24 October, 2012

Specified argument was out of the range of valid values/Provisioning did not succeed/The feature failed to activate

Most of the SharePoint problems revolves around features, activations, publishing, enterprise, solutions and so on…Today I was working with one user and he was facing some error message while activating publishing feature at the site level.

What exactly those error messages: (3 different error messages)

Specified argument was out of the range of valid values.
Parameter name: ContentTypeId   at Microsoft.SharePoint.SPContentTypeBindingElement.EnsureContentTypeExists(SPWeb web)
   at Microsoft.SharePoint.SPContentTypeBindingElement.ElementActivated(SPFeaturePropertyCollection props, SPSqlCommand sqlcmdAppendOnly, SPWebApplication webApp, SPSite site, SPWeb web, Boolean fForce)
   at Microsoft.SharePoint.Administration.SPElementDefinitionCollection.ProvisionContentTypeAndEventReceiverBindings(SPFeaturePropertyCollection props, SPSite site, SPWeb web, Boolean fForce)
   at Microsoft.SharePoint.Administration.SPElementDefinitionCollection.ProvisionElements(SPFeaturePropertyCollection props, SPWebApplication webapp, SPSite site, SPWeb web, Boolean fForce)
   at Microsoft.SharePoint.SPFeature.ProvisionElements(SPFeaturePropertyCollection props, SPWebApplication webapp, SPSite site, SPWeb web, Boolean fForce)
   at Microsoft.SharePoint.SPFeature.Activate(SPSite siteParent, SPWeb webParent, SPFeaturePropertyCollection props, Boolean fForce)
   at Microsoft.SharePoint.SPFeatureCollection.AddInternal(Guid featureId, SPFeaturePropertyCollection properties, Boolean force, Boolean fMarkOnly)
   at Microsoft.SharePoint.SPFeatureCollection.Add(Guid featureId, Boolean force)
   at Microsoft.SharePoint.SPFeatureCollection.CheckSameScopeDependency(SPFeatureDefinition featdefDependant, SPFeatureDefinition featdefDependency, Boolean fActivateHidden, Boolean fForce)
   at Microsoft.SharePoint.SPFeatureCollection.CheckFeatureDependency(SPFeatureDefinition featdefDependant, SPFeatureDependency featdep, Boolean fActivateHidden, Boolean fForce)
   at Microsoft.SharePoint.SPFeatureCollection.CheckFeatureDependencies(Guid featidDependee, Boolean fActivateHidden, Boolean fForce)
   at Microsoft.SharePoint.SPFeatureCollection.AddInternal(Guid featureId, SPFeaturePropertyCollection properties, Boolean force, Boolean fMarkOnly)
   at Microsoft.SharePoint.SPFeatureCollection.Add(Guid featureId)
   at Microsoft.SharePoint.WebControls.FeatureActivator.BtnActivateFeature_Click(Object objSender, EventArgs evtargs)
   at System.Web.UI.WebControls.Button.OnClick(EventArgs e)
   at System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument)
   at System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument)
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

Provisioning did not succeed. Details: Failed to create the 'Pages' library. Ori
ginalException: Content type '0x010100C568DB52D9D0A14D9B2FDCC96666E9F2007948130E
C3DB064584E219954237AF39' not found in web 'https://sharepointknowledgemanagement.net/sites/DemoSite'.

The feature failed to activate because a list at 'Documents' already exists in this site.  Delete or rename the list and try activating the feature again.    at Microsoft.SharePoint.Publishing.Internal.ProvisioningHelper.AddList(SPListCollection lists, String urlName, String title, String description, Guid featureId, Int32 templateType, Boolean& newListCreated)
   at Microsoft.SharePoint.Publishing.Internal.ProvisioningHelper.AddList(SPListCollection lists, String urlName, String title, String description, Guid featureId, SPListTemplateType templateType, Boolean& newListCreated)
   at Microsoft.SharePoint.Publishing.Internal.AreaProvisioner.CreateDocumentsDocumentLibrary(SPList approvalTaskList)

Troubleshooting steps:

Try activating the publishing feature at the site collection level. If it’s successful then forthcoming issues will also gets resolved and you can successfully activates the feature at the subsite level too.

If the error message stated that the list is already exist then open the site (on which you are facing problems) in SPD (SharePoint Designer). You will see the same list that was reflected in the error message. Either delete it or rename it and then try to activate the feature. It will be successful.

If you are facing problems by means of GUI then try to activate the same by means of stsadm command.

