Checked the DNS settings and all, but at the same time the User Profile Sync Connection to the same domain was working with that account and returning user accounts.

Eventually, though I would create a standard web application on another port to see if I still had issues. Went as Farm Admin to the web applications, and the ‘New’ was greyed out. Strange… Logged in as Domain Admin and had the permissions to create the Web App.

So then tried to run the script as Domain Admin rather than Farm Admin, and hey presto the property got created (validated with Get-Property), on both the new web app, and the existing one.

Now the new web app is correctly searching the User Domain, as is the root site collection of the existing web app. However the tenant site collection created under that is giving another error now:

Claims Search call failed. Error Message: Object reference not set to an instance of an object. Callstack: at Microsoft.SharePoint.WebControls.PeopleQueryControl.IssueClaimsQuery(String searchPattern, String providerID, String hierarchyNodeID, Int32 pageSize, SPProviderHierarchyTree spgroupTree).

I’m going to try delete the site collection for the tenant and recreate it all as Domain Admin and see if it works then!

Cheers
Gavin

You didn’t mentioning running the step:

stsadm –o setapppassword –password MyPassword

If you didn’t first set the encryption key, you can’t store the domain password to access the other domains. This could cause the failure to store the value highlighted by the use of the getproperty command.

You also don’t mention the nature of the trusts, so it’s difficult to give much advice. 2010 is much more strict than 2007 out of the box – only the local domain will be searched now, unlike 2007. Of course, there is another potential issue with trust relationships over domains – the ports need to be opened. Depending on the nature of the “resource” domain, they may well be safeguarded over the network. Off the top of my head, you need at least 88, 139 and 445 open. You also need to make sure that DNS is set correctly – if domain resolution on your local domain doesn’t point you to the correct remote domain servers, the resolution won’t work.

Other possibilities include slightly incorrect syntax in your instruction. First, you need to make sure you are specifiying the specific top level web application, not the server. If your web application path is http://exampledomain.org/sites/ then specifying

stsadm -o setproperty -url http://exampledomain.org -pn “peoplepicker-searchadforests” -pv “domain:domainname.co.uk,DOMAIN\ADUserAccess,xxxxx”

won’t work – it has to be the full web application URL.

Next, specifying the domain is rather a pain too. you need to specify all the domains involved, which will include the local domain, not just the remote user domain. You need to make sure you specify the AD domain name, which isn’t necessarily the same as the email address or usernames, depending on the config – many use abstract *.local domain names. putting it together from these examples, you’d need something like:

stsadm –o setapppassword –password MyPassword

followed by:

stsadm -o setproperty -url http://exampledomain.org/sites/ -pn “peoplepicker-searchadforests” -pv “domain:resourcedomain.local;domain:userdomain.local,USERDOMAIN\ADUserAccess,xxxxx”

I have setup a hostname based site collection for a test company and everything seems to be working correctly, including the User Profile Application correctly retrieving their profiles from the User domain (when you specify the OU of the company with the Set-SPSiteSubscriptionConfig cmdlet + in conjunction have a Sync Connection setup to retrieve the accounts from the other domain)

But the People picker just isn’t playing ball.
I am running the command:
stsadm -o setproperty -url “http://app01″ -pn “peoplepicker-searchadforests” -pv “domain:domainname.co.uk,DOMAIN\ADUserAccess,xxxxx”
as I thought maybe this was required in addition. But then the result of the Get command to check is that the property doesn’t exist:
stsadm.exe -o getproperty -url http://app01 -pn “peoplepicker-searchadforests”

Any ideas!?
Thanks
Gavin

Any help would be great we have been stumped for over a week,

This is exactly what I am looking for. I am currently setting up an extranet at my work. Qustion. How do you incorporate filter strings to the above example? For example, I want to return only accounts that are active.

Thanks

Please help me solve this issue its very critical.

Thanks in advance