1. By: Toby McGrail Sr. Software Engineer
UPA – Taming the Beast

2. Please be sure to thank and visit our Sponsors!!
Platinum Sponsors
Gold Sponsors
Silver Sponsors

3. Agenda Introduction What is User Profile Service
Configuring the User Profile Service in SharePoint 2010
Stuck on Starting Error in SharePoint 2010
Configuring People Search in SharePoint 2010
Audiences and How to Create them in SharePoint 2010
Enable the Activity Job Feed Timer Job with Newsfeeds in SharePoint 2010
Extend the Time out on Farm Search Settings in SharePoint 2010
Common Issues that Occur in SharePoint 2010
Things to Check in the Search Service in SharePoint 2010
User Profile Commandlets for SharePoint 2010
What’s New In User Profile Services in SharePoint 2013
Administer User Profile Service in SharePoint 2013
User Profile Commandlets for SharePoitn 2013
Questions?

4. Introduction
My name is Toby McGrail and I have been a Senior SharePoint Administrator over the last three years however been deeply involved in SharePoint for 8 years and counting.
Outside of SharePoint I have balanced lifestyle that includes my family, friends, and Fitness. Fitness and SharePoint are my passion.
Over 20 years IT Experience

5. What is User Profile Service?
The User Profile service application in Microsoft SharePoint Server 2010 provides a central location where service administrators configure and manage the following features:
User profiles – contain detailed information about individuals in an organization. A user profile organizes and displays all of the properties related to each user together with social tags, documents and other items related to that user.
Organization profiles – contain detailed information about an organization such as teams, divisions, and so on.
Profile synchronization – provides a reliable way to synchronize groups and user profile information that is stored in the SharePoint Server 2010 profile store with information that is stored in directory services across the enterprise.
Audiences – enables organizations to target content to users based on their job or task, as defined by their membership in a SharePoint Server group or distribution list, by the organizational reporting structure, or by the public properties in their user profiles.
My Site Host – a dedicated site for hosting My Sites. A My Site Host is needed in order to deploy the social features of SharePoint Server.
My Site – a personal site that gives users in your organization a central location to manage and store documents, links, and colleagues.
Social tags and notes – enables users to add social tags to documents, to other SharePoint Server items, and to other items, such as external Web pages and blog posts. Users can also leave impromptu notes on profile pages of a My Site or any SharePoint Server page. Administrators can delete all tags for employees when they leave the company or remove a tag they do not want.

6. Configuring User Profile Service in SharePoint 2010
Before you attempt to set up Remember to Setup Managed Metadata first since it Uses this service.
Second Make sure the Farm Account is a member of the Local Administrator Group **After it is provisioned remove it from Local Administrator group
References: User Profile Service administration (SharePoint Server 2010) Configure profile synchronization (SharePoint Server 2010)

7. User Profile Service?
First the most critical piece is Setting up the User Profile service which we discussed earlier on.
One of the main things is to make sure that Forefront Service is started. Look in windows services for this part
Next we want to look in Central Administration to make sure the Services are started:
This is where you will see the common issue Stuck on Starting. As you see we don’t have this problem.

8. UPA Synchronization in SharePoint 2010
Next we need to set up the profile synchronization.
Go To Central Administration and Manage Service Applications under Application Management
Click on User Profile Service Application as seen below:
Next click on Configure Synchronization:
If you do not have one currently configured click on Create New Connection

9. Synchronization Config in SharePoint 2010

10. UPA Sync in SharePoint 2010
Once you have created the Connection you are ready to sync the connection.
To sync the Connection click on Start Profile Sync as you see below:

11. Sync Connection
Once you click Start Profile Synchronization chose either Incremental or Full Synchronization and click ok.
You will then see the sync start

12. UPA – Stuck on Starting in SharePoint 2010
UPA often gets stuck on starting when you either try to start the service for the first time or restart the service.
I would say this is the Most Common Issue that occurs with UPA. However it is easily fixed.
How do you fix this you may ask yourself? Well that’s a great question and here is the fix for it.
Stop the Timer Service
Clear the Cache in Program Data
It can be found at C:\ProgramData\Microsoft\SharePoint\Config/Guid
Remove all XML Files---DO NOT DELETE CACHE.ini file
Edit Cache.ini and change the numbers to 1
This recreates all the XML Files
Restart The Timer Service.

13. Stuck on Starting (cont) in SharePoint 2010
One you restart the timer service it will recreate all the needed xml files.
Once this has completed you will now see the service in a “Stopped state”
Reprovision the User Profile Service
Note: This can take sometime and I have seen it take up to 30 minutes before.

14. Configuring People Search in SharePoint 2010
First and foremost make sure the following services are started in Central Admin:
User Profile Service
User Profile Synchronization Service
Next we will go to the Search Service Application and make sure the Search Scope for People Search is set correctly.
Your settings should look like the following slide:

15. People Search Settings in SharePoint 2010

16. Things to Check in Search Service
Make sure that you are currently crawling the Content Sources. For example search your site and people sites:
Make sure that your Default Content Account has access to search in your Web Application Policy. ***Do not give your search account Full Rights!!!!