Check the ULS logs for detail error messages

Check event logs for any specific event ID’s

Isolate the problem specific to a site, site collection, list, and particular feature at which level. 

If you have any queries/questions regarding the above mentioned information then please let me know. I would be more than happy to help you as well as resolves your issues. Thank you

Preventing Lync Server 2010 certificate expiration


Problem Description:
A Lync Server Certificate is about to expire in a few days:
·         An expired certificate will cause the Lync Server 2010 services to not start
·         An expired certificate may communication between Lync Server 2010 Server roles to fail
 
More details:
There are two way to locate information about the certificate that is associated with the Lync Server 2010 server

Method 1: Using Lync Server Deployment Wizard

Note You can also request a certificate from an internal CA, or assign an existing certificate from this wizard.
1.      Launch the Lync Server Deployment Wizard from the Windows Start menu on the Lync Server 2010 server
2.      Click on “Install or Update Lync Server System”
3.      Click run on Step 3: Request, Install or Assign Certificates
4.      Use the Certificate Wizard to view all the certificates that are installed for the Lync Server 2010 server

Method 2: Using Lync Management Shell

Use the PowerShell cmdlet Get-CsCertificate to locate information about the certificate associated with the Lync Server 2010 server

Note To view all properties on the certificate objects returned to see the SAN’s. Use with a "Get-CsCertificate | fl –property * cmdlet

For more information on Get-CsCertificate cmdlet please refer the following technet document
Get-CsCertificate

To request a certificate using the Lync Management Shell use the Request-CsCertificate cmdlet

For more information on Request-CsCertificate cmdlet please refer the following technet document
Request-CsCertificate

To import a certificate using Lync Management Shell use the Import-CsCertificate cmdlet

For more information on Import-CsCertificate cmdlet please refer the following technet document
Import-CsCertificate

To assign a certificate using Lync Management Shell use the Set-CsCertificate cmdlet

For more information on Set-CsCertificate cmdlet please refer the following technet document
Set-CsCertificate

21 October, 2012

Checking the User Profile Sync permissions – SharePoint 2010


When configuring the User Profile Sync in SharePoint, you would have certainly read up Spence Harbar’s post on configuring the User Profile Sync. If you haven’t, then here’s a link you should definitely bookmark:


Spence has by far the most comprehensive guide on configuring the UPS. If you read and understand the above post, you won’t go wrong with UPS configuration.
The aim of this post was to talk about a little less known script to check to see if your UPS permissions are set correctly.

The script is called PowerShell Administration Library for SharePoint – “Administration.ps1″ by Tobias Lekman.

You can a few handy functions. Really worth checking it out.

Since we are talking about User Profile, I want to draw your attention to an interesting function called Check-Replicatechanges. It’s as simple as loading up the PowerShell script and run a Check-Replicatechanges DOMAIN\UPSServiceAcc and it does a check on the specified User Profile Sync account to see if it has permissions fit for Forefront Identity Manager to perform its magic.


This tool is very handy if your AD infrastructure is run by another team and you don’t have Domain Admin permissions.

http://lekman.codeplex.com/releases/view/65930

Curtsey: www.jeremytaylor.net.

There was an error in callback


Problem Description:
When you search for user accounts using "Browse" People-Picker icon, the following error message may occur and the user accounts may not be resolved

Error Message:
"There was an error in callback".

Probable cause:
This issue normally happens if WSS_WPG group does not have any permissions on this registry key "HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Tools\Web Server Extensions\14.0\Secure".

By default, WSS_WPG group has FULL control access to the above mentioned registry key.

This particular key contains a binary value called AppCredentialKey – it is used to encrypt/decrypt the data passed by PeoplePicker-SearchADForests. This key is created using setapppassword command and used in one way trust relationships. Application pool accounts need at least read access to the above mentioned registry key for successful People Picker behavior.

Resolution
1)      Check WSS_WPG group permissions and confirm whether the application pool account of the web application present in that group 
2)      Later check the registry key - "HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Tools\Web Server Extensions\14.0\Secure" and identify permissions allocated for WSS_WPG group in the Permissions window of the registry key.
3)      If WSS_WPG group does not present in Permissions window, add the 'WSS_WPG' group with read or full control permissions.  

If you have any queries/questions regarding the above mentioned information then please let me know. I would be more than happy to help you as well as resolves your issues. Thank you.

19 October, 2012

SharePoint Connections


SharePoint Connections will help corporations get more out of SharePoint. 

Fall 2012 SharePoint Connections is your independent, technical conference, offering you the latest information about SharePoint 2013 as well as how to use SharePoint 2010 and earlier SharePoint versions to their fullest potential. Our SharePoint experts teach you the latest SharePoint technical knowledge and how to apply it to your situation. 

