.com/b/russmax/archive/2010/01/20/why-the-tokengroupsglobalanduniversal-tggau-attribute-matters-in-sharepoint-2010.aspx

    http://mattstratton.com/tech-tips/configuring-sharepoint-2010-search-in-a-one-way-trust-scenario

     

    In order to call the AuthzInitializeContextFromSid, the caller “service account” needs to able to read the TGGAU attribute. In Windows 2000 and Windows 2003 domain, members of the Pre-Windows 2000 Compatibility Access group are able read the TGGAU attribute. At a minimum, certain service accounts like the search service account need to be a member of this group. See the resources section for more information.

    SO I added the search service account to the group:

     

    Add the Windows account to the Windows Authorization Access group by using the Active Directory Users and Computers snap-in.

     

    And fixed it!

     


    SharePoint Solution Architect, Perth Australia - Microsoft Virtual Technology Specialist - MCTS WSS Dev, WSS Adm, MOSS Dev, MOSS Adm - http://wss.made4the.net/ - Founder of http://www.sharepointdevwiki.com/
    Thursday, July 1, 2010 8:38 AM
  • I'm struggling with same problem.

    I have added search user to the Windows Authorization Access group and made server boot to front-end.

    All Scope shows 0, but intranet portal search works ok. I made new scope, but still zero.

    Why scope shows still 0?

    Wednesday, September 1, 2010 5:57 AM
  • I have the same problem but are using Windows 7 so no AD.

    The error is different

     

    SPSecurityTokenService.PopulateOutputIdentity() failed to lookup UPN for user 'WIN7DH\Administrator': System.ComponentModel.Win32Exception: No mapping between account names and security IDs was done     at Microsoft.SharePoint.Win32.SPSecur32.GetUserNameEx(EXTENDED_NAME_FORMAT nameFormat)     at Microsoft.SharePoint.IdentityModel.SPSecurityTokenService.PopulateOutputIdentity(SPRequestInfo requestInfo, IClaimsIdentity outputIdentity)

     

    How to fix?

    Wednesday, September 15, 2010 5:28 PM
  • I am having somewhat having the same issue and i have already spent hours trying to figure this out. I have 2 web applications( test site and production site) on the same server and they are both included under one content source called "local Sharepoint sites" I have initiated a crawl several times but they failed. Nonetheless, the search on the test site is returning results regardless of the fact that the crawls have failed, but the production site is yet to return any results. I am not getting any error messages so i know it is just not crawling. My question is, why is the test site crawling and the production site isn't? I have also tried creating two separate content sources for both web applications and that didn't work.

    I would try adding search user to the Windows Authorization Access group and make the server boot to front-end but the problem only exists within one web application. Can anyone please help me? Thanks.

    Thursday, November 4, 2010 3:29 PM
  • This really helped me out! THANKS!!!!!

    I also had to add the SP farm account to the WAA security group. Searching works like a champ now!!

    -Brad

    Wednesday, April 27, 2011 4:36 PM
  • Hi George.  I read your article on setting up search in SharePoint, and it's really good.  I set up search on my sharepoint install, and the whole site worked just fine, but I couldn't narrow down the search to just a site, etc.  So I ended up deleting it and starting over.  I have been struggling with getting it back to work at all.  Last night I finally got it to work, and it would even do a search just on my site.  However, I discovered that I am the only user that the search will work for.  All other users have no results when searching.  Can you tell me what might be causing this?
    Friday, April 29, 2011 7:13 PM
  • We have the same problem where users can not see search results.

    At the end we found out that the problem was related to some permissions in Active Directory on the single users. We solved our issue like that:

    - go into the active directory console on your domain controller (if you have more than one, go to your primary to avoid synchronization conflicts)

    - enable in the menu bar the "advanced mode" of the console

    - now go to the user that is not able to see search results and press right-mouse -> properties

    - in the security tab locate the entry of the "authenticated users", click on them. The "read" permission should be activated. If this is deactivated, then the search does not return any results.

