Troubleshooting Tips

1. SharePoint Manager Plus is not starting
2. User account Privileges
3. SharePoint Manager Plus Farm Configuration
4. Syncing
5. Enabling CredSSP using group policy
6. Creating custom PowerShell session configuration

SharePoint Manager Plus is not starting

SharePoint Manager Plus uses Postgres database by default and the database connectivity needs 33315 port to work. Check if any other application runs in the same port. If so change the default port number in the database_params.conf in the conf folder of product location (url=jdbc:postgresql://localhost:[Your_Port_Number_here]/spmpdb?useUnicode=true&characterEncoding=UTF-8) or free the port 33315 (Recommended).

User account Privileges

User account used for configuring the On-Premise Farm server must have the below mentioned privileges

1. User should be a member of built in administrator group of the remote machine
2. User should be a member of Farm Administration Group
   Open up Central Web Administration and add the user to the Farm Administrator group if not added previously.
3. User should have access to all SharePoint databases i.e. SQL Server SharePoint_Shell_Access database role to all SharePoint databases including Configuration database and all content databases.
   To assign this role to User through PowerShell Script, Open the PowerShell in Remote machine and run
   
   Add-PSSnapin Microsoft.SharePoint.PowerShell
Get-SPDatabase | Add-SPShellAdmin DOMAIN\UserName [ Replace DOMAIN\UserName with actual User account]
   
   Or you can do it by opening SQL Server Management Studio, assign the User with DBCREATOR, SECURITYADMIN and SYSADMIN Server Roles. Also, ensure that user has DBOWNER privilege over all the SharePoint databases.
4. User should have Full Control over all the web applications
   Open up Central Web Administration, under manage web applications section, select each web application and click the user policy option on the top ribbon and add the user with Full Control privilege.
   
   Or, to assign it through PowerShell Script, run the below script in the Remote machine's PowerShell
   
   Add-PSSnapin Microsoft.SharePoint.PowerShell
$user = "DOMAIN\UserName"
$displayName = "User Display Name"
Get-SPWebApplication | foreach { `
$policy = $_.Policies.Add($user,$displayName) `
$role = $_.PolicyRoles.GetSpecialRole([Microsoft.SharePoint.Administration.SPPolicyRoleType]::FullControl) `
$policy.PolicyRoleBindings.Add($role) `
$_.Update() `
}


SharePoint Manager Plus Farm Configuration

1. What should I do if "Access is denied" error message shown?
2. "Cannot access the farm" error message displayed. What should I do?
3. What should I do if "Remote/Local PowerShell Settings required in order to add farm" error message shown?
4. "PowerShell Version is less than 2" error shown. What should I do?
5. "Remote/Local Powershell settings required" error shown. What should I do?

1. What should I do if "Access is denied" error message shown?

• User name / Password is not valid.
• Remote Server machine's PowerShell Remoting might be disabled. So it doesn't allow the user to make use of Remote PowerShell feature.

• Re-check your credentials and try again. [Also, ensure this user account have all necessary privileges mentioned in here ]
• In remote machine (SharePoint Server machine), open the PowerShell as administrator and run the below command (Check if any Public network connection is available in the machine. If so, change it to Domain or Private and Proceed)
  
  Enable-PSRemoting -Force

In case of your Remote machine (SharePoint Server machine) and Client machine (SharePoint Manager Plus installed machine) being in different domains, run the below commands in the client machine, opening the PowerShell as administrator, (Check if any Public network connection is available in the machine. If so, change it to Domain or Private and Proceed)

• Enable-PSRemoting -Force
• Set-Item WsMan:\localhost\client\trustedhosts -Value "server.domain.com" [FullyQualifiedDomainName of the remote machine] -Concatenate -Force
• Restart-Service WinRM

2. "Cannot access the farm" error message displayed. What should I do?

• Check if any Public network connection is available in the machine. If so, change it to Domain or Private and Proceed.
• User account used might not have all the privileges needed for a farm administrator.
• Authentication currently used is not supported by Remote Machine. It does not delegate the user to another machine to access the database ( i.e. Database server mostly)

• Click here to check all the needed privileges and configure them accordingly.
• Enabling the CredSSP Authentication in remote and client machine solves the issue.
  
  In Remote machine (SharePoint Server machine), open PowerShell as administrator and run the following commands,

Enable-PSRemoting -Force

Enable-WSManCredSSP -Role Server -Force

  In client machine ( SharePoint Manager Plus machine), open PowerShell as administrator and run the following command,

Enable-PSRemoting -Force

Enable-WSManCredSSP -Role Client -DelegateComputer "server.domain.com" [FullyQualifiedDomainName of the Remote machine] -Force

Click here to check your Group policy settings.

