最近,公司想用SharePoint做OA平台,在服务器部署的时候出现许多问题,主要是用户配置文件同步问题,所以在此将收集的问题放在这里,希望能帮到大家,稍后会更新。
1. AD connection已经创建,但是在完全同步时却没有用户配置文件导入。查看事件日志,发现以下错误:
The management agent "MOSSAD-ADConnection" failed on run profile "DS_DELTAIMPORT" because ofconnectivity issues.
Additional Information
Discovery Errors : "0"
Synchronization Errors : "0"
Metaverse Retry Errors : "0"
Export Errors : "0"
Warnings : "0"
User Action
View the management agent run history fordetails.
解决办法:
- 首先,查看是否能连接SynchronizationService Manager Client (from C:\Program Files\Microsoft Office Servers\14.0\SynchronizationService\UIShell\miisclient.exe),当运行此工具时,报错如下:
- 解决办法:在域中授予复制目录更改权限
Make sure that the ServiceAccount you used to run the Forefront Identity Manager SynchronizationService(FIMSynchronizationService) has the Active Directory Secuiry Rights for“ Replicating Directory Changes”.
1.Open the Active DirectoryUsers and Computers snap-in
2.On the View menu, click Advanced Features.
3.Right-click the domain object, such as “company.com”, and then clickProperties.
4.On the Security tab, if the desired user account is not listed, click Add; ifthe desired user account is listed, proceed to step 7.
5.In the Select Users, Computers, or Groups dialog box, select the desired useraccount, and then click Add.
6.Click OK to return to the Properties dialog box.
7.Click the desired user account.
8.Click to select the Replicating Directory Changes check box from the list.
9.Click Apply, and then click OK.
10.Close the snap-in.
NOTE: Group “Domain Admins” already has the above right however if you arestill seeing this issue add the service account explicitly to the AD Security
-
当权限赋予后重启系统,再打开此工具,看是否成功登录
-
解决以上问题后,发现事件日志报如下错误:
于是查看服务中FIM服务是不是已经启动,如果启动将其改成自动(延迟处理),再刷新事件日志,发现此错误已消失。
2. 用户配置同步文件服务启动失败
按照此文中排查问题:http://technet.microsoft.com/zh-cn/library/gg750257.aspx
总之,要确认服务器场帐号加入到本地管理员组中