Configuring the User Profile Service Application
There are a few extra steps required to get the user profile service working after running the SharePoint 2010 farm configuration wizard. All of these steps are documented on TechNet, but they can be easily missed and will cause your User Profile Service to not work.
Before attempting to configure the profile import, make sure you've installed the following:
- If using Windows Server 2008 R2, install the patch KB976462.
- If using SQL Server 2008 with SP1, install Cumulative Update 2 or higher (CU5 was the most recent as this post was being authored).
Note: there are no patches needed if you're using SQL Server 2008 R2 Nov CTP. :)
Once you've installed the patches (if applicable), make sure the farm administration account is a local administrator on the server the Service Application is running on. Now you're ready to start the appropriate services and configure your profile import!
Go into "Central Administration" à "System Settings" à "Manager services on server"
Start the "User Profile Synchronization Service", and enter the password for the farm service account. At this point you need to wait 5-10 minutes to ensure all the appropriate services start.
After waiting 5-10 minutes, you can check services.msc to confirm that the following services are set to "Automatic" and are started:
- Forefront Identity Manager Service
- Forefront Identity Manager Synchronization Service
Once they are started, confirm that the "User Profile Synchronization Service" has successfully started in "Central Administration" à "System Settings" à "Manager services on server".
Configure Profile Import
Now that the services are all started we can configure the profile import.
Open the "Central Administration" site and go to "Application Management" à "Manage Service Applications".
Select your User Profile Service Application, and go to "Administrators".
- Make sure the farm administrator account has full control.
- Add the account you are signed in as (if different) with full control.
- The search crawl account should also have the Retrieve People Data for Search Crawlers permissions, if you're using a dedicated crawl account.
Select your User Profile Service Application, and go to "Manage".
Select "Configure Synchronization Connections".
Select "Create New Connection", and give it a name. Configure the connection settings, forest name, account, and password.
Select "Populate Containers", and then select the domain or container you'd like to import.
Select OK and wait for the connection to be processed. The connection should now appear in the list.
To start the import, go back to the "Manage Profile Service" page, and configure the "Synchronization Timer Job", or click "Start Profile Synchronization".