Wednesday, February 15, 2012

Search service is not able to connect to Administration component server

$AdminComponentServer = "ServerName"

$varInstance = Get-SPEnterpriseSearchServiceInstance -local  

Start-SPEnterpriseSearchServiceInstance -Identity $AdminComponentServer

$varSearchApp = get-spenterprisesearchserviceapplication

set-spenterprisesearchadministrationcomponent –searchapplication $varSearchApp –searchserviceinstance $varInstance

...Wait a few minutes.....

(http://blogs.technet.com/b/poojk/archive/2011/11/28/sharepoint-2010-search-service-is-not-able-to-connect-to-administration-component-server.aspx)

Wednesday, January 11, 2012

Nicht behandelte Ausnahme in der Silverlight Anwendung

  1. Zentraladministration aufrufen
  2. Unter Anwendungsverwaltung den Link Webanwendungen verwalten aufrufen
  3. Die entsprechende Webanwendung anklicken
  4. Im Ribbon das Menü Allgemeine Einstellungen aufklappen und dort wieder den Punkt Allgemeine Einstellungen auswählen
  5. Die Webseiten-Sicherheitsüberprüfung auf Ein stellen:
Danach sollte der Fehler nicht mehr auftreten.

Technisch hängt das Problem mit dem Silverlight Client Objektmodell zusammen, welches den WCF (Windows Communication Foundation) Endpunkt bei ausgeschalteter Sicherheitsüberprüfung nicht öffnen kann.

Monday, January 9, 2012

Visual Downgrade

$Web=Get-SPWeb “Full URL of 2010LookAndFeel Site”
$Web.UIVersion=3
$Web.UIVersionConfigurationEnabled=$true
$Web.update()

Wednesday, December 14, 2011

Error: Help Cannot be displayed

Check permissions for the Web Application application pool account
Open the Microsoft SQL Server Management Studio. Navigate to the Database roles for the SharePoint AdminContent database: (local)\SharePointinstance –> Databases –> SharePoint_AdminContent_8a628b24 –> Security –> Roles –> Database Roles
Double click WSS_Content_Application_Pools. This will open the Database Role properties. On the left hand side, select Securables. Look for the following entries:
  • proc_EnumResourcesAtScope
  • proc_EnumResourceValuesForAllLangs
If these do not exist, perform the following steps to add them:
Click Search… –> Specific objects… –> OK –> Object Types –> select Stored procedures –> OK –> enter the above 2 entries: proc_EnumResourcesAtScope and proc_EnumResourceValuesForAllLangs –> Click Check Names and accept –> OK.


Now the stored procedures are added to the WSS_Content_Application_Pools Database role. Now we need to add the Execute permission for this database role.
To do this, select the 2 entries, and check Execute. After you are done, click OK.

Tuesday, November 29, 2011

Create a Standard Quota

$quotaTemplateName = "Standard Quota"
$MaxLevelMB = 10240
$WarnLevelMB = 9216
    $quotaTemplate = New-Object Microsoft.SharePoint.Administration.SPQuotaTemplate
    $quotaTemplate.Name = $quotaTemplateName
    $quotaTemplate.StorageMaximumLevel = ($MaxLevelMB*1024)*1024
    $quotaTemplate.StorageWarningLevel = ($WarnLevelMB*1024)*1024
    $contentService = [Microsoft.SharePoint.Administration.SPWebService]::ContentService
    $contentService.QuotaTemplates.Add($quotaTemplate)
    $contentService.Update()

AAM REDIRECT von HTTPs auf HTTP

$webapp = "webappname"
$https= "https://url.com"
$http= "http://url.com"



$zone = "Internet"
 New-SPAlternateURL $https -Zone $zone -WebApplication $webapp
New-SPAlternateURL $http -Zone $zone -internal -WebApplication $webapp

Saturday, November 19, 2011

Search Results only available for Admins / Search in a OneWayTrust Scenario

(http://support.microsoft.com/kb/2344518)
SP FARM and UserAccounts are in different Domains


Resolution:

$SearchServiceApp = Get-SPEnterpriseSearchServiceApplication
$SearchServiceApp.SetProperty(“ForceClaimACLs”, 1
)

Start a full crawl!! 

