First up however, you need a list of the profile property names so you know what to select.  The following PowerShell script will display a table showing the internal name used by Sharepoint, and the property name displayed in the Sharepoint UI:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

# Outputs a list of User profile names - both the internal name, and the name displayed in Sharepoint
 
[void][System.Reflection.Assembly]::LoadWithPartialName("Microsoft.Office.Server")
[void][System.Reflection.Assembly]::LoadWithPartialName("Microsoft.Office.Server.UserProfiles")
# Function:          Get-UserProfileConfigManager
# Description:       return a UserProfileConfigManager object which is used for management of MOSS User Profiles
# Parameters:        SSPName          Shared Service Provider Name    
 
Function global:Get-UserProfileConfigManager($SSPName)
{
$ServerContext = [Microsoft.Office.Server.ServerContext]::GetContext($SSPName);
new-object Microsoft.Office.Server.UserProfiles.UserProfileConfigmanager($servercontext)
}
 
$cm=Get-UserProfileConfigManager("SharedServices");
$cm.getProperties() | ft name,displayname

The output from this can be used to determine the names of the properties you want to use in the next script.  To use this script, update the  $arProperties list with the property names you need.  By default this saves the results to a file UserProfiles.csv in the directory from which you run the script.  You can then import this into Excel or whatever.

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

# Outputs a delimited file with specified user profile properties for each user in Sharepoint
 
# Create array of desired properties
$arProperties = 'UserName','FirstName','LastName','Title','WorkEmail','WorkPhone','Manager','AlternateContact','RoleDescription','PictureURL';
# Specify output file
$outfile = 'UserProfiles.csv';
#Specify delimiter character (i.e. not one that might appear in your user profile data)
$delim = '^';
# Specify Shared Service Provider that contains the user profiles.
$SSP = "SharedServices";
 
[void][System.Reflection.Assembly]::LoadWithPartialName("Microsoft.Office.Server")
[void][System.Reflection.Assembly]::LoadWithPartialName("Microsoft.Office.Server.UserProfiles")
 
# Function:          Get-UserProfiles
# Description:       return a UserProfileManager object containing all user profiles
# Parameters:        SSPName          SSPName
 
Function global:Get-UserProfiles($SSPName)
{
	$ServerContext = [Microsoft.Office.Server.ServerContext]::GetContext($SSPName);
	$UPManager = new-object Microsoft.Office.Server.UserProfiles.UserProfileManager($ServerContext);
	return $UPManager.GetEnumerator();
}
$profiles = Get-UserProfiles($SSP);
 
#Initialise Output file with headings
$header = [string]::join($delim,$arProperties);
Write-Output $header | Out-File $outfile
 
#Output the specified properties for each
$profiles | ForEach-Object {
	foreach($p in $arProperties){
		# Get the property name and add it to a new array, which will be used to construct the result string
		$arProfileProps += $_.Item($p);
	}
	$results = [string]::join($delim,$arProfileProps);
	# Get rid of any newlines that may be in there.
	$CleanResults = $results.Replace("`n",'');
	Write-Output $CleanResults
	Remove-Variable -Name arProfileProps
} | Out-File -Append $outfile

The next stage of development would be to pipe the output of the first script into the second, instead of setting up a list of desired properties – it is probably more useful to just grab everything.

I’m sure this could be written much more gracefully, but I can’t work out how to iterate through the UserProfile.Item array/object.  Any suggestions gratefully received!

Download Sharepoint User Profile PowerShell scripts here (zip file).

As such, any problems with SharePoint related to performance will not have anything to do with NLB, as all it does is decide which host a client will send requests to.  Rather such problems would be down to one of the web front ends responding slowing – usually down to the application pool needing to free up memory, which should happen automatically after a while.  Where NLB confuses things is that you can’t easily tell which WFE a client machine is talking to.

If NLB is not working, the only likely symptom would be that no requests to the NLB IP address would work.  If you can ping your NLB IP address, then NLB is working.

You can check Network Load Balancing by going to Start > Administrative Tools and running Network Load Balancing (most likely you have this on your PC).  You need to connect to one of the nodes involved.  You can then see the status of the nodes. This should always be checked first in case one of the nodes has stopped responding on the NLB address).  You should also use this interface to drainstop a node before taking it offline for any reason – that way you get as graceful as possible a handover of affinities.

