剛開始登入,操作都是display name, 一段時間後,變為DOMAINNAME\USERNAME
剛開始以為是USER PROFILE 沒同步,按照下說明
Phase I
設定設定檔同步處理 (SharePoint Server 2010)
STEP BY STEP
1.account needed for syncing (建立AD 同步-回寫AD 權限者)
1.1 於本機要設step4 中之service account 需有logon on local 及server admin,同步完成後,可將server admin 權限拿除)
2.刪除原建立之User Profile service (option)
3.建立新的User Profile Sevice Application
4. Configue Service ,建立需等一段時間,待"User Profile Synchronization Sevice " 啟動後,要執行 IISRESET
5.Configuew connection 及自Activery Directory Import Data
將 step 1. 之account 建於可查詢AD 人員
6. edit 設定同步選項
UserccountContorl bitorequal =2 (不要同步帳戶已停用人員)
1.1 於本機要設step4 中之service account 需有logon on local 及server admin,同步完成後,可將server admin 權限拿除)
2.刪除原建立之User Profile service (option)
3.建立新的User Profile Sevice Application
4. Configue Service ,建立需等一段時間,待"User Profile Synchronization Sevice " 啟動後,要執行 IISRESET
5.Configuew connection 及自Activery Directory Import Data
將 step 1. 之account 建於可查詢AD 人員
6. edit 設定同步選項
UserccountContorl bitorequal =2 (不要同步帳戶已停用人員)
7. 開始Profile同步 (於此步驟之前,要確認 Meta Service 有啟動) 此步驟亦要很久
8. 執行後,要去 define job 中調整一disable job 為enable
另外有參考到亦是解說很完整
http://www.harbar.net/articles/sp2010ups.aspx
8. 執行後,要去 define job 中調整一disable job 為enable
另外有參考到亦是解說很完整
=============================================
Phase II
但本公司之人員用一用部份人員仍會變成DOMAINNAME\USERNAME
找一篇文章,可將變成domain\username 人員改回display name ,但好像每天當AD 同步後,又變回DOMAINNAME\USERNAME
http://sharepointpolice.com/blog/2010/12/06/username-showing-up-as-domainnameusername-instead-of-full-name-in-sharepoint-2010/
該文章重點為 ,於sharepoint 命令管理模式下
Get-SPUser –Web http://SharePointServer -limit all | Set-SPUser –SyncFromAD
其中 http://sharepointServer 為 sharepoint website , 每一website 皆要執行一次
==============================================
Phase III
找了好久,一直以為 AD 同步帳號問題,最近終於解決此問題
原因:
domain 之 netbios name 不同於Active Directory 之前湊碼
本公司之netbios NAME 為 NTIOS ,
Active Directory name 為 corp.centios.com.tw ,
對外之dns 為 centios.com.tw
需要將Sharepoint 之 "User Profile synchronization Service"中之
NETBIOSDOMANINENABLE參數設為1,且每次此刪除及重設 "User Profile synchronization Service",皆要重設一遍
(因每次增加一個"User Profile Sync Application" 皆一直增加一個ServiceApplication, 如要刪除請以
sharepoint 命令管理模式
Get-SPServiceApplication
會出現現有service 用之 Application 找出 不用之User Profile synchronization Servic之Identity (有一大串, 要記下來,假設稱為VOID_UPAID)
Get-SPServiceApplication -identity VOID_UPAID | Remove-sp
)
請參考
Permission requirements: Domain netbios name is different than the FQDN of the domain
step 1. 仍是找出 "User Profile Sync Application" 之Identity
1.) Get-SPServiceApplication
a. Note: This will output every service application specifically the User Profile Service Application
2.) $var = Get-SPServiceApplication -Identity 00a380ed-2e99-4de3-ae22-dbe8c1b03bab
(請將 00a380ed .... 改為找出來的 "User Profile Sync Application" 之Identity) ,
Note: the identity is the GUID associated with the User Profile Service Application which was retrieved and copied from running the Get-SPServiceApplication cmdlet
3.) $var.NetBiosDomainNamesEnabled
Note: if this is true then it’s enabled and you can skip directly to step 7
4.) $var.NetBiosDomainNamesEnabled = “True”
Note: Here you are setting the property to True
5.) $var.update()
Note: This is simply running update method against the variable which officially updates the property
6.) $var.NetBiosDomainNamesEnabled
Note: This confirms the steps were run correctly as the output will display True instead of False
7.) To utilize the domain Netbios name, a new sync connection must be created and used. Yes, this means you cannot use an existing sync connection and expect it to work. Create a new sync connection via the UI:
Central Admin\Application Management\Manage Service Applications\User Profile Service Application\Configure Synchronization Connections
No comments:
Post a Comment