Thursday, November 17, 2011

PeoplePicker: There was an error in the callback

Working with an environment where the QA and development machines are in a Test domain, while the production farm and all the primary users are in another domain. There is a one way domain level trust where the test domain trusts the production domain. In SharePoint 2007, we ran SetAppPassword and PeoplePicker-SearchADForests and everything worked just fine. However, in SharePoint 2010, we ran the exact same commands, and we started getting the following error when searching for users…FAIL :
There was an error in the callback
Thinking that the HTTP response would have some clues as to the cause of the error, we started out with a netmon trace. Unfortunately, there are no extra details in the actual response. I would see a POST to Picker.aspx with the search string, but the only thing in the response is the error message. No HTML, only the error. SharePoint trace logs are not showing anything either. We cleared out the PeoplePicker-SearchADForests property, and the People Picker would find users from the QA domain, and it would find users that were already added to the site. The content database was an upgrade from SharePoint 2007, so there were already Production user accounts in the site collections.
I started doing some research, and everything I was finding with regards to the error message was related to the SetAppPassword command not being ran on all the boxes. When you run SetAppPassword, it creates the following registry value:
HKEY_Local_Machine\SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\14.0\Secure
AppCredentialKey : REG_BINARY
AppCredentialKey is the information used to encrypt/decrypt the information you pass into PeoplePicker-SearchADForests. This information has to be the same across all the servers, so you have to run SetAppPassword on every machine in the farm using the same password. In our case, we exported the registry key, and used Beyond Compare to validate that the entry was identical on all the servers.
Knowing that the registry key was a core piece of this error message, we did the following :
  1. Updated our Hosts file on our client machine to point to a specific server
  2. Ran Process Monitor on the server
  3. Ran IISReset
  4. Reproduced the error
We then searched the log file for the Secure registry key and found a single entry with a status of “Access Denied”. Looking at the details revealed that the Application Pool account was trying to read the registry and didn’t have access. We then checked permissions on the key to confirm that the WSS_WPG group did not have any access. In SharePoint 2007, this group has read access by default. Since our app pool needs to read the registry key to get the value for decrypting the People Picker property, we granted WSS_WPG read access. Once this change was made, all was right in the world, and the People Picker was able to return users from both domains.
You won’t see this issue if you run all your app pools as the Database Access account [aka farm account], but that’s not really a good thing to do.
To set this up in SharePoint 2010, we came up with the following steps:
  • Contoso domain has a one way trust with TailSpinToys
  • SharePoint 2010 is installed on machines joined to Contoso and using least privilege configuration with Contoso service accounts.
  • The People Picker needs to return users from both Contoso and TailSpinToys
  1. Run SetAppPassword on EVERY machine in the farm. This will setup your AppCredentialKey for you.

    StsAdm.exe –o SetAppPassword –password MyPassword
  2. Run SetProperty for PeoplePicker-SearchADForests on ONE server in the farm. This information is stored in the configuration database, no need to run it more than once for each URL where you want the people picker

    StsAdm.exe –o SetProperty –pn PeoplePicker-SearchADForests –pv “domain:TailSpinToys,TailSpinToys\AccountName,AccountPassword” –url http://TeamSites
  3. Set permissions on the Secure registry key on EVERY machine in the farm, granting the local WSS_WPG read access
    1. Open Registry Editor
    2. Navigate to : HKEY_Local_Machine\SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\14.0\Secure
    3. Right-click Secure, select Permissions
    4. Click Add
    5. Find the local WSS_WPG group
    6. Select Read access
    7. Click OK out of the dialogs

Wednesday, November 16, 2011

Kerberos Config for Reporting Services

PORTAL   Domain\AppPoolIntranet
REPORTING:  Domain\ServiceAccountReporting
SQL Service: Domain\ServiceAccountSQL


SETSPN Commands should be executed on a Domain Controller.

