Quick Solution 7: UserProfileApplication.SynchronizeMIIS Failed to configure MOSS initial MAs, will attempt during next rerun

  • Article

Symptoms

When you try to start the User Profile Synchronization Service from Central Administration, the User Profile Synchronization Service is Starting, and then Stop after 5 to 10 minutes. Meanwhile, the following error message is logged in the SharePoint Unified Logging Service (ULS) log.

Error Message 

<date time>       OWSTIMER.EXE (0x1E38)                              0x0F80  SharePoint Portal Server              User Profiles                      g145                Unexpected       Maximum number of retries done for starting FIM SpService. Please look at ULS logs and event viewer to look for the root cause of the failure.

<date time>       OWSTIMER.EXE (0x1E38)                              0x1ADC                SharePoint Portal Server              User Profiles                                 9q18      High  
UserProfileApplication.SynchronizeMIIS: Failed to configure MOSS initial MAs, will attempt during next rerun.
Exception: System.Management.ManagementException: Generic failure     
at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatuserrorCode)    
at System.Management.ManagementObjectCollection.ManagementObjectEnumerator.MoveNext()    
at Microsoft.Office.Server.UserProfiles.Synchronization.ManagementAgent.ManagementAgentCollection.ManagementAgentEnumerator.MoveNext()    
at Microsoft.Office.Server.UserProfiles.UserProfileConfigManager.IsMossMaConfigured(UserProfileApplication
application)    
at Microsoft.Office.Server.Administration.UserProfileApplication.SetupSynchronizationService(ProfileSynchronizationServiceInstance
profileSyncInstance).

 

Causes 

The issue is caused by insufficient privilege to get Management Agents from WMI.

SharePoint tries to list the Management Agents that were created in the MIIS server. It uses WMI, and query class MIIS_ManagementAgent from namespace root\MicrosoftIdentityIntegrationServer to get the management agents. Without sufficient privilege to query the class, there will have a 0x80041001 Generic failure be from WMI:

  1. Click Start > Run
  2. Type wbemtest
  3. Click Connect , and then type root\MicrosoftIdentityIntegrationServer and follow by clicking Connect
  4. Click Query
  5. Type the WQL: SELECT * FROM MIIS_ManagementAgent
  6. Click Apply to execute the query

If you use Process Monitor to monitor process “wmiprvse” at the same time, you will see lots of “Access Denied” on C:\Program Files\Microsoft Office Servers\14.0. The processing account is Network Service

Solutions 

  1. On the SharePoint server(s), open “Local Users and Groups”
  2. Select Groups
  3. Double-click “WSS_WPG” group
  4. Add the Network Service account to this group