Configuration is the hardest to describe, as this will obviously vary most from installation to installation. Here are some common gotchas I’ve run into, as opposed to step by step notes.
Using the People Picker across a One Way Trust
If you want to use the people picker to be able to select your internal staff, on a box on the extranet with a one way trust, you need to specify the details on the command line – after making sure that LDAP is allowed from the DMZ to at least one of your domain controller. See this post for full details.
Essentially, you first need to set an internal SharePoint encryption key, then tell the server what domains to add to the list, and what valid username and password to use to connect to the domain in order to pull back the list. Don’t use administrator, btw!!!
To set the initial encryption key, use:
stsadm.exe -o setapppassword -password <yourencryptionkey>
To set the actual domain link, use:
stsadm.exe -o setproperty -url http://server:port -pn “peoplepicker-searchadforests” -pv “forest:foo.corp.com;domain:bar.foo.corp.com”, LoginName, P@ssword
Do note that you’ll need to repeat this second step for every web application where you want to use the people picker. For sites using SSL, don’t forget to specify https:// for the url!
Importing user profiles from the relevant domains
This can be very important, as its fairly common practice to use the user profile stored in the Shared Service Provider to provide global information localised for a particularly user. If you don’t import the users, all of those web parts will fail.
Within the Shared Service Provider, set up the import connections for any additional domains, then set the schedules to ensure regular user updates. I recommend full updates once a week and incremental updates once or twice a day.
Backup and Restore of Site Collections
If you generate a site from a site template (and the web parts are correctly configured), everything will work fine. If you back up and restore a site to a different name, it won’t. All of the local configuration on every custom webpart will need to be checked to ensure that its pointing to the right place. Be particularly careful if you’ve used custom search results, as that will tend to go wrong.

Recent Comments