17. More in Search Service in SharePoint 2010
Grant the Permissions for the User Profile Service Applications

18. What are Audiences in SharePoint 2010
Microsoft SharePoint Server 2010 supports two kinds of audiences:
Global audiences Global audiences are defined by properties in a User Profile service application. Global audiences include audiences that are defined by relationships (reporting structures), as well as other properties.
Windows security groups and distribution lists The Windows security groups that are available when you are creating audiences are those that are imported when user profiles synchronized with the User Profile service application.
The distribution lists that are available when you are creating audiences are those that are imported when user profiles are imported into the User Profile service application.

19. How to Create Audiences
First we will need to go to User Profile Service Application.
Next we will click on Manage Audiences under the People Section
Click New Audience and enter the information for each property as seen below:

20. More on Creating Audiences in SharePoint 2010
Next it will take you to the Rule Creation screen and enter the information as seen below:
Then you will see the Audience Properties and Rules as seen on the next slide.

21. Audience Properties in SharePoint 2010

22. Compiling Audiences in SharePoint 2010
Under the People Section in the Service Application Click on Compile Audiences
All you have to do is Click Compile Audiences and you will compile it.
Next lets check the status of our Audiences to make sure its compiled.

23. Enable the Activity Job – Newsfeeds in SharePoint 2010
First Lets make sure the Activity Job is Enabled
On the Central Administration Web site, on the Quick Launch, click Monitoring.
In the Timer Jobs section, click Review job definitions.
Click User Profile Service – Activity Feed Job in the list of timer jobs.
On the Edit Timer Job page, click Enable.

24. Enabling Newsfeeds Under the My site Settings Click on Setup My Sites
Next make sure that the Checkbox for Newsfeeds are Enabled.
Run a Profile Synchronization and you should see the Newsfeeds.

25. Extend Time-out in Search in SharePoint 2010
First Verify that the user account that is performing this procedure is an administrator for the search service application.
In Central Administration, in the Quick Launch, click General Application Settings.
On the General Application Settings page, in the Search section, click Farm Search Administration.

26. Extend Time-out in Search in SharePoint 2010
On the Farm Search Administration page, in the Farm-Level Search Settings section, click the value of the Time-out (seconds) setting.
In the Search Time-out Setting dialog box, in the Connection time (in seconds) box, type the number of seconds that you want the search system to wait when attempting to connect to a content repository.
It is defaulted at 60 so we are going to change it to 120
In the Request acknowledgement time (in seconds) box, type the number of seconds that you want the search system to wait for a content repository to respond to a connection attempt.
Click Ok and you have successfully extended the Time-out in Search

27. Common Issues with UPA in SharePoint 2010
Stuck on Starting in SharePoint Services
User Profile Service in Windows not Starting due to Permission Issues
Service Pack 1 Sync Issues
Fix is install December 2011 Cumulative Update
Synchronization Service currently Not Provisioned
If the service is Stuck in Starting you will see this and needs to be reprovisioned
Configuration with Incremental Sync
A good rule of thumb here is Plan out when you need to do your syncs

28. User Profile PowerShell Commandlets for 2010
Add-SPSiteSubscriptionProfileConfig - Adds a new site subscription to a User Profile Service application
Get-SPProfileServiceApplicationSecurity - Returns permission and identity information.
Move-SPProfileManagedMetadataProperty - Moves multiple-string values into a term set.
New-SPProfileServiceApplication - Adds a User Profile Service application to a farm.
New-SPProfileServiceApplicationProxy - Creates a User Profile Service application proxy on the local farm.
Remove-SPSiteSubscriptionProfileConfig - Deletes a site subscription from a User Profile Service application.
Remove-SPSocialItemByDate - Deletes tags, notes, or ratings.
Set-SPProfileServiceApplication -Sets properties of a User Profile Service application.
Set-SPProfileServiceApplicationProxy - Sets properties of a proxy for a User Profile Service application.
Set-SPProfileServiceApplicationSecurity -Sets permission and identity information.

29. User Profile Powershell Commandlets for 2010
Set-SPSiteSubscriptionProfileConfig -Sets the parameters of a site subscription.
Update-SPProfilePhotoStore - Updates the profile photo store to be compatible with SharePoint Server 2013.
Add-SPPluggableSecurityTrimmer - Adds a pluggable security trimmer to a User Profile service application proxy.
Get-SPPluggableSecurityTrimmer - Gets pluggable security trimmers that have been added to a User Profile service application proxy.
Remove-SPPluggableSecurityTrimmer - Removes pluggable security trimmers that have been added to a User Profile service application proxy.
Add-SPProfileLeader - Adds a company leader.
Get-SPProfileLeader - Returns the current company leaders.
Move-SPSocialComments - Moves social comments.
Remove-SPProfileLeader - Removes a company leader.

