Monday, November 17, 2014

SharePoint User Profile Synchronization Service Monitoring

SharePoint User Profile synchronization service interacts with Microsoft Forefront Identity Manager (FIM) to synchronize information with external systems. Thus to you may use the FIM client to monitor or review the synchronization processes.

Location of the FIM client:
SharePoint 2010
C:\Program Files\Microsoft Office Servers\14.0\Synchronization Service\UIShell\miisclient.exe
SharePoint 2013

C:\Program Files\Microsoft Office Servers\15.0\Synchronization Service\UIShell\miisclient.exe




If you launch the FIM client and gotten the following error message, it means that the SharePoint User Profile synchronization service is not configured correctly due to the following reasons:

  1. Your account is not a member of a required security group. Your service account must have the following permission:
    • Requires Log on Locally permission on the computer running the instance of the User Profile Synchronization Service
    • Replicating Directory Changes permissions on the domains being synchronized
    • Replicating Directory Changes permissions on the configuration partition of the domains being synchronized if the NetBIOS and fully qualified domain name (FQDN) names do not match
  2. Service is not started. the following services must be started before running the FIM client:
    • Forefront Identity Manager Service
    • Forefront Identity Manager Synchronization Service
There services can be started by starting the User Profile Synchronization Service in SharePoint Central Administration