Duarte's SharePoint info

I posted an article about how to prevent importing disable AD accounts. But sometimes you can make good use of LDAP filters toa void importing service accounts for instance, and other filters according to your needs:

Example LDAP User Filters

Default user filter:
(&(objectCategory=Person)(objectClass=User))

Exclude accounts with no email address:
(&(objectCategory=Person)(objectClass=User)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(mail=*))

Exclude disabled accounts:
(&(objectCategory=person)(objectClass=user)(!userAccountControl:1.2.840.113556.1.4.803:=2))

Exclude accounts with passwords set to expire:
(&(objectCategory=person)(objectClass=user)(!userAccountControl=65536))

Include only the accounts with valid email addresses
(&(objectCategory=Person)(objectClass=User)(mail=*com)

Include only the accounts that are part of the Branch1 organizational unit
(&(objectCategory=Person)(objectClass=User)(memberof:1.2.840.113556.1.4.1941:=(CN=Authenticated Users,OU=Branch1,DC=domain,DC=local)))

Exclude accounts that don’t have a first name
(&(objectCategory=Person)(objectClass=User)(!(userAccountControl:1.2.840.113556.1.4.803:=2))(!(!givenName=*)))

Useful links:

1. LDAP Filter syntax: http://msdn.microsoft.com/en-us/library/aa746475(VS.85).aspx

2. LDAP Query Basics: http://technet.microsoft.com/en-us/library/aa996205(EXCHG.65).aspx

3. LDAP ADModify tool (can be useful to test queries): http://admodify.codeplex.com/

Increasing the maximum upload limit for a SharePoint site collection can be configured on the Central Administration. But sometimes it is not enough, you might need to increase some time out configurations.

So you must consider:

   1. Configure in Central Administration

   2. Configure Time outs:

      2.1 IIS   

      2.2 Web.config

1. Configure in Central Administration

   1. Open the Central Administration>

   2. Go to "Application Management" , then ""Web Application General Settings"

   3. Make sure you selected the correct web application and modify the "Maximum Upload Size" field.

2. Time Outs

   2.1  IIS

         1. Open IIS, select the website and open its properties. 

       2. Open the "Web Site" tab. Set the value in "Connection timeout" field (see image below).

       3. You should consider 120 seconds per extra 50MB upload.

   2.2 Web.config

         1. Edit C:\Program Files\Common Files\Microsoft Shared\Web server extensions\12\TEMPLATE\LAYOUTS\web.config

               1.1 add or change the following "ExecutionTimeout" property to the value shown:

         2. Edit the web.config of your Web application.

                2.1 add or change the following "ExecutionTimeout" property to the value shown:

If SharePoint is importing disabled profiles, you should change the profile import filter.

1. Go to Shared Services >User Profiles and properties

2. Click on Configure Profile Import

3. In the Source area, click on "View import connections"

4. Edit your Active Directory connection

6. In the "User filter" field, paste the following string: (&(objectCategory=person)(objectClass=user)( !(userAccountControl:1.2.840.113556.1.4.803:=2))), see image below:

7. Click OK.

Microsoft article: http://support.microsoft.com/kb/827754

Event ID: 6398 6482 7076 Attempted to read or write protected memory. This is often an indication that other memory is corrupt.

Check the following article & install the hot fix: http://support.microsoft.com/kb/946517/en-us

This occurs in IIS when more than 2 AD users try to access the same proccess.