User profile sync SSP -> Site collection does not work


  • I've got a problem with one of the Sharepoint 2007 farms at a customer of us.

    It appears the profile sync doesn't work properly (anymore?). It's a MOSS environment where users can edit their information in the mysite (http://mijnsite). Several of them have updated their profile picture, but somehow the changes aren't shown in the People & groups list (http://intranet/_layouts/people.aspx).

    When searching for this problem I've come across a lot of possible solutions.

    I've already tried the stsadm -o sync -listolddatabases 0, stsadm -o sync -deleteolddatabases 0, stsadm -o sync -synctiming m:1, stsadm -o sync sweeptiming m:1.

    This didn't help a bit.

    Also checked out: This seemed to work fine (after making a mod to the sources so it would work in a dutch Sharepoint 2007 environment), except when not running in dry mode, it crashes when trying to update a profile picture as the format doesn't appear to be correct.

    I've also checked the database if some accounts were set to Moving ( and fixed this by undo'ing the move step.

    This worked fine as there aren't any accounts anymore which have the status Moving.


    When checking out the accounts in the Central Admin (http://ssp/ssp/admin/_layouts/ProfMngr.aspx?ConsoleView=Active) I'm seeing the changes made in the mysites. This leaves me to assume that the sync back to the SSP works fine. It's just the sync of this information back to a Site collection which doesn't work.

    The Timer Jobs (quick and normal) run ok, they have succeeded and are 100%.

    The event log doesn't has any errors either.

    Someone with a new suggestion? It appears I've already done quite a bit to find the solution. Can't think of anything else to do.

    Monday, April 12, 2010 12:51 PM


All replies

  • Jan,

    This brings us to the dreaded option, if you have a choice, is to rebuild SSP. I would create a new SSP and then change associations. You think that is a possibility you can explore?

    Blog: Alpesh Nakar's Blog | Twitter: Follow Alpesh on Twitter |SharePoint Resources: Just SharePoint Resource Center | Follow Just SharePoint updates on Twitter
    Tuesday, April 13, 2010 12:51 AM
  • Well, I could certainly do such a thing, except it's a production environment, so such a thing has to be scheduled.

    Creating a new SSP doesn't affect the mysites I hope?

    I should just make a new SSP, configure it like the old one. When I'm done, change the bindings? I've done such stuff before in development environments, but never in production.

    The only things which need configuring is the search and perhaps the mysites. We don't use Excel services, BDC's or any other stuff regulated in an SSP. If this really is the only solutions I'll have to notify the customer and schedule a planned migration.

    Tuesday, April 13, 2010 6:32 AM
  • well, Mysites is a component of SSP so you will have to plan it accordingly as well. You will have to configure the same settings for mysites on the new SSP.Search again would require the re-configuration.
    I LOVE MS..... Thanks and Regards, Kshitiz (Posting is provided "AS IS" with no warranties, and confers no rights.)
    Tuesday, April 13, 2010 6:56 AM
  • We seemed to have run into a similar issue.  Multiple users were getting 'access denied' errors, but they clearly had permissions to the site.  We gathered that they made changes to their user profile properties.  Not sure what exactly fixed the issue.  It was either when I removed user from site collection and readded them or the site collection syncronized (happend at same time).  Wonder if this is a bug?  I know you said the stsadm sync didn't work, but was helpfull



    • Marked as answer by Stanfford Liu Friday, April 23, 2010 8:37 AM
    Tuesday, April 13, 2010 2:47 PM
  • TechNet Moderators:

    Again, how is this an answer to the problem?

    "I have no idea how, but the problem is gone" it hardly an answer.

    Please stop marking answers like this. It makes everyone stop looking for an answer.

    Regards, Shai Petel.
    Wednesday, May 11, 2011 8:15 PM
  • From what I gathered you have 2 options, and this is true for 2007 and 2010 according to my tests:

    Option 1: Manual update

    Delete the user from each site collection users list, which will remove his permissions. Re-assigning permissions to him/her will create a new user profile based on the current information.

    since this is a lame solution, I agree, here is another way:

    Option 2: user profile synchronization

    When you have your user profile sync job set up - each time after the sync was completed it will trigger a "push updates" from the changed profiles to all site collections.

    This means, that manual changes will not be promoted until the automatic profile sync will trigger, and even then - it takes a while until changes are propogated (its not immediate).


    I agree that starting a manual profile propogation is somthing that is apperantly missing in the product, I will post if I learn how to do it.


    I hope this helps,


    Regards, Shai Petel.
    • Proposed as answer by Shai Petel Wednesday, May 11, 2011 8:24 PM
    Wednesday, May 11, 2011 8:24 PM
  • And another proposed answer to this would be:

    Apperantly you can invoke this timer job directly from STSADM using this command:

    stsadm -o sync

    as described here:

    Regards, Shai Petel.
    Wednesday, May 11, 2011 8:31 PM
  • The User Profile -> Site Collection sync is definitely buggy.


    Anyways, I have the same issue and tried all the posted solutions on the internet.


    Deleting a user and adding them back is a not a solution. I agree that the MVP should not mark this thread as answered.


    Thanks for point out the codeplex ( method. Why would someone build a manual process? Hmm....maybe because its buggy!

    Thursday, May 12, 2011 1:00 AM
  • Yeah, you are right - It is buggy but works sometimes (not for me!) so i thought i'd mention it.

    The codeplex project is 2007 only, I built a 2010 version and asked the owner to post it there - for now if anyone needs a 2010 version of the codeplex project to propogate user profile changes into site collection users list - feel free to email me.

    shai at kwizcom dot com

    I believe, NOW this thread is answered, with a "known issue" and workaround.

    Regards, Shai Petel.
    Thursday, May 12, 2011 4:34 PM