At SharePoint Connections, Microsoft SharePoint MVPs and SharePoint technical trainers interact with you and your peers, members of the SharePoint community, in workshops and one on one. You'll learn from experts who will teach you techniques to make SharePoint work in the real world. And you'll get your questions answered and come away with knowledge that will benefit your company, your coworkers, and yourself. 

Who will be speaking at SharePoint Connections? Experienced technical presenters, who have taken SharePoint apart, studied it thoroughly, used it in the real world, and figured out how it works. We choose speakers based on their SharePoint expertise, their technical knowledge about administration or development issues, and their ability to explain what they know so you understand it. 

Don't miss SharePoint Connections if you are a SharePoint admin or developer who needs technical information and real-world help with SharePoint's many challenges, including
  • Administering SharePoint
  • Developing for SharePoint
  • Customizing and integrating SharePoint into your business
  • Fine-tuning your deployment
  • Making SharePoint work for your end-users' needs
  • Plus SQL Server and SharePoint, SharePoint and Visual Studio, SharePoint performance, search in SharePoint, SharePoint social features, and so much more!
Use one of the two ways to register today!

Online Registration or Phone 203-400-6121


14 October, 2012

Your client does not support opening this list with Windows Explorer

Few days before, one of my clients reported an issue in which he is not able to open the document library in explorer view. One thing I would like to highlight here is that the resolution of this issue varies from OS to OS (OS: Operation System) so that’s why I have mentioned the machine configuration in the next point.

Machine configuration:
Operating System: Windows Vista
Explorer Version: IE 8.0
Office Version: Office 2010

Error Message:
Your client does not support opening this list with Windows Explorer

Checks to be followed:

Start / Restart Web Client Service
1)      Open the "Run" prompt (key combination Start+R)
2)      Type services.msc and press Enter.
3)      Locate Web Client service
4)      Make sure your service startup mode is set to automatic (right click it, select "Properties", and under "General" tab select "Automatic" from the "Startup Type" dropdown"
5)      Start the service or restart it if it’s already running.

Auto-detection of proxy
the way to turn this off is in Internet Explorer:
1)      In Tools select Internet options.
2)      Select Connections tab
3)      Click Lan settings button
4)      Under Automatic configuration clear the automatically detect settings checkbox.

If you have any queries/questions regarding the above mentioned information then please let me know, Thank you.

11 October, 2012

How can you set up RMS-based protection to the documents users store in SharePoint?


You can use Windows Rights Management Services (RMS) to protect SharePoint documents in the two most recent releases of SharePoint; SharePoint Server 2010 and SharePoint Server 2007 both include RMS support. However, there are some restrictions and complexities you should be aware of if you plan to set up RMS with your SharePoint installations.

An important thing to know is that RMS can only encrypt SharePoint documents and subject them to RMS access control restrictions when they are downloaded from a SharePoint 2010 or SharePoint 2007 document library. RMS doesn't leave SharePoint documents encrypted while they're stored on the SharePoint server. This restriction exists so that SharePoint can index and scan the documents on a SharePoint storage provider. RMS applies its restrictions to a document only right before it's downloaded to a client computer. Similarly, when an RMS-protected document is uploaded to a SharePoint site, RMS removes all protection from the document until a new download request is received.

SharePoint-RMS integration ensures that security restrictions are enforced even after a document has left a SharePoint server, which is something that can't be achieved using the standard SharePoint permissions. SharePoint-RMS integration also automatically enforces an organization's RMS document security policies. A SharePoint administrator can centrally define different RMS policies for the document libraries hosted on a SharePoint server. Therefore, individual users don't have to decide what protection they need to apply to documents they post in SharePoint libraries. RMS permissions are defined at the SharePoint document library level: Documents in a library automatically inherit the library's RMS permissions. This protection applies to both existing and new documents in the SharePoint library.

The RMS protection of SharePoint data is, just like the RMS protection that's bundled with Windows and Microsoft Office, only possible for certain file formats. Out of the box, it supports Word, Excel, PowerPoint, InfoPath, and XPS files. Extensions to apply RMS protection to other file formats (e.g., .pdf, .cad) can be added through special software from Microsoft partners such as Liquid Machines (now part of Check Point Software Technologies) and GigaTrust.

