Tuesday 20 December 2016

User Profile Synchronization Service Starting then Stopped in SharePoint

When I tried to configure UPS service in SharePoint Server 2013 by following
  • Open Central Administration as a Farm account.
  • Go to Application Management > Manage Service Application.
Application Management - Manage Service Applications
  • Create a New User Profile Service Application.
new UPS
  • The Create  New User Profile Service Application page will be shown.
provision UPS.png
  • After the UPS service has been created successfully, I went back to
    • System Settings > Manage Services on Server.
Manage Services On Server
I tried to restart UPS service. But unfortunately, I found out unexpected behavior; it was starting then it stopped!
Cause:
As I mentioned before in this article, there are more reasons regarding this issue,
But In this case, the problem is related to the permission of the farm account where it must be added to local administrator group during starting and provisioning UPS service.
Solution:
To add a farm account to local Administrator group, you should follow the mentioned steps:
  • Open Server Manager > Tools > Computer Management.
Computer Management
  • From left side > Select Local User and Groups > Click on Groups > Administrator Group.
  • Right Click on Group name > Properties > From Member tab > Select the service account > Add.
Local users and group - Computer management.png
Note: If the Active Directory had been installed on SharePoint Server for testing/DEV purpose only you could remove the service account by following the mentioned steps below:
  • Open Active Directory Users and Computer as administrator.
AD Users and computers
  • From left side > Select Buildin > Double click on Administrators groups.
Administrator group
  • From Members Tap > Select the service account > Click Add.
AD Administrator Group
  • Repeat the previous steps on all SharePoint Servers that running this service.
Note: After making changes to the farm account, you must restart the SharePoint 2013 Timer service or restart the server.
This ensures that every SharePoint service that is currently running as the farm account is using the latest credentials.
Restart SharePoint Timer Service
  • Go back to System Settings > Manage Services on Server.
Manage Services On Server
  • Try to start UPS service that should be started now.
UPS started successfully
If it’s not started, you should follow the mentioned instruction in this article or try to restart the server then delete and reconfigure UPS service again!
Keep in mind, adding the farm account to local Administrator group is required only to start the User Profile Synchronization service.
After the User Profile Synchronization service has been started, you should remove the farm account from the Administrators group to avoid raising the following security warning in Health Analyzer.
Accounts used by application pools or service identities are in the local administrator group 



account in local admin group

0 comments:

Post a Comment