user profile issue

Question

user profile issue

sns 9,246

I have a small pattern forming. A couple of users that started full time in Jan2021 don’t appear to have email addresses associated with their SP profiles.
If we search them in CA/Manage user profiles the email is blank as below.
Usually I would run a full sync and this sort of thing would clear up. I tried this on the first user and it would not pull from AD. I can see it in AD.
AD connectivity looked good and we didn’t see anything obvious

maybe altering the scheduled time frames for the jobs.?

For the first user I was able to get them working by manually filling in their profile email

Please help

2 answers

Your answer

Answer 1

Allen Xu_MSFT 13,861

Hi @sns ,

To map E-mail property from AD to Work email(E-mail address) user property in SharePoint, please take a reference to the following steps.

Access SharePoint Central Administration -> Manage service applications -> User Profile Service Application -> Manage User Properties.
Find Work email user property-> Edit.
Scroll down to Add New Mapping section on the Edit User Profile Property page -> Select AD source Data connection -> Type mail in Attribute text box -> Click Add -> Click OK.
Start Full Synchronization and wait for completion.

Here is a test result in my end. An user named "ABC" whose e-mail address is ******@123.COM in AD was mapped to SharePoint as shown below.

If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Allen Xu_MSFT 13,861 Reputation points

2021-03-29T01:58:01.423+00:00

Hi @sns ,

Is there any update on this thread? I'm looking forward to your reply.
sns 9,246 Reputation points

2021-03-29T06:02:50.837+00:00

Hi Allen,

we are still looking at you solution, will update once we tested. Thank you for your help,
Allen Xu_MSFT 13,861 Reputation points

2021-03-29T06:08:25.03+00:00

@sns ,

That's OK. Thanks for your response.
sns 9,246 Reputation points

2021-03-31T03:49:19.037+00:00

HI Allen,
I shared above suggestion to my team mate, below is the response from my peer.
can you suggest further? PFA.

Also please share some Microsoft article pertaining to this
Allen Xu_MSFT 13,861 Reputation points

2021-03-31T06:35:56.683+00:00

@sns ,

You can go to "Work email" user profile property to verify if it has been mapped to AD Attribute "mail" firstly. If it hasn't, I'm sure this is where the issue is.

Here is an article about mapping relations between AD attributes and SP User Profile properties for your reference: Default Active Directory Import User Profile Property Mappings in SharePoint Server 2013.
sns 9,246 Reputation points

2021-03-31T06:45:29.557+00:00

Hi Allen,
Thank you for the response.
This is what I see in the attribute area in the work email part. it is empty. so this is issue?

so we need to update email there and run full sync on week ends correct? Please refer our settings

or do we need to this in the lab?

below is the lab setting: what is wrong in lab? why it is showing nothing in the lab?
Allen Xu_MSFT 13,861 Reputation points

2021-03-31T07:17:55.397+00:00
@sns

Check Property Mapping for Synchronization section to verify if it is empty, it should be like below is it is not empty.

You can import AD attribute "mail" there and you can run a full sync immediately if you want to fix this issue right now. To run a full sync manually, please go to Start Profile Synchronization , select Start Full Synchronization and click OK.

Wait for Profile Synchronization Status to change from Synchronization to Idle.

To why "Source Data Connection" is empty on your lab server, please check if you have configured Synchronization connections on that server.
sns 9,246 Reputation points

2021-03-31T07:27:27.907+00:00

Hi ALlen

Please find attached screen.

in production, screen capture:

in lab below one:
![83163-cc1.jpg][2] [2]: /api/attachments/83163-cc1.jpg?platform=QnA
Allen Xu_MSFT 13,861 Reputation points

2021-03-31T07:35:11.933+00:00

@sns ,

Yes, It is empty. I think this is where the issue is. Just follow the steps in my answer.

Also, you haven't configured synchronization connection on your lab server. So there is nothing to select in Source Data Connection. Click Create New Connection on Configure Synchronization connections page to build a new one.
Reference: Configure Profile Sync in SharePoint Server using Active Directory (AD) Import
Allen Xu_MSFT 13,861 Reputation points

2021-04-02T07:08:41.517+00:00

@sns ,

Any updates?
sns 9,246 Reputation points

2021-04-06T05:53:20.64+00:00

Hi Allen Xu,

Thank you for follow up,
I was asked to give clarification on below question raised by my sharepoint arichtect.
can you please clarify on my below question and also share some respective MS link pertaining to that question.
PFA
Allen Xu_MSFT 13,861 Reputation points

2021-04-06T09:48:00.217+00:00

@sns ,

Kerberos authentication also belongs to Windows Authentication. What we most used is NTLM authentication.

To learn more about Kerberos, please take a reference to the this article: Plan for Kerberos authentication in SharePoint Server.
sns 9,246 Reputation points

2021-04-06T10:55:46.28+00:00

Hi Allen,
so,
You mean we can implement above solution to our current farm?
Allen Xu_MSFT 13,861 Reputation points

2021-04-07T06:05:24.717+00:00

@sns ,

Ofc you can configure Kerberos authentication to your farm, what we focus more should be if we need to deploy it. It is totally based on your own needs.
sns 9,246 Reputation points

2021-04-07T06:09:12.697+00:00

HI Allen,

Apologies if I conveyed wrongly,

My question is since you have told as below:
Kerberos authentication also belongs to Windows Authentication. What we most used is NTLM authentication.
To learn more about Kerberos, please take a reference to the this article: Plan for Kerberos authentication in SharePoint Server.

so can we update attribute and run full synchronization? I hope beilve you have understood my team mate concern on above email. Please suggest further
Allen Xu_MSFT 13,861 Reputation points

2021-04-07T06:17:44.213+00:00

@sns ,

Sorry for my misunderstanding. And yes, you can update and run full sync if using Kerberos, no difference.

Answer 2

sns 9,246

Hi Allen,

Below screenshots are from lab:
I configured as you suggested, however I am noticing user profile sync status coming to IDLE with in 2 minutes and user profile numbers also not changing, so I believe it is not syncing at all. Please suggest how to verify user profile sync service started and run full synchronization successfully?
FYI: it is SharePoint 2016 version both in lab and production

Allen Xu_MSFT 13,861 Reputation points

2021-04-08T09:29:06.29+00:00

Hi @sns ,

You need to Populate Containers and check the check box of the containers contain the users you want to import to SharePoint here:
sns 9,246 Reputation points

2021-04-12T09:23:19.713+00:00

Hi Allen,

Did you have a chance to look in to my above response?
Allen Xu_MSFT 13,861 Reputation points

2021-04-12T09:39:41.16+00:00

@sns ,

Make sure you have selected SharePoint ADI here firstly.

Add or delete a user in your AD server(make sure the new user is in the container of the connection), start full sync, see if the amount of user profile changes.
sns 9,246 Reputation points

2021-04-12T10:04:29.893+00:00

HI Allen,

I have already done that, but still same behavior. And option you have mentioned is already selected.
sns 9,246 Reputation points

2021-04-14T13:10:33.893+00:00

Hi Allen Xu,

Did you have a chance to look in to above thread?

Share via

user profile issue

2 answers

Your answer