RMS support for SharePoint can be set up using either RMS SP2 or RMS V2, which is bundled with Windows Server 2008. Provided you already have a functioning RMS infrastructure, enabling RMS protection in SharePoint is relatively straightforward. The main configuration actions are
  • enabling RMS support on the SharePoint server
  • setting the actual RMS restrictions in the configuration of a given document library
You can enable RMS support in SharePoint by selecting either the Use the default RMS server specified in Active Directory or Use this RMS server option in the Information Rights Management section of the SharePoint Central Administration\Operations configuration section.

To set RMS restrictions on a SharePoint document library you must use the Information Rights Management section in the Permissions and Management configuration section of the document library. When you select the Restrict permission to documents in this library on download check box, you can further refine the RMS protection as follows:
  • Allow users to print documents.
  • Enforce users to verify their credentials every x number of days. This setting can be useful when someone who has access to RMS-protected confidential data leaves your organization; the individual will retain access to the data only for x days after his or her last successful authentication to an RMS server.
  • Reject files that don't support Microsoft Information Rights Management (IRM). Selecting this option results in SharePoint rejecting the upload of document formats that don't support RMS.
  • Remove RMS protection on a particular date. This setting is useful for publishing company financial results, for instance. After the quarterly results are published, the RMS protection policy on the quarterly results SharePoint library automatically changes -- meaning that the RMS restrictions are removed.
Microsoft provides more detailed guidance on how to set up SharePoint-RMS integration in the article "Deploying Windows Rights Management Services with Microsoft Office SharePoint Server 2007 Step-By-Step Guide," which is available from Microsoft's website.

Courtesy: www.sharepointpromag.com

08 October, 2012

Error: Spdesign.exe has been denied access to or there is no server on port 443 at .


Today one of my client reported with an issue while browseing some of the SharePoint sites using designer. Accessing sites using SharePoint gives the below error messages. 

Error: Spdesign.exe has been denied access to



Clicking Ok produces another error message as below.

Error: There is no server on port 443 at . You have selected the Connect using SSL Option. This connections problem may indicate that the server does not support Secure Socket Layer (SSL) communications, or that it uses SSL communications on a different port number.

 
I was clue less for the issue at the start since the sites were browseable using https//….. Protocol. So I started the troubleshooting based on the troubleshooting related to NIC card, VPN connection suspicion, SSL port disability (prompting for making calls server at 443 ports) from windows firewall. 

Tried to compare the SPD versions on the different machine where it was working not working and didn’t found any issue.

Tried to clear SPD Cache clearance by using the following steps:

1. Close SharePoint Designer.

2. Open My Computer.

3. Go to %System Drive%\Documents and Settings\%user%\Local Settings\Application Data\Microsoft\WebSiteCache. 

4. Delete all folders and files there.

5. Open the site using SPD and we still has the issue. 

On further checking for proxy used by SharePoint designer I noticed that actual issue was related to the wrong proxy usage with Designer.

The proxy was not configuring to make connection to the server using Secure Socket Layer at port 443. By changing the proxy settings in Designer we were able to access all of the sites using designer.

Steps to change Proxy using Designer. 

1. Open SharePoint Designer. 

2. Go to tools -> Application Options.

3.On General tab choose to click Proxy Settings. And change the proxy with is configured to use the SSL over http protocol. 

By changing the proxy for the client, we were able to open the sites from the SharePoint Designer. 

Note: This Proxy settings can also be configured via IE and you may be prompted to provide credentials to open the site for the first time in Designer. 

If you have any issue or query please do let me know, I would be more happy to help you answer.

Contributor Settings in SharePoint Designer


Issue:
Client was unable to open a site in SharePoint Designer after the activation of the SharePoint Designer on his site.

Reason:
He is not admin of that site or may not have proper permissions to make changes to site using SPD.

Notice:
- You may be able to open the site on your machine using SPD.
- While trying to open the site using SPD on the client machine you get message “Site is not allowed for editing using SPD”.
- You also notice that a small Icon at bottom right side of the SPD console with “Contribute Authentication”.
- It says the user who is trying to access the site is not a Site manager and has contribute rights to edit the site.

Resolution:
- Being Site Administrators, you can disable the use of contribute settings from the sites.
- To do that, open SPD console -> Sites -> contribute settings -> Under Advance tab -> Click Disable Contributor Settings.

Important: 
Contributor Settings is not a security feature. Contributor mode is a limited access mode for users who open and edit SharePoint sites in Office SharePoint Designer 2007. Contributor mode is designed to be used in an environment where site managers are confident of their users’ intentions. Contributor mode helps to guide users in a particular direction to carry out their tasks, and this guidance prevents accidental changes to the Web site.