UPA – Taming the Beast

1. UPA – Taming the Beast By:Toby McGrailSr. Software Engineer

2. Please be sure to thank and visit our Sponsors!! Platinum Sponsors Gold Sponsors Silver Sponsors

3. Agenda • Introduction • What is User Profile Service • Configuring the User Profile Service in SharePoint 2010 • Stuck on Starting Error in SharePoint 2010 • Configuring People Search in SharePoint 2010 • Audiences and How to Create them in SharePoint 2010 • Enable the Activity Job Feed Timer Job with Newsfeeds in SharePoint 2010 • Extend the Time out on Farm Search Settings in SharePoint 2010 • Common Issues that Occur in SharePoint 2010 • Configuring People Search in SharePoint 2010 • Things to Check in the Search Service in SharePoint 2010 • User Profile Commandlets for SharePoint 2010 • What’s New In User Profile Services in SharePoint 2013 • Administer User Profile Service in SharePoint 2013 • User Profile Commandlets for SharePoitn 2013 • Questions?

4. Introduction • My name is Toby McGrail and I have been a Senior SharePoint Administrator over the last three years however been deeply involved in SharePoint for 8 years and counting. • Outside of SharePoint I have balanced lifestyle that includes my family, friends, and Fitness. Fitness and SharePoint are my passion. • Over 20 years IT Experience

5. What is User Profile Service? The User Profile service application in Microsoft SharePoint Server 2010 provides a central location where service administrators configure and manage the following features: • User profiles – contain detailed information about individuals in an organization. A user profile organizes and displays all of the properties related to each user together with social tags, documents and other items related to that user. • Organization profiles – contain detailed information about an organization such as teams, divisions, and so on. • Profile synchronization – provides a reliable way to synchronize groups and user profile information that is stored in the SharePoint Server 2010 profile store with information that is stored in directory services across the enterprise. • Audiences – enables organizations to target content to users based on their job or task, as defined by their membership in a SharePoint Server group or distribution list, by the organizational reporting structure, or by the public properties in their user profiles. • My Site Host – a dedicated site for hosting My Sites. A My Site Host is needed in order to deploy the social features of SharePoint Server. • My Site – a personal site that gives users in your organization a central location to manage and store documents, links, and colleagues. • Social tags and notes – enables users to add social tags to documents, to other SharePoint Server items, and to other items, such as external Web pages and blog posts. Users can also leave impromptu notes on profile pages of a My Site or any SharePoint Server page. Administrators can delete all tags for employees when they leave the company or remove a tag they do not want.

6. Configuring User Profile Service in SharePoint 2010 • Before you attempt to set up Remember to Setup Managed Metadata first since it Uses this service. • Second Make sure the Farm Account is a member of the Local Administrator Group**After it is provisioned remove it from Local Administrator group • References:User Profile Service administration (SharePoint Server 2010) http://technet.microsoft.com/en-us/library/ee721050.aspxConfigure profile synchronization (SharePoint Server 2010) http://technet.microsoft.com/en-us/library/ee721049.as

7. User Profile Service? • First the most critical piece is Setting up the User Profile service which we discussed earlier on. • One of the main things is to make sure that Forefront Service is started. Look in windows services for this part • Next we want to look in Central Administration to make sure the Services are started: • This is where you will see the common issue Stuck on Starting. As you see we don’t have this problem.

8. UPA Synchronization in SharePoint 2010 • Next we need to set up the profile synchronization. • Go To Central Administration and Manage Service Applications under Application Management • Click on User Profile Service Application as seen below: • Next click on Configure Synchronization: • If you do not have one currently configured click on Create New Connection

9. Synchronization Config in SharePoint 2010

10. Sync Connection • Once you click Start Profile Synchronization chose either Incremental or Full Synchronization and click ok. • You will then see the sync start

11. UPA – Stuck on Starting in SharePoint 2010 • UPA often gets stuck on starting when you either try to start the service for the first time or restart the service. • I would say this is the Most Common Issue that occurs with UPA. However it is easily fixed. • How do you fix this you may ask yourself? Well that’s a great question and here is the fix for it. • Stop the Timer Service • Clear the Cache in Program Data • It can be found at C:\ProgramData\Microsoft\SharePoint\Config/Guid • Remove all XML Files---DO NOT DELETE CACHE.ini file • Edit Cache.ini and change the numbers to 1 • This recreates all the XML Files • Restart The Timer Service.

