Orphaned Users showing up in People Picker
Hi Everyone,
I migrated our SharePoint 2007 Environment from one Domain to another. Now there are a few employees that have both their old domain and new domain account displayed in people picker in one site collection only. I am able to find some
of the old accounts in the User Information List of the site collection and delete them, but there are other accounts that I cannot find there to delete.
Things I have tried:
1. Re-ran stsadm -o migrateuser command.
2. Checked the User Information List for the old domain account.
3. Ran stsadm -o deleteuser
Is there anything else that I could check? The problem is that these accounts can still be added to workflows, which then errors out since the account is invalid.
Thanks in advance for any help that you can provide.
February 21st, 2012 5:09pm
Start a full profile import and check if the contentdb is synchronized with SSP db by executing this command
stsadm -o sync -listolddatabases 1
In order to make the correlation between IDs and the content database names you need to execute the following query on the SharePoint configuration database:
select o.id, o.name,* from objects o
inner join classes c on o.classid = c.id
where c.fullname like %SPContentDatabase%
If the databases is not synchronized you can execute this command:
stsadm -o sync deleteolddatabases 1
Now, you have to wait one hour for the synchronization job to start. One hour is the default value.If you want to change the synchronization job execution to every 5 minutes you can run the following command
stsadm -o sync synctiming m:5
If those actions will not work please let me knowMCITP|MCTS SharePoint| SharePoint Performance blog
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2012 11:48am
Thanks for the response Bogdan. I've done a full profile import and ran the "stsadm -o sync -listolddatabases 1" command but nothing shows up. It says:
Shared Service Provider SSP
No databases match the criteria for this Shared Service Provider
So there is nothing to delete.
Any other ideas?
February 23rd, 2012 2:22pm
Hi,
Yes your results show that the data is in sync.
I hope this will help you out.Thanks, Rahul Rashu
Free Windows Admin Tool Kit Click here and download it now
February 23rd, 2012 2:26pm
Hi Rahul,
What I was trying to say in my reply is that the problem in my original post still exists. So although my data is in sync, I am still seeing a few old domain usernames in people picker in one site collection. There seems to be no way to get rid
of them.
February 23rd, 2012 3:00pm
In your SharePoint farm have you configured profile import from SSP? Have executed a full profile import?
If you execute this command today stsadm -o sync -listolddatabases 1
you have the same result?
If you check the Profile Synchronization timer job (Operations -> Timer Job status) for you web application what is his status and started date?MCITP|MCTS SharePoint| SharePoint Performance blog
Free Windows Admin Tool Kit Click here and download it now
February 24th, 2012 3:22am
In your SharePoint farm have you configured profile import from SSP? Have executed a full profile import?
If you execute this command today stsadm -o sync -listolddatabases 1
you have the same result?
If you check the Profile Synchronization timer job (Operations -> Timer Job status) for you web application what is his status and started date?MCITP|MCTS SharePoint| SharePoint Performance blog
February 24th, 2012 11:07am
In your SharePoint farm have you configured profile import from SSP? Have executed a full profile import?
If you execute this command today stsadm -o sync -listolddatabases 1
you have the same result?
If you check the Profile Synchronization timer job (Operations -> Timer Job status) for you web application what is his status and started date?MCITP|MCTS SharePoint| SharePoint Performance blog
Free Windows Admin Tool Kit Click here and download it now
February 24th, 2012 11:07am
1. Yes, I have configured the profile import from SSP and executed a full profile import.
2. stsadm -o sync -listolddatabases 1 results in the following message:
"Shared Service Provider SSP
No databases match the criteria for this Shared Service Provider"
3. Profile Synchronization timer job status is "Succeeded 100% 2/28/2012 12:00PM"
So while my profiles are in sync, people picker still displays cached user accounts from our old domain. Again, this problem exists on only one site collection. Other site collections are ok.
February 28th, 2012 4:04pm
Finally! I found a way to delete these "stubborn" users who do not show up in the User Information List from showing up in People Picker! I had to do the unthinkable and "touch" the SQL server by running a SELECT query to find their user
id. Then I used that id in SharePoint to view their profile where I could finally delete the account from the site collection. Not sure why I didn't think of this before but at least it works for me.
So here are the steps I took:
1. In SQL: SELECT * FROM [WSS_Content_DatabaseName].[dbo].[UserInfo] WHERE tp_Login='DOMAIN\username'
2. Take note of the tp_ID
3. In IE, go to http://<your sharepoint site collection/_layouts/userdisp.aspx?ID=tp_ID, where tp_ID is the number you found from your select statement.
4. It should take you to the user's profile where you can click on the Delete User from Site Collection button.
I hope that helps people who find themselves in the same situation as me.
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2012 4:26pm
Finally! I found a way to delete these "stubborn" users who do not show up in the User Information List from showing up in People Picker! I had to do the unthinkable and "touch" the SQL server by running a SELECT query to find their user
id. Then I used that id in SharePoint to view their profile where I could finally delete the account from the site collection. Not sure why I didn't think of this before but at least it works for me.
So here are the steps I took:
1. In SQL: SELECT * FROM [WSS_Content_DatabaseName].[dbo].[UserInfo] WHERE tp_Login='DOMAIN\username'
2. Take note of the tp_ID
3. In IE, go to http://<your sharepoint site collection/_layouts/userdisp.aspx?ID=tp_ID, where tp_ID is the number you found from your select statement.
4. It should take you to the user's profile where you can click on the Delete User from Site Collection button.
I hope that helps people who find themselves in the same situation as me.
March 14th, 2012 4:26pm