Update: It seems that in certain circumstances, NLB can come apart under load.  We recently switched from two high end Cisco core switches to two stacks of three Dell PowerConnect 6048 switches.  Since then NLB works, but as soon as we get moderate load coming to the NLB address, Sharepoint grinds to a halt.  Dell are chasing this, and we are promised a fix soon – until then no NLB – we can’t roll back to our Cisco switches.  Christian Aid isn’t such a huge organisation (~800 staff worldwide), but heavy users of Sharepoint for file storage – seems enough to break NLB.  I think it is something to do with the multicast hack Microsoft use to make NLB work – but I’d better wait to hear back from Dell and get it working before I can say for sure.

By default VMware hosts ping their default gateway to determine whether or not they are isolated from the cluster.  However, if you are running a pair of Dell PowerConnect switches using VRRP for redundancy, the VRRP IP address is not pingable (I’m not sure why Dell set this up – this isn’t the case with Cisco’s HSRP equivalent).  So the solution to the problem was to nominate another device in the same subnet as the Service Console as an isolation address and force VMware to use this.  We nominated our monitoring server, as we attempt to keep this running 24/7.  You need to go to the Advanced Settings for VMware HA, and set das.isolationaddress to the IP of the device you will be pinging, and then create a new variable das.usedefaultisolationaddress and set that to false.  After doing this, disable HA, then once that has completed, reenable.

HA should work fine after that.

What happens to you in the Holi festival. Unfortunately not my photo - I was too chicken shit to take my camera out.

Linda and spent a few months travelling around India in Spring 1993. We arrived in Udaipur around the time of the Holi festival.  We found ourselves a wonderful lodging in a small family run guesthouse.  The room had a large balcony overlooking a narrow street by the ghats, and photographs of colonial lion hunts on the wall.  The youngest son of the owners, a lad around eight, was fascinated by us, and eager to take us out for the celebrations.

Earlier in the day, Linda and I had ventured out by ourselves and been plastered with paint, powder and water.  Several times men had taken the daubing as an opportunity to grope Lin, and on one occaision I was felt up by a man whose face turned quite pale when he realised he was cupping a pair of testicles.  I did have long hair at the time, but I hadn’t considered myself that girlish.

After all this, Linda was in no mood for a repeat, so the kid and I headed out for the afternoon without her.  We worked our way through the masses, more paint and water making its way onto us.  My guide planned to take me to his uncle’s house where a private celebration was taking place.  We headed out of the teeming centre into quieter streets.

As the streets grew deserted we encountered a group of very excited youths who approached us with much mirth and handfuls of colourful powder which they rubbed into my hair.  They were  a mix of children and teens, numbering about 30, and as they smeared they encircled us.  The crowd started to feel more like a mob, and a more focussed one than the chaos of the ghats.  My young guide was squeezed out the edge, but I was very much trapped at the centre.  Hands grabbed at my arms, then suddenly I was taken by the ankles too, and thrust up into the air over the crowd.  I shouted and struggled, and my guide screamed and begged them to put me down.

As if of one mind, they worked their way down the street, still holding me aloft.  I then spotted their destination – a large water trough used for watering cattle.  I squirmed and writhed with a greater urgency, punching and kicking.  My body was heaved up and down by the multitude of small and larger hands.  Laughter grew as they neared the trough, and the embarrassing yet classic image of being dumped in it played through my head.  Somehow, with a yank of hair here  and kick to the head there I managed to free myself, and struggle to the ground.

A friendly hand now gripped my arm, and my guide towed me down an alley way towards his uncle’s house.  We pushed through a gate and slammed it shut.  Looking through a crack I could see the mob behind, screaming and shouting with some anger now, frustrated that their little joke had broken down at the last minute.  In my memory they look like a Bollywood crowd of thugs, the ring leaders wearing colourful bandannas, about to break out into shrill song and fantastic choreography.  The voice of someone older rang out over the wall in Hindi.  I was tugged into the house.

Inside I was again encircled by people who wanted to rub my hair.  This time it was women, all of whom were fascinated by my long hair.  I brush was produced and the paint and powder was combed away.  I was pampered with curious looks and indian festival foods, extremely pleasant, until I started to feel desperately uncomfortable with being the centre of attention, albeit in a less physically dangerous way.  I told the kid I should be getting back to Linda.  We made our thankful goodbyes, and took a quick look over the gate before stepping out.  Around a couple of corners the mob was waiting for us after their musical number – back to the story.