12. Stuck on Starting (cont) in SharePoint 2010 • One you restart the timer service it will recreate all the needed xml files. • Once this has completed you will now see the service in a “Stopped state” • Reprovision the User Profile Service • Note: This can take sometime and I have seen it take up to 30 minutes before.

13. Configuring People Search in SharePoint 2010 • First and foremost make sure the following services are started in Central Admin: • User Profile Service • User Profile Synchronization Service • Next we will go to the Search Service Application and make sure the Search Scope for People Search is set correctly. • Your settings should look like the following slide:

14. People Search Settings in SharePoint 2010

15. Things to Check in Search Service • Make sure that you are currently crawling the Content Sources. For example search your site and people sites: • Make sure that your Default Content Account has access to search in your Web Application Policy.***Do not give your search account Full Rights!!!!

16. More in Search Service in SharePoint 2010 • Grant the Permissions for the User Profile Service Applications

17. What are Audiences in SharePoint 2010 • What are audiences? • Microsoft SharePoint Server 2010 supports two kinds of audiences: • Global audiences Global audiences are defined by properties in a User Profile service application. Global audiences include audiences that are defined by relationships (reporting structures), as well as other properties. • Windows security groups and distribution lists The Windows security groups that are available when you are creating audiences are those that are imported when user profiles synchronized with the User Profile service application. • The distribution lists that are available when you are creating audiences are those that are imported when user profiles are imported into the User Profile service application.

18. How to Create Audiences • First we will need to go to User Profile Service Application. • Next we will click on Manage Audiences under the People Section • Click New Audience and enter the information for each property as seen below:

19. More on Creating Audiences in SharePoint 2010 • Next it will take you to the Rule Creation screen and enter the information as seen below: • Then you will see the Audience Properties and Rules as seen on the next slide.

20. Audience Properties in SharePoint 2010

21. Compiling Audiences in SharePoint 2010 • Under the People Section in the Service Application Click on Compile Audiences • All you have to do is Click Compile Audiences and you will compile it. • Next lets check the status of our Audiences to make sure its compiled.

22. Enable the Activity Job – Newsfeeds in SharePoint 2010 • First Lets make sure the Activity Job is Enabled • On the Central Administration Web site, on the Quick Launch, click Monitoring. • In the Timer Jobs section, click Review job definitions. • Click User Profile Service – Activity Feed Job in the list of timer jobs. • On the Edit Timer Job page, click Enable.

23. Enabling Newsfeeds • Under the My site Settings Click on Setup My Sites • Next make sure that the Checkbox for Newsfeeds are Enabled. • Run a Profile Synchronization and you should see the Newsfeeds.

24. Extend Time-out in Search in SharePoint 2010 • First Verify that the user account that is performing this procedure is an administrator for the search service application. • In Central Administration, in the Quick Launch, click General Application Settings. • On the General Application Settings page, in the Search section, click Farm Search Administration.

25. Extend Time-out in Search in SharePoint 2010 • On the Farm Search Administration page, in the Farm-Level Search Settings section, click the value of the Time-out (seconds) setting. • In the Search Time-out Setting dialog box, in the Connection time (in seconds) box, type the number of seconds that you want the search system to wait when attempting to connect to a content repository. • It is defaulted at 60 so we are going to change it to 120 • In the Request acknowledgement time (in seconds) box, type the number of seconds that you want the search system to wait for a content repository to respond to a connection attempt. • It is defaulted at 60 so we are going to change it to 120 • Click Ok and you have successfully extended the Time-out in Search