setspn -s HTTP/intranet.domain.lcl " Domain\AppPoolIntranet"
setspn -s HTTP/intranet " Domain\AppPoolIntranet"
setspn -s HTTP/reporting.domain.lcl "Domain\ServiceAccountReporting"
setspn -s HTTP/reporting "Domain\ServiceAccountReporting"

setspn -s MSSQLSVC/SQLServer.domain.lcl "Domain\ServiceAccountSQL"
setspn -s MSSQLSVC/SQLServer "Domain\ServiceAccountSQL"

setspn -L "Domain\AppPoolIntranet"
setspn -L  "Domain\ServiceAccountReporting"
setspn -L  "Domain\ServiceAccountSQL"

Monday, October 24, 2011

User Profile Service Initial Sync Problems

Failure retrieving application ID for User Profile Application Proxy
REBOOT TUT GUT (vom Server welcher die UPS Rolle hat)

The Execute method of job definition Microsoft.Office.Server.UserProfiles.UserProfileImportJob (ID 8fa89e28-86ce-4644-a599-48fbd9e72e0f) threw an exception. More information is included below. Generic failure


HKLM\SYSTEM\CurrentControlSet\Services\FIMSynchronizationService\Parameters
FARM ACCOUNT BERECHTIGEN
..:Restart Timer Service

und / oder
NETWORK SERVICE Account auf c:\program files\office server\14.0 berechtigen.

Thursday, October 20, 2011

Event ID 5215: The EXECUTE permission was denied on the object 'proc_GetProductVersions', database 'SharePoint_Config', schema 'dbo'.

In the database server, expand SharePoint Config database and naviage to Programmability/Stored Procedures/dbo.proc_GetProductVersions using SQL Server Management Studio.
Right click on the above stored procedure and select Properties.
On the popup screen, select Permissions on the left and click Search button.
On the new popup screen, click Search, select [WSS_Content_Application_Pools] database role and click OK.
Click OK again.
On the first popup screen, select the role, check Execute permission and click OK.

Monday, October 17, 2011

Url Problem: %2520 --> %20

Lösung 1: (einfacherer Weg)
Select a view with broken images in Thumbnails view mode
Choose Site Actions > Edit Page
From the library Web Part's Edit drop-down, choose Edit Web Part, Apply, and OK
When you Exit Edit Mode, the Thumbnails appear correctly
Repeat for each view with broken Thumbnails

Lösung 2: (mühsamer Weg)
Cloned the view "All Pictures" to a view called "Temp" and assigned Temp to be the default view.
Delete the "All Pictures" view
Clone the view "Temp" to "AllItems" assigning AllItems to be the default view.
Delete the view "Temp"
Set the title fo the AllItems view to be "All Pictures"
Aside from the view GUID everything appears to be identical, but with links functioning properly.

Thursday, October 13, 2011

Wednesday, October 12, 2011

Delete all Content Databases within a WebApplication

$webapp = http://webappname"

get-spcontentdatabase -WebApplication $webapp | ForEach-Object {remove-spcontentdatabase $_.name}

Thursday, October 6, 2011

PeoplePicker -> Multiple Domains

$domain_trust = "mycompany.local"
$pp_user_in_trusted_domain = "pp_username"
$pp_pass_in_trusted_domain = "pp_password"

$pp_password = "peoplepickerpassword"



$computer = Get-WmiObject -Class Win32_ComputerSystem
$domain_local = $computer.domain
stsadm.exe -o setapppassword -password $pp_password
stsadm -o setproperty -pn "peoplepicker-onlysearchwithinsitecollection" -propertyvalue No
$all_webapps = Get-SPWebApplication -IncludeCentralAdministration
foreach ($webapp in $all_webapps)
{
 stsadm -o setproperty -pn "peoplepicker-onlysearchwithinsitecollection" -propertyvalue No -url $webapp.url
 stsadm.exe -o setproperty -url $webapp.url -pn "peoplepicker-searchadforests" -pv "domain:$domain_local;domain:$domain_trust,$pp_user_in_trusted_domain@$domain_trust,$pp_pass_in_trusted_domain"
}

Tuesday, October 4, 2011

Upgrade all Content DBs (after SP or CU)

PSConfig.exe -cmd upgrade -inplace b2b -force -cmd applicationcontent -install -cmd installfeatures

 Get-SPDatabase | ?{$_.NeedsUpgrade –eq $true} | Select Name
Get
-SPContentDatabase | ?{$_.NeedsUpgrade –eq $true} | Upgrade-SPContentDatabase