Saturday, April 21, 2012

To Solve sharepoint 2010 User Name showing up with Domain Name for some users

此問題於sharepoint 2007 沒有問題,昇成sharepoint 2010 ,正式機一直有問題
剛開始登入,操作都是display name, 一段時間後,變為DOMAINNAME\USERNAME
剛開始以為是USER PROFILE 沒同步,按照下說明
Phase I

設定設定檔同步處理 (SharePoint Server 2010)

STEP BY STEP
1.account needed for syncing (建立AD 同步-回寫AD 權限者)
1.1 於本機要設step4 中之service account 需有logon on local 及server admin,同步完成後,可將server admin 權限拿除)
2.刪除原建立之User Profile service (option)
3.建立新的User Profile Sevice Application
4. Configue Service ,建立需等一段時間,待"User Profile Synchronization Sevice " 啟動後,要執行 IISRESET
5.Configuew connection 及自Activery Directory Import Data
  將 step 1. 之account 建於可查詢AD 人員
6. edit 設定同步選項
   UserccountContorl bitorequal =2 (不要同步帳戶已停用人員)
7. 開始Profile同步 (於此步驟之前,要確認 Meta Service 有啟動) 此步驟亦要很久

8. 執行後,要去 define job 中調整一disable job 為enable

另外有參考到亦是解說很完整
http://www.harbar.net/articles/sp2010ups.aspx

=============================================
Phase II
但本公司之人員用一用部份人員仍會變成DOMAINNAME\USERNAME
找一篇文章,可將變成domain\username 人員改回display name ,但好像每天當AD 同步後,又變回DOMAINNAME\USERNAME
http://sharepointpolice.com/blog/2010/12/06/username-showing-up-as-domainnameusername-instead-of-full-name-in-sharepoint-2010/
該文章重點為 ,於sharepoint 命令管理模式下
Get-SPUser –Web http://SharePointServer -limit all | Set-SPUser –SyncFromAD
其中  http://sharepointServer 為 sharepoint website , 每一website 皆要執行一次

==============================================
Phase III
找了好久,一直以為 AD 同步帳號問題,最近終於解決此問題
 原因:
domain 之 netbios name 不同於Active Directory 之前湊碼
   本公司之netbios NAME 為 NTIOS ,
   Active Directory name 為 corp.centios.com.tw  ,
   對外之dns 為 centios.com.tw

需要將Sharepoint 之 "User Profile synchronization Service"中之
NETBIOSDOMANINENABLE參數設為1,且每次此刪除及重設 "User Profile synchronization Service",皆要重設一遍

(因每次增加一個"User Profile Sync Application" 皆一直增加一個ServiceApplication, 如要刪除請以
  sharepoint 命令管理模式

  Get-SPServiceApplication
   會出現現有service 用之 Application  找出 不用之User Profile synchronization Servic之Identity  (有一大串,        要記下來,假設稱為VOID_UPAID)
  Get-SPServiceApplication  -identity VOID_UPAID | Remove-sp
 )
請參考


Permission requirements: Domain netbios name is different than the FQDN of the domain

step 1. 仍是找出 "User Profile Sync Application" 之Identity
1.) Get-SPServiceApplication
a. Note: This will output every service application specifically the User Profile Service Application
2.) $var = Get-SPServiceApplication  -Identity 00a380ed-2e99-4de3-ae22-dbe8c1b03bab
(請將 00a380ed .... 改為找出來的 "User Profile Sync Application" 之Identity) ,
Note: the identity is the GUID associated with the User Profile Service Application which was retrieved and copied from running the Get-SPServiceApplication cmdlet
3.) $var.NetBiosDomainNamesEnabled 
  Note: if this is true then it’s enabled and you can skip directly to step 7
4.) $var.NetBiosDomainNamesEnabled = “True”
Note: Here you are setting the property to True
5.) $var.update()
Note: This is simply running update method against the variable which officially updates the property
6.) $var.NetBiosDomainNamesEnabled
Note: This confirms the steps were run correctly as the output will display True instead of False
7.) To utilize the domain Netbios name, a new sync connection must be created and used. Yes, this means you cannot use an existing sync connection and expect it to work. Create a new sync connection via the UI:
Central Admin\Application Management\Manage Service Applications\User Profile Service Application\Configure Synchronization Connections




No comments:

Post a Comment