26. Common Issues with UPA in SharePoint 2010 • Stuck on Starting in SharePoint Services • User Profile Service in Windows not Starting due to Permission Issues • Service Pack 1 Sync Issues • Fix is install December 2011 Cumulative Update • Synchronization Service currently Not Provisioned • If the service is Stuck in Starting you will see this and needs to be reprovisioned • Configuration with Incremental Sync • A good rule of thumb here is Plan out when you need to do your syncs

27. User Profile PowerShell Commandlets for 2010 • Add-SPSiteSubscriptionProfileConfig - Adds a new site subscription to a User Profile Service application • Get-SPProfileServiceApplicationSecurity - Returns permission and identity information. • Move-SPProfileManagedMetadataProperty- Moves multiple-string values into a term set. • New-SPProfileServiceApplication- Adds a User Profile Service application to a farm. • New-SPProfileServiceApplicationProxy- Creates a User Profile Service application proxy on the local farm. • Remove-SPSiteSubscriptionProfileConfig- Deletes a site subscription from a User Profile Service application. • Remove-SPSocialItemByDate - Deletes tags, notes, or ratings. • Set-SPProfileServiceApplication-Sets properties of a User Profile Service application. • Set-SPProfileServiceApplicationProxy- Sets properties of a proxy for a User Profile Service application. • Set-SPProfileServiceApplicationSecurity -Sets permission and identity information.

28. User Profile Powershell Commandlets for 2010 • Set-SPSiteSubscriptionProfileConfig -Sets the parameters of a site subscription. • Update-SPProfilePhotoStore- Updates the profile photo store to be compatible with SharePoint Server 2013. • Add-SPPluggableSecurityTrimmer- Adds a pluggable security trimmer to a User Profile service application proxy. • Get-SPPluggableSecurityTrimmer- Gets pluggable security trimmers that have been added to a User Profile service application proxy. • Remove-SPPluggableSecurityTrimmer- Removes pluggable security trimmers that have been added to a User Profile service application proxy. • Add-SPProfileLeader- Adds a company leader. • Get-SPProfileLeader- Returns the current company leaders. • Move-SPSocialComments- Moves social comments. • Remove-SPProfileLeader- Removes a company leader.

29. User Profile Replication Engine Commandlets 2010 • Get-SPProfilePropertyCollection - Gets all user profile properties. • Start-SPProfileServiceFullReplication - Replicates all selected user profile properties from the source User Profile service application to the destination User Profile service application. • Start-SPProfileServiceRecoveryReplication- Recovers user profiles that failed to replicate during full profile replication. • Start-SPProfileServiceIncrementalReplication - Replicates changes for selected profile properties from the source User Profile service application to the destination User Profile service application using the Replication Engine Windows service. • Stop-SPProfileServiceIncrementalReplication- Stops incremental profile replication.

30. Changes to User Profile Services in SharePoint 2013 • User Profile Import options in 2013 • Classic Import using Forefront Identity Management • Connect to an External System Using BCS • New option available in SharePoint 2013 which is Direct Import from Active Directory which is designed to import the AD profile as quickly as possible. This is super fast from the testing that I have done! • Key Capabilities are • Direct AD Forest Import (one connection per domain) • You can specify OU’s , users and groups and LDAP filters for incremental imports • There are some limitations in AD import option • Mapping to system SharePoint properties is not supported. • Mapping two different AD attributes to the same SharePoint property is not supported • Filtering AD Import • Filtering uses a simple LDAP query when you create a Active Directory connection. • After a full import the UPA admin must purge the items that no longer belong in the profile database • Set-SPProfileServiceApplication -Identity $upa – PurgeNonImportedObjects $true

31. Changes to User Profile Services in SharePoint 2013 (cont) • Switching between FIM and AD Direct • There is no automatic migration from FIM to AD Direct or property mappings as FIM configuration connection is in the Sync DB and AD Direct connection in the Profile DB. Option is Run a Full Import and use PurgeNonImportedObjects option if you want to remove the items that are no longer to be used. • User Profile Replication Engine(UPRE) • User Profile Replication Engine in SharePoint 2010 is a separate download and now it is out of box feature. UPRE is a tool where we can replicate user profile information and some social information between multiple farms.