This was getting tiresome for me, and also a little terrifying.  The demographic of the gang seemed to have drifted up the age and size scale – I’d escaped the cattle trough, but possibly worse was now on the agenda.  Again the kid pleaded them to go away.  I saw the need to be more persuasive and picked up a large chunk of concrete, raised it above my head, and gave a shriek I hoped demonstrated a willingness to cave in a skull.  They kept their distance, but followed as we backed away.  As we neared the still densely crowded street, I threw the concrete down at their feet and we dashed in to the melee.

When we reached the hotel, the kid, Linda and I took revenge on the people from Udaipur by tipping bucket loads of water over every man who passed beneath our balcony for the rest of the afternoon.

We were six 18 year olds, who had just finished school, and had decided to fill a summer before starting university with a few months in Tanzania, back at Uru where some of us had visited two years before.  We lived together in a lovely old coffee estate house that had been renovated by some teachers from our school and the people of Uru, to house exchange students visiting from Cumbria.

Starting with the nearest shacks we hunted for any kind of booze, but with no luck we had to look further afield.  Normally we stuck pretty close to the house, or in the direction of Kilimanjaro’s summit, but that night we found ourselves heading downhill, out of our normal comfort zone.  It was late by Tanzanian standards, and store after store was closed.  By store I mean a hastily constructed wooden shack, roughly the size of an outhouse, with a small window through which to buy Sportsman cigarettes, Blue Omo washing powder, Lux soap bars, toffeed popcorn, or peanuts in a bag sealed shut over a candle.

Down we went, following the muddy track, stepping over steep puddle filled canyons, building up a platform sole of mud on our shoes.  The road curved around eventually to follow the contours of the mountain, and we came to a collection of houses lit with fluorescent beams and centred around what looked like a shop.  I wandered into the compound, and was quickly startled by a large barking and a small furry figure hurtling towards me from one of the houses.  It crashed into my right knee, hitting the top of my calf with bared teeth.  I screamed in terror, and more lights started to come on outside the houses.  Out of a dark doorway came a figure wearing a captain’s hat.  He smiled broadly, and asked me what I was doing there.

“Well, I was looking for Konyagi, but your dog just bit me”.

“I have Konyagi in my shop, but it is closed.  I’ll get my keys”.

Moments later he invited me into his shop, and lit it with an electric light.

“My name is Honest John Kilayo” he said, and proceeded to tell me about his family, his shop, his friends, and showed me many photographs, as a Chagga is wont to do, even when woken late at night.  In the photographs was a friend who I recognised as being from a previous exchange visit, four years ago, perhaps when Honest John had been at school.

He opened beer’s for us and himself, and we talked while we drank.  I paid for a bottle of Konyagi, and reminded him that his dog had bitten me.

“Come back any time” he said.  He turned the page of his photo collection to show a scene of him standing proudly in his shop, immaculately stacked with goods, holding a beer in an outstreched hand, the captain’s hat on his head.  ”The day I opened the shop”.  He turned the page.  The next picture showed him lying on the floor surrounded by empty beer bottles and the contents of the shop strewn all around.  ”We had a party when we opened” he told me.  ”My father is going to let me manage his other shop in Moshi after this one.”  More beer came, and we drank it, then, mission fulfilled, it was time to leave.

That night, as we staggered back up the muddle track, the realisation that I had been bitten by a dog in Africa started to settle in the foreground of my thoughts.  I had been reading avidly a book of tropical diseases, and knew about the risks of Rabies.  I started to sweat as I dwelt on it more.  Back at the house I tore my trousters off to check the wound.  There was no visible damage, but I could still feel the pinch of the dogs teeth.  The more I thought of it, the more it tingled.  Since the tropical diseases book said so, I scrubbed the site of the bite with a soapy nail brush.  The seeds of a terrible fear were sown, but at least we had something to mix with our tonic water that night.

My friend Andrew, teacher Pam and headmaster Roger were still in the car.  I wasn’t thinking much about them.  I was focussed on making myself visible to passing traffic.  That felt to me something that might reduce the chances of something bad happening.

