How To Setup SharePoint 2010 Public Beta User Profile Synchronization with Active Directory on Windows Server 2008 R2
This document is designed to help someone new to SharePoint 2010 Beta setup and test SharePoint Server 2010 User Profile Synchronization on Windows Server 2008 R2. The official information on the TechNet site (link) and the SharePoint team blog (link) were used to develop this guidance.
The lab environment is based upon two Hyper-V servers (affords you the ability to take snapshots along the way and roll back if necessary), a Domain Controller (contoso.com) and a member server to host SQL Server 2008 and SharePoint 2010 Pubic Beta software. On both servers, the Windows Firewall and IE ESC were set to off and the servers were given access to the Internet in order to download updates and software required by the SharePoint 2010 Pre-requisite installer. Please keep in mind that your domain and machine names will vary and you should substitute accordingly. If there are any updates or feedback, then please add them to the comments.
Lab Environment
Here are the machine names and network settings used; please substitute your own as needed.
Domain Controller
Hostname: DC
Memory: 1GB
IP Settings, Virtual Network #1: 172.16.1.100 / 255.240.0.0, DNS 127.0.0.1
IP Settings, Virtual Network #2: DHCP
Operating System: Windows Server 2008 R2 + All critical updates from Windows Update
Server Role(s): Active Directory Domain Services, DNS
Forest Root Domain: contoso.com
Forest Functional Level: Windows Server 2008 R2
Hyper-V Configuration: Single CPU, 127GB Disk,
Virtual Network #1 Private, Virtual Network #2 Internet
Member Server
Hyper-V Configuration:Hostname: Sharepoint
Memory: 4096MB
IP Settings, Virtual Network #1: 172.16.1.101/255.240.0.0, DNS 172.16.1.100
IP Settings, Virtual Network #2: DHCP
Operating System: Windows Server 2008 R2 + all critical updates from Windows Update
+ WCF hotfix
Server Software: SQL Server 2008 SP1 + CumU
Two CPU's, 127GB Disk, Virtual Network #1 Private, Virtual Network #2 Internet
Configuration Steps
Login to dcserver.contoso.com as contoso\administrator.
Create a SharePoint farm admin account named ‘spadmin'.
a. Use Active Directory Users and Groups to create contoso\spadmin the account name should be ‘SharePoint Admin'.
b. Setup a Contoso OU and add user accounts into the OU as required for your own testing.
3. Run Delegation Control wizard to add contoso\spadmin account to "Replication Directory Changes" permissions.
a. Right click domain and click "Delegate Control..."
b. Click Next.
c. Add contoso\spadmin and click Next.
d. Select "Create a custom task to delegate" and then click Next.
e. Click Next.
f. Check the "Replicating Directory Changes" in the Permissions window and then click Next.
g. Click Finish to complete the Delegation of Control Wizard.
4. Add the contoso\spadmin account as a local machine administrator to the SharePoint WFE (sharepoint).
5. Login to sharepoint.contoso.com as contoso\spadmin to install software.
[NOTE: This is critical! You MUST do this or likely your ‘Forefront Identity Manager Service' (although set to Automatic) will fail to start automatically after starting the SharePoint ‘User Profile Synchronization Service' successfully.]
6. Run Windows Update to install all critical updates.
7. Install SQL Server 2008 SP1 + CU2.
a. Full install with default instance.
b. Used contoso\spadmin as the service account for all services.
[NOTE: If you already have SQL Server 2008 SP1 installed under another identity, simply add the contoso\spadmin login to SQL Server Logins, and then grant that account SysAdmin role on the server and continue with SP1 + CU2.]
c. Installed report server but do not configure.
d. Install CU2: http://support.microsoft.com/kb/970315 .
8. Restart. 9. Install WCF hotfix (KB976462)for Windows Server 2008 R2: http://go.microsoft.com/fwlink/?LinkID=166231
10. Restart. 11. Check that server can access internet websites like http://www.bing.com/.
12. Install ‘en_sharepoint_server_2010_beta_x64_x16-19249.exe' from MSDN, the Public Beta using the product key provided. 13. Click Install software prerequisites.