In case of your Remote machine (SharePoint Server machine) and Client machine (SharePoint Manager Plus installed machine) being in different domains, run the below commands in the client machine, opening the PowerShell as administrator, (Ignore this if you had already done this step)

• Enable-PSRemoting -Force (ignore if already done this step)
• Set-Item WsMan:\localhost\client\trustedhosts -Value "server.domain.com" [FullyQualifiedDomainName of the remote machine] -Concatenate -Force
• Restart-Service WinRM

3. What should I do if "Remote/Local PowerShell Settings required in order to add farm" error message shown?

• Either Local or Remote PowerShell Configuration is not done properly. This also happens when your remote machine has no trust on the client machine.

Run the below commands in Client machine's PowerShell as administrator,

• Enable-PSRemoting -Force
• Set-Item WsMan:\localhost\client\trustedhosts -Value "server.domain.com" [FullyQualifiedDomainName of the remote machine] -Concatenate -Force
• Restart-Service WinRM

Run the below command in Remote machine's PowerShell as administrator,

• Enable-PSRemoting -Force

4. "PowerShell Version is less than 2" error shown. What should I do?

SharePoint Manager Plus needs the PowerShell version 2 or above to work. Upgrade your PowerShell version.

5. "Remote/Local Powershell settings required" error shown. What should I do?

Follow the below pre-requisites for enabling Remote PowerShell on both remote server machine (SharePoint Server) and local machine (where SharePoint Manager Plus is installed)

1. Enable-PSRemoting -Force
2. Enable-WSManCredSSP -Role Server -Force

1. Enable-PSRemoting -Force
2. Enable-WSManCredSSP -Role Client -DelegateComputer "server.domain.com" (Fully Qualified Domain Name of the Remote server)
3. Click here to check your Group policy settings.

1. Get-Item wsman:\localhost\shell\MaxMemoryPerShellMB (To check the current powershell memory size)
2. Set-Item wsman:\localhost\shell\MaxMemoryPerShellMB -Value 1024 -Force ( Run this only if memory is less than 1024 MB)
3. Restart-Service WinRM

1. Get-Item wsman:\localhost\shell\MaxShellsPerUser (To check the maximum concurrent shells allowed per user)
2. Set-Item wsman:\localhost\shell\MaxShellsPerUser -Value 30 -Force ( Run this only if count is less than 30)
3. Restart-Service WinRM

1. Enable-PSRemoting -Force
2. Set-Item WSMan:\localhost\Client\TrustedHosts -Value "server.domain.com" (Fully Qualified Domain Name of the Remote server) -Concatenate -Force
3. Restart-Service WinRM

Syncing

1. There is problem with my automated scheduled sync. It doesn't happen.
2. 'Sync Now' is not working

1. There is problem with my automated scheduled sync. It doesn't happen.

1. Farm server credential might have changed and the same might not have been updated in SharePoint Manager Plus. In this case, update your farm server password in the SharePoint Manager Plus and try.
2. Or there might already be a scheduled sync running.

2. Sync Now is not working

1. Farm server credential might have changed and the same might not have been updated in SharePoint Manager Plus. In this case, update your farm server password in the SharePoint Manager Plus and try.
2. Or there might already be a scheduled sync running.

Required Local Group Policy Settings

This group policy settings needs to be done in machine where SharePoint Manager Plus application is installed.

To enable client-side CredSSP to allow user credential delegation for winrm for your target machine in the domain, set the following policy values:

1. Computer Policy → Administrative Templates → System → Credentials Delegation → Allow Delegating Fresh Credentials → Set to enabled and add WSMAN/* to list of servers(For eg: WSMAN/mysharepointserver.domain.com), check the box for Concatenate OS defaults with input above
2. Computer Policy → Administrative Templates → System → Credentials Delegation → Allow Delegating Fresh Credentials with NTLM-only server authentication → Set to enabled and add WSMAN/* to list of servers(For eg: WSMAN/mysharepointserver.domain.com), check the box for Concatenate OS defaults with input above
3. Computer Policy → Administrative Templates → Windows Components → Windows Remote Management (WinRM) → WinRM Client → Allow CredSSP authentication → Set to enabled

Creating custom PowerShell session configuration

Perform the below steps on the SharePoint Server Machine: Open the PowerShell as administrator,

1. Register-PSSessionConfiguration -PSVersion 2.0 -Name ps2

Now, open the SharePoint Manager Plus installation location and go to ManageEngine\SharePoint Manager Plus\bin folder,

1. Open command prompt as administrator at this location and run connectDb.bat
2. Run the query in the command prompt window, Update ParamValueRelation set VALUE='ps2' where PARAM='PS_CONFIG_DEFAULT';