32. Administer User Profile Services in SharePoint 2013 • Create, edit, or delete User Profile service applications in SharePoint Server 2013 - http://technet.microsoft.com/en-us/library/ee721052.aspx • Delegate administration of User Profile service applications in SharePoint Server 2013 - http://technet.microsoft.com/en-us/library/ee721057.aspx • Delegate administration of User Profile service application features in SharePoint Server 2013 - http://technet.microsoft.com/en-us/library/ee721065.aspx • Delegate administration of SharePoint Server 2013 user profiles - http://technet.microsoft.com/en-us/library/ee721059.aspx • Remove administrators from User Profile service applications in SharePoint Server 2013 - http://technet.microsoft.com/en-us/library/ee844936.aspx • Add, edit, or delete custom properties in SharePoint Server 2013 user profiles - http://technet.microsoft.com/en-us/library/cc262327.aspx • Manage user profile synchronization in SharePoint Server 2013 -http://technet.microsoft.com/en-us/library/ff382639.aspx

33. User Profile PowerShell Commandlets for 2013 • Add-SPSiteSubscriptionProfileConfig - Adds a new site subscription to a User Profile Service application • Get-SPProfileServiceApplicationSecurity - Returns permission and identity information. • Move-SPProfileManagedMetadataProperty- Moves multiple-string values into a term set. • New-SPProfileServiceApplication- Adds a User Profile Service application to a farm. • New-SPProfileServiceApplicationProxy- Creates a User Profile Service application proxy on the local farm. • Remove-SPSiteSubscriptionProfileConfig- Deletes a site subscription from a User Profile Service application. • Remove-SPSocialItemByDate - Deletes tags, notes, or ratings. • Set-SPProfileServiceApplication-Sets properties of a User Profile Service application. • Set-SPProfileServiceApplicationProxy- Sets properties of a proxy for a User Profile Service application. • Set-SPProfileServiceApplicationSecurity -Sets permission and identity information.

34. User Profile Powershell Commandlets for 2013 • Set-SPSiteSubscriptionProfileConfig -Sets the parameters of a site subscription. • Update-SPProfilePhotoStore- Updates the profile photo store to be compatible with SharePoint Server 2013. • Add-SPPluggableSecurityTrimmer- Adds a pluggable security trimmer to a User Profile service application proxy. • Get-SPPluggableSecurityTrimmer- Gets pluggable security trimmers that have been added to a User Profile service application proxy. • Remove-SPPluggableSecurityTrimmer- Removes pluggable security trimmers that have been added to a User Profile service application proxy. • Add-SPProfileLeader- Adds a company leader. • Get-SPProfileLeader- Returns the current company leaders. • Move-SPSocialComments- Moves social comments.

35. More User Profile PowerShell Commandlets for 2013 • Remove-SPProfileLeader- Removes a company leader. • Remove-SPProfileSyncConnection- Removes a synchronization connection. • Add-SPProfileSyncConnection-Adds a synchronization connection. • Update-SPRepopulateMicroblogFeedCache- Refreshes the cache. • Update-SPRepopulateMicroblogLMTCache- Refreshes the cache. • Get-SPProfilePropertyCollection- Gets all user profile properties. • Start-SPProfileServiceFullReplication- Replicates all selected user profile properties from the source User Profile service application to the destination User Profile service application. • Start-SPProfileServiceIncrementalReplication - Replicates changes for selected profile properties from the source User Profile service application to the destination. • Stop-SPProfileServiceIncrementalReplication- Stops incremental profile replication. • Do NOT use the following commandlets!!! • Remove-SPSocialAppPermissions • Add-SPSocialAppPermissions

36. Questions • Do you have any issues that you have seen that we have not covered • My Blog • http://tobymcgrail.com:2020/SPADMIN • References • http://tobymcgrail.com • http://technet.microsoft.com/en-us/library/ee721049.aspx • Contact Information: • Toby McGrail – tmcgrail@microlinkllc.com

37. Please be sure to thank and visit our Sponsors!! Platinum Sponsors Gold Sponsors Silver Sponsors