    Now how can we perform and fix this for 5000+ ad users?


    sharepointer
    Thursday, June 2, 2011 2:34 PM
  • sorry forgot to come and add solution as resolved with product team:

    Just had a look in logs and discovered this after tuning ULS:

     

    06/10/2010 10:33:02.72          w3wp.exe (0x1594)                0x1064    SharePoint Server Search     Query Processor    g2j3                High        AuthzInitializeContextFromSid failed with ERROR_ACCESS_DENIED. This error indicates that the account under which this process is executing may not have read access to the tokenGroupsGlobalAndUniversal attribute on the querying user's Active Directory object. Query results which require non-Claims Windows authorization will not be returned to this querying user. da324c89-8a72-4b2b-a2b9-ed5cab78c16d

     

    Found this in support web site:

    http://support.microsoft.com/kb/842423

    and

    http://blogs.msdn.com/b/russmax/archive/2010/01/20/why-the-tokengroupsglobalanduniversal-tggau-attribute-matters-in-sharepoint-2010.aspx

    http://mattstratton.com/tech-tips/configuring-sharepoint-2010-search-in-a-one-way-trust-scenario

     

    In order to call the AuthzInitializeContextFromSid, the caller “service account” needs to able to read the TGGAU attribute. In Windows 2000 and Windows 2003 domain, members of the Pre-Windows 2000 Compatibility Access group are able read the TGGAU attribute. At a minimum, certain service accounts like the search service account need to be a member of this group. See the resources section for more information.

    SO I added the search service account to the group:

     

    Add the Windows account to the Windows Authorization Access group by using the Active Directory Users and Computers snap-in.

     

    And fixed it!

     


    This worked for me.  Thanks.
    Wednesday, June 6, 2012 10:25 AM
  • Just wanted to note that this worked in a new site setup recently as well.  My results where that 'some' AD accounts could search and others would come up with 0 results.   Adding the search service account to "Windows Authorization Access Group" worked within MINUTES!

    Thank you Thank you!!


    Will

    Monday, June 25, 2012 2:28 PM
  • I'm not getting this.  How do you add a service to a security group?  Or is it the account that's using the service that you need to add?  Also, how do I determine what that user is?  Is it the Default content access account seen in the Search Service Application?

    Of note, we've got a mixed bag of people not being able to see results and what results they see.  Some can see People results, but no site results.  Others can see everything.

    Wednesday, July 11, 2012 2:44 PM
  • Hi brollman,

    In Central Administration go to Security then Configure Service Accounts.  In the drop down select the check the SharePoint Search Service (mine is called Windows Service - SharePoint Server Search) and view the account used in the "Select an account for this component".  

    This is the account you will have to add to the Windows Authorization Access Group in active directory. 

    Friday, July 13, 2012 9:03 AM
  • Hi,

    For custom reporting, I am using FullText Search query which returns all documents/files across Site collection Or Web Application based on defined scope.

    FullText query does return results but I found some wired behavior with search results. When I search through Site Search (through SharePoint UI),  I do get those missing documents (from FullText query result) as part of search results which confirms those documents are crawled and indexed:

    1. Search result omits few documents (.DOCX) from same document library

      -- e.g. If I have uploaded 10 word documents (.DOCX) then search will return me only 8 out of 10 and 2 will be not part of results.

      -- No scope or filter provided of Metadata/keywords as query wrote to return all available documents from all lists.

    2. From site pages search result returns only 5 pages (.ASPX and .html) out of total 10 pages in same library.

    I am attaching sample FullText query for specific SC

    SELECT Size, url, FileName, contentclass, IsDocument FROM Scope() WHERE "scope" = 'All Sites' AND

    contains(url,'https://domainname/sites/secondsitecollection')
    And
    (ContentClass='STS_ListItem_PictureLibrary' OR ContentClass='STS_ListItem_DocumentLibrary' OR ContentClass='STS_ListItem_XMLForm' OR ContentClass='STS_ListItem_WebPageLibrary' OR ContentClass='STS_ListItem_851' OR ContentClass='STS_ListItem_850' OR ContentClass='STS_ListItem_2100' OR ContentClass='STS_ListItem_433') AND Size != 0

    Note:

    • (Size != 0 clause is used to filter out folder and all documents are having some size and greater than > 0 kb)
    • Above query is used inside Timer Job and running under farm admin account.

    Any help will be appreciated on this topics.

    Thanks,

    Sudarshan S Vatturkar


    • Edited by Vatturkar Friday, April 19, 2013 8:20 AM typo mistake correction.
    Friday, April 19, 2013 8:20 AM
  • Moderator,

    Please could you help me in finding answer for my above query.

    Thanks,

    Sudarshan

    Wednesday, April 24, 2013 4:44 AM