User Profile Sync not picking up changes / new users from Active Directory in SharePoint

Problem:

A division at my current client has recently rebranded itself, included changing all email addresses. We’ve built them a new site using SharePoint 2010, however we noticed the user information was not reflecting the revised email addresses…

User Profile had been set up previously and successfully imported all of the values at the time, but now there were no updates coming through. Another User Profile sync (using the same Sync Account on a different farm) was working fine, and showing the latest info.

Turns out the queries to the AD Server it had auto-discovered during the initial setup were timing out….

Errors:

This error was the only clue that something was wrong (from the ULS logs):

Profile sync step <ClientName>_ADContainers (stage ActiveDirectoryFullImport) failed: System.InvalidOperationException: stopped-connectivity     at Microsoft.Office.Server.UserProfiles.FimStep.Execute()     at Microsoft.Office.Server.UserProfiles.UserProfileImportJob.SyncJobStep.<StartExecution>b__9(Object state).

And from the Event Logs (Blink and you’d miss it, because everything else relating to Profile Sync was working fine):

The management agent “MOSSAD-<ClientName>_ADContainers” failed on run profile “DS_FULLIMPORT” because of connectivity issues.

Additional Information
Discovery Errors       : “0”
Synchronization Errors : “0”
Metaverse Retry Errors : “0”
Export Errors          : “0”
Warnings               : “0”

User Action
View the management agent run history for details.

Troubleshooting:

Opened the Synchronisation Service Manager (miisclient.exe) located in
[C:\Program Files\Microsoft Office Servers\14.0\Synchronization Service\UIShell]

image

Selected the DS-FULLIMPORT profile name (which had the same error message as the ULS Logs – Stopped-connectivity)

Opened up the Details window (which told me the job failed because of a timeout)

image

Then went back to the User Profile Sync Connection and changed the settings from “Auto-Discover Domain Controller” to “Specify a Domain Controller” and I specified a DC that was geographically local to the farm.

image

Kicked off an import and the problem disappears!

Root Cause:

The AD Server the computer was connecting to was low on virtual RAM – As a result, when the query from SharePoint kicked off, it would run out of virtual memory, spaz out, throw this old chestnut and drop SharePoint’s connection…

Your system is low on virtual memory. Windows is increasing the size of your virtual memory paging file. During this process, memory requests for some applications may be denied. For more information, see Help.

NIOMCTADDC01 Error

I like it when the root cause is found – it means it won’t happen again once it’s fixed.

Fill Yer Boots! – Brad

Advertisements

About Brad Saide

I'm a SharePoint consultant. I'm also slowly going bald, seem to have a permanent spare tyre around my waist and enjoy socialising with friends over a beer or 10. The last 2 may possibly be related. Started working with SharePoint when the first version was in limited beta release (participated in the Technology Adoption Program while at Woolworths) and have been committed to the adoption of the technology as a business enabler ever since.
This entry was posted in Uncategorized. Bookmark the permalink.

3 Responses to User Profile Sync not picking up changes / new users from Active Directory in SharePoint

  1. Cris Wisner says:

    the User Profile Sync Connection is in the SSP correct?

  2. Thank You! You led me to a message that finally helped me solve my issue!

  3. Dhanabalan says:

    Hi we are also facing the same issue… But both the SharePoint server domain and ad server domain is different…we have only one way trust from ad domain to SharePoint server domain..

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s