ControlPoint 8.6.1 - Administration Guide

Cannot Locate SharePoint Users Authenticated by Alternate (non-Active Directory) Methods

Issue

Attempting to select alternate authentication-based users on which to run a ControlPoint operation but unable to browse for or validate them.

Possible Reason(s)

·The ControlPoint application has not been configured to recognize the alternate authentication provider.

·The scope of your action or analysis encompasses more than one Web application.

Resolution(s)

·Make sure the ControlPoint application has been configured to recognize the alternate authentication provider(s) used in the farm.   See Configuring ControlPoint to Recognize Alternate Authentication Providers.

·Either:

§limit the scope of your operation to a single Web application

OR

§if the operation is one that can be run on unvalidated users, manually enter (rather than browsing for) the user's name and omit the validation.

See "Special Considerations for Selecting Alternate Authentication-based Users" in the topic Selecting Users on Which to Perform a ControlPoint Action or Analysis in the ControlPoint User's Guide.

System Exception: "Cannot get the members of the group..."

Issue

When attempting to view members of an Active Directory group from permissions analysis results, an error window displays which includes the following message:

System.Exception:  Cannot get the members of the group [domain\group] possibly because of network or permissions problems

Possible Reason

The ControlPoint Service Account does not have permissions to read all users within the Active Directory group.  

Resolution

Make sure the ControlPoint Service Account has at least Read Permissions for the Active Directory record of every SharePoint user.  Consult your Microsoft Active Directory documentation for details.

Active Directory Group Membership: "Cannot connect to the domain controller for domain"

Issue

When attempting to view membership in an Active Directory group from Permissions analysis results, the following message displays:

Group: [group-name] Cannot connect to the domain controller for domain

Possible Reason

A trust relationship between the domain or forest that hosts the Active Directory group and the domain or forest in which ControlPoint is installed

·does not exist

OR

·requires additional authentication.

Resolution

See Accessing Members of Active Directory Groups in Different Domains or Forests (on page 78).

Properties Dialog: Total Users with Permissions Displays as "Incomplete"

Issue

After clicking [Calculate Totals] On the ControlPoint Properties dialog, the number of Total Users with Permissions is followed by (Incomplete).

Reason

An exception was encountered when Active Directory users were being counted.  Possible reasons include:

·The ControlPoint Service Account does not have access to an entire Active Directory group or one or more accounts within an Active Directory group.

·Networking problems have been encountered.

Resolution

Review the ControlPoint Administration log (xcadmin) to determine the cause of the exception.