Posts Tagged ‘ Synchronization

SharePoint Health Analyzer: The server farm account should not be used for other services.

The Sharepoint Health Analyzer has “red” reportings, shown in the Central Administration:

The error details for the “The server farm account should not be used for other services.” message are:

{FarmAccount}, the account used for the SharePoint timer service and the central administration site, is highly privileged and should not be used for any other services on any machines in the server farm. The following services were found to use this account: User Profile Synchronization Service (Windows Service).

The Microsoft Technet article at http://technet.microsoft.com/en-us/library/gg750254.aspx says:

This message can be ignored. The User Profile Synchronization Service must run as the farm account.

Well, annonying but obviously not a problem…

Creating profile synchronization connections in Sharepoint 2010 fails with error

When creating profile synchronization connections in Sharepoint 2010, for example as a part of configuring the profile synchronization service (http://technet.microsoft.com/en-us/library/ee721049.aspx) you may receive one of the following errors:

Error
Unable to process Create message
Troubleshoot issues with Microsoft SharePoint Foundation.
Correlation ID: {GUID}
Date and Time: {timestamp}

Error
Access to the requested resource(s) is denied
Troubleshoot issues with Microsoft SharePoint Foundation.
Correlation ID: {GUID}
Date and Time: {timestamp}

Normally you’ll get the “Access to the requested resource(s) is denied” error when trying to create a connection but the profile synchronization user (this is the farm account user you used to start the User Profile Synchronization service) does not have administrative rights on the profile synchronization server (this is the server you selected for Profile Synchronization Instance when creating the User Profile Service application). You can simply solve this problem by adding the user to the local administrators group temporarily.

The “Unable to process Create message” error happens when you tried to create a synchronization connection earlier and trying to create a new one with the same name. This occurs, for example, when you retry the creation with the same name after the “Access to the requested resource(s) is denied” error appeared on the last try. Simply choose another name and confirm that the User Profile Synchronization service user has at least local administrator rights on the profile synchronization server.