We were all in Dar es Salaam to pick up a Land Rover.  Back in Cumbria we had organised concerts, ran half marathons and gathered sponsorship to buy this Land Rover, put it in a container and ship it to Tanzania.  It was to be donated to Uru Secondary School, a school high on the slopes of Kilimanjaro, with which my school had a recently established link.  We were visiting the school for a month.  Andrew and I had volunteered to join the Land Rover collecting party on its trip to Dar es Salaam.  As well as Andrew, myself and the two teachers, there was Macha, the head of the board of Governors of Uru School, and McDonald Lemge , a pale skinned African with scottish roots – the chair of the local council in Moshi.

We’d set off at dawn from Uru in Lemge’s Land Rover, bumping down the most corrugated road I’d ever experienced – there seemed to be more hole than tarmac.  The narrow back seat I had eagerly claimed had turned out the least comfortable, with luggage and myself sliding around and flung into the air with each major bump.  I hid behind my walkman, and watched the alien landscape of mountains and plains roll past. After about 18 hours of driving, we started to hit traffic and better roads, and knew we were in Dar es Salaam.

The next day we recovered from the long drive, sunning ourselves on Oyster Bay beach. While the four wazungu chilled out, Macha and Lemge were busy making the most of the situation, and through contacts organised for us all to have dinner that evening with Mrema, the Vice Prime Minister of Tanzania.

In 1991, school exchanges between the UK and Africa were less common than today. Our presence had captured the attention of many people – we’d been dining as minor VIPs for much of the trip so far, although that often meant dining on blood soup and getting the finer cuts of meat such as heart, which wasn’t quite how we imagined VIPs were treated in the UK. To be invited to have dinner with one of the leading politicians in the country seemed a step up.

That evening we climbed back into Lemge’s Land Rover, and headed back out towards Oyster Bay to Mrema’s house, flood lit by fluorescent tubes and fenced off with metal gates and concrete walls topped with broken glass.

Mrema

Mrema welcomed us into his home, much like that of other well to do Tanzanians. Family portraits glowered down on us. A child played with a remote control monster truck, then was quickly ushered away to bed. Mrema sat us down in his living room around a long coffee table. He sat at one end, and at the other was a large television which he barely looked away from during the audience. On the screen played a long series of trailers for Bollywood movies. I became accustomed to the plots. Boy meets girl. Boy and girl dance around trees in a forest, miming to shrill music. Girl is kidnapped by bald moustached villain in a hot air balloon. In seeking girl, boy participates in a number of elaborate dance routines in neon lit night clubs with a multitude of well choreographed extras. Boy find villain and takes extraordinarily violent revenge. Girl is rescued and dances with boy into the sunset accompanied by an even vaster dancing crowd.

Whilst engrossed in the series of vignettes, Roger and Pam were making small talk with Mrema about the purpose and values of the link. I got the feeling that, like me, the video was more interesting than this. Macha and Lemge had more pertinent matters to discuss – I later learnt they took the opportunity to stick the knife into some competitors back in Moshi.

Food was brought to the table – many plates of greens, ugale, meat stews, beans and stewed bananas. Towards the end of the feast, Marema introduced us to the servant who had been dishing this out – “This is my wife”.

The evening wound up. Mrema was probably ready to the move from the trailers to the main feature. Macha and Lemge had somehow already left in Lemge’s Land Rover leaving us with no vehicle. “My drive will take you back to your hotel”

Which is how we ended up in the Vice Prime Minister of Tanzania’s car.

As we drove back towards the centre of town, through the upper middle class suburbs, we reflected on the evening. None of us had been terribly impressed. I don’t know what we should have expected, but the nameless introduction to Mrema’s wife, the videos, and the conversation that had gone well over my 16 year old head had left us all with varying levels of culture shock, and we chit chatted on all aspects of our disappointment.

And suddenly, the drive pulled over, and said in perfect English “I’ll just be a moment” and jumped out of the car and ran into the darkness. Moments later, a large truck pulled up in front, The back of the truck was lined with soldiers, each with a large rifle slung over a shoulder. Roger said “I didn’t think he spoke English” and we all quickly regretted our idle talk. My imagination accelerated.