14. Click Next.
15. Accept terms and click Next.
16. When the preparation tool completes, click Finish. If not, then please look at the log file and correct internet access problem or manually download and install packages.
[NOTE: You can run prerequisite tool more than once.]
17. Click Install SharePoint Server.
18. Enter your product key (from MSDN) and press Continue.
19. Accept terms and click Continue.
20. Click Server Farm.
21. Select Complete and then click Install Now.
22. After installation completes, click Close to run the SharePoint Products and leave the checkbox checked to run Technologies Configuration Wizard.
[NOTE: If you want to test the Office Web Applications, then uncheck running the wizard, click close and install the Office Web Applications installer en_office_web_applications_beta_x64_456141.exe from MSDN obtaining your product key. Then run the configuration wizard after the Office Web Applications install. The Wizard can be run more than once and you can always add the OWA installation later if desired.]
23. Click Next to start the configuration wizard.
24. Click Yes.
25. Select Create a new server farm and click Next.
26. Enter the database server, username and password. Click Next.
27. Enter your passphrase and then click Next.
28. Click Next.
29. Apply your configuration settings by clicking Next.
30. After configuration completes, click Finish.
31. Central administration will start in a browser and then click Ok.
32. Click Next.
33. Select contoso\spadmin for the Service Account and then click Next.
34. Enter a Title and then click Ok to create a site collection.
35. Farm configuration wizard completes and then click Finish.
Setting up User Profile Synchronization with Active Directory
1. On the Central Administration page, click Manage Service Applications.
2. Highlight the User Profile Service Application by clicking the empty white-space to the right of the application title. Click Manage. Then, click Administrators. Give the farm admin account ‘SharePoint Admin' Full Control and then click Ok. [Optional: Repeat for all service applications.]
[NOTE: Type the account name ‘SharePoint Admin' and click the check name command button, don't use ‘contoso\spadmin'.]
3. Manage User Profile Service Application (by clicking the title or highlighting it and then click Manage).
4. Check that statistics appear on the far right column on the User Profile Service Application page.
5. Go back to Central Administration home page by clicking Central Administration.
6. Click ‘Manage services on server'.
7. Click start on ‘Microsoft SharePoint Foundation User Code Service'. (Sandbox Solutions)
8. Click Start on ‘User Profile Synchronization Service'.
9. Click Ok to select the User Profile Application.
10. It will take several minutes for the User Profile Synchronization Service to change from Starting to Started.
11. When the service is started (in my lab environment took 7-8 minutes), you can refresh the services page and eventually you'll notice that the ‘User Profile Synchronization Service' status will be Started. Plus, you can start services.msc to see that the Forefront Identity Manager services are configured and started.
View of services page:
View of services.msc:
12. Click Central Administration.
13. Click Manage service applications.
14. Click User Profile Service Application.
15. Click Configure Synchronization Connections.
16. Refresh browser or return to User Profile Service Application, click Configure Synchronization Connections and then click Create New Connection.
18. Select OU containing your test users (Contoso) and then click Ok.
19. Your Active Directory connection will be listed.
[NOTE: If not, you didn't install the SharePoint 2010 software logged on as the contoso\spadmin account. Go back and try again. You did take snapshots, right?]
[NOTE: You'll notice that once the Connection has been created, that you can't ‘Edit' the connection due to a scripting error on the page. This is a known issue. To work around this, hit F12, then in the debugger choose IE 7 mode, then click ‘Edit' again. You'll be able to edit the connection.]
20. Navigate back to Manage Profile Service: User Profile Service Application page.
21. Click Start a Profile Synchronization, select Start a Full Synchronization and then click Ok.
22. Depending upon how many objects you are syncing, it may take a long time. With only 10 users, the user profile sync only took a few minutes. Refreshing the page shows that 10 User Profiles were imported.
23. On the Manage User Profiles page, I can successfully search for "test" and the query returns all the test users.
Yes it works!
You'll now want to start the SharePoint Foundation Search service and configure it along with installing the Office Web Applications if you already haven't done so.
Comments
Post a Comment