30. User Profile Replication Engine Commandlets 2010
Get-SPProfilePropertyCollection - Gets all user profile properties.
Start-SPProfileServiceFullReplication - Replicates all selected user profile properties from the source User Profile service application to the destination User Profile service application.
Start-SPProfileServiceRecoveryReplication - Recovers user profiles that failed to replicate during full profile replication.
Start-SPProfileServiceIncrementalReplication - Replicates changes for selected profile properties from the source User Profile service application to the destination User Profile service application using the Replication Engine Windows service.
Stop-SPProfileServiceIncrementalReplication - Stops incremental profile replication.

31. Changes to User Profile Services in SharePoint 2013
User Profile Import options in 2013
Classic Import using Forefront Identity Management
Connect to an External System Using BCS
New option available in SharePoint 2013 which is Direct Import from Active Directory which is designed to import the AD profile as quickly as possible. This is super fast from the testing that I have done!
Key Capabilities are
Direct AD Forest Import (one connection per domain)
You can specify OU’s , users and groups and LDAP filters for incremental imports
There are some limitations in AD import option
Mapping to system SharePoint properties is not supported.
Mapping two different AD attributes to the same SharePoint property is not supported
Filtering AD Import
Filtering uses a simple LDAP query when you create a Active Directory connection.
After a full import the UPA admin must purge the items that no longer belong in the profile database
Set-SPProfileServiceApplication -Identity $upa – PurgeNonImportedObjects $true

32. Changes to User Profile Services in SharePoint 2013 (cont)
Switching between FIM and AD Direct
There is no automatic migration from FIM to AD Direct or property mappings as FIM configuration connection is in the Sync DB and AD Direct connection in the Profile DB. Option is Run a Full Import and use PurgeNonImportedObjects option if you want to remove the items that are no longer to be used.
User Profile Replication Engine(UPRE)
User Profile Replication Engine in SharePoint 2010 is a separate download and now it is out of box feature. UPRE is a tool where we can replicate user profile information and some social information between multiple farms.

33. Administer User Profile Services in SharePoint 2013
Create, edit, or delete User Profile service applications in SharePoint Server
Delegate administration of User Profile service applications in SharePoint Server
Delegate administration of User Profile service application features in SharePoint Server
Delegate administration of SharePoint Server 2013 user profiles -
Remove administrators from User Profile service applications in SharePoint Server
Add, edit, or delete custom properties in SharePoint Server 2013 user profiles -
Manage user profile synchronization in SharePoint Server

34. User Profile PowerShell Commandlets for 2013
Add-SPSiteSubscriptionProfileConfig - Adds a new site subscription to a User Profile Service application
Get-SPProfileServiceApplicationSecurity - Returns permission and identity information.
Move-SPProfileManagedMetadataProperty - Moves multiple-string values into a term set.
New-SPProfileServiceApplication - Adds a User Profile Service application to a farm.
New-SPProfileServiceApplicationProxy - Creates a User Profile Service application proxy on the local farm.
Remove-SPSiteSubscriptionProfileConfig - Deletes a site subscription from a User Profile Service application.
Remove-SPSocialItemByDate - Deletes tags, notes, or ratings.
Set-SPProfileServiceApplication -Sets properties of a User Profile Service application.
Set-SPProfileServiceApplicationProxy - Sets properties of a proxy for a User Profile Service application.
Set-SPProfileServiceApplicationSecurity -Sets permission and identity information.

35. User Profile Powershell Commandlets for 2013
Set-SPSiteSubscriptionProfileConfig -Sets the parameters of a site subscription.
Update-SPProfilePhotoStore - Updates the profile photo store to be compatible with SharePoint Server 2013.
Add-SPPluggableSecurityTrimmer - Adds a pluggable security trimmer to a User Profile service application proxy.
Get-SPPluggableSecurityTrimmer - Gets pluggable security trimmers that have been added to a User Profile service application proxy.
Remove-SPPluggableSecurityTrimmer - Removes pluggable security trimmers that have been added to a User Profile service application proxy.
Add-SPProfileLeader - Adds a company leader.
Get-SPProfileLeader - Returns the current company leaders.
Move-SPSocialComments - Moves social comments.

36. More User Profile PowerShell Commandlets for 2013
Remove-SPProfileLeader - Removes a company leader.
Remove-SPProfileSyncConnection - Removes a synchronization connection.
Add-SPProfileSyncConnection -Adds a synchronization connection.
Update-SPRepopulateMicroblogFeedCache - Refreshes the cache.
Update-SPRepopulateMicroblogLMTCache - Refreshes the cache.
Get-SPProfilePropertyCollection - Gets all user profile properties.
Start-SPProfileServiceFullReplication - Replicates all selected user profile properties from the source User Profile service application to the destination User Profile service application.
Start-SPProfileServiceIncrementalReplication - Replicates changes for selected profile properties from the source User Profile service application to the destination.
Stop-SPProfileServiceIncrementalReplication - Stops incremental profile replication.
Do NOT use the following commandlets!!!
Remove-SPSocialAppPermissions
Add-SPSocialAppPermissions

37. Questions
Do you have any issues that you have seen that we have not covered
My Blog
References
Contact Information:
Toby McGrail –

38. Please be sure to thank and visit our Sponsors!!
Platinum Sponsors
Gold Sponsors
Silver Sponsors