We are in the Vice Prime Minister’s car. Despite just possibly insulting him in front of his driver, those soldiers weren’t going to punish us. But why were they there? A coup in the night. Mistake identity. At this point I jumped out of the car myself, and made back towards the main road where traffic whizzed past. Andrew looked out at me incredulously. Roger looked green. Pam looked embarrassed. My heart thumped in my chest. I looked to the faces in the passing cars – please remember you saw me.

A few moments later, the driver returned and got back in. I sauntered back, and got in. “What were you doing?” someone asked. “I needed to get some air.”

Thinking back, we had stopped at a checkpoint, of which there were many at the time. The Vice Prime Minister’s car couldn’t just breeze through unannounced. The driver was just letting the check point know what was going on. But in my mind it had been a close call with accidental assassination, and on returning to Uru I regailed my companions with the story.

The experience spoiled me for the whole VIP experience, and a week or so later, I turned down the opportunity to have dinner with Julius Nyerere, preferring to build a barbecue pit – something I regret to this day.

A couple of weeks later, the Land Rover arrived at Uru Secondary School.  It was symbolically delivered by Mrema.  Whilst videoing this event, I had to jump out of the way as Mrema drove into the school yard to a thousand applauding Chagga.

It will also give me an excuse to pour over old photographs, and maybe I’ll get round to buying a scanner, and getting some of the really old ones up.

And maybe, just maybe, I’ll improve my writing.

There are a lot of places in Sharepoint where you can assign permissions.  This is intended as a summary of where administrative level permissions can be assigned.

Site Collection Users and Groups

This is set per site collection.  Super user and regular user permissions to children of the site collection are set here.  These permissions can be inherited by an site collection child, including sub-sites.  Giving a user Full Control here does not give Site Collection Admin level control as might be assumed, but does give enough functionality for many things.

Site Collection Administrators

This can be set through the Site Collection Site Settings if you are already a Site Collection Administrator, or owner or secondary contact – i.e. existing site collection administators can add other people.  You cannot add AD groups to this list, so Site Collection Administrators must be listed individually.  Owners and Secondary Contacts are automatically Site Collection Administrators whether they are listed as such or not.

Site Collection Administrators is the highest level permission that can be given to a site collection.  A Farm Administrator does not automatically inherit this permission (but see below) but can add themselves to the a specific Site Collection’s Administrators list through Central Administration > Application management > Site Collection Administrators.

Policy for Web Application

Here you can give Site Collection Administrator type permissions to all Site Collections in a Web Application (e.g. http://division).  This can be useful for setting up admin accounts.

SSP Users and Groups

Access to some, but not all, SSP functions can be assigned via the SSP Users and groups page.

SSP Site Collection Administrators

If you are not on this list, you cannot access the Search Usage Report

SSP Web Application Policy

As for any other site collection, you can add an AD group as Site Collection Administrator by adding the group to this list.

Personalisation Services Permissions

Set up specific users who need to manage profiles and MySites in here.  You also need to set up these users under the Policy for Web Application for your MySites Web Application or they won’t be able to admin mysites fully.

Business Data Catalog Permissions

If you use these, then you need permissions in here for administration.

Central Admin Site Users and Groups

Some functionality can be given here, but mainly you will be able to see the menu, but not do anything.

Central Admin Site Site Collection Administrators

Here you get the real power over Sharepoint.

Policy for Central Admin Web Application

Again – useful for assigning admin permissions by AD group.

Phew – that is a lot of places, and possibly not an exhaustive list.  Does anyone actually need this level of granularity?  Even if that is the case, could this have been made easier through better thought out admin pages, and better labelling?  I am sure that Donald Norman and Edward Tufte would have a lot to say about Sharepoint admin!

It is somehow ironic that what inspired me about the door was that it, and the doors of the flats around it, all have large metal bars in front of them.  One day while walking past these, it struck me as awful that people living in a house should feel it necessary to protect themselves by building a cage around the entrance to their home.

It actually made me angry.  I’m not sure if this is because I felt that people had an exagerated fear of modern life in London (which I still feel), or because perhaps the city is so messed up that people have to protect themselves in this way.  I’m still not sure how I feel about that, but we had a look at the flat, and it is actually pretty nice.  And the cage means we will be able to store a few things of small value outside the front of our house, with a reasonable barrier to prevent people making off with them.

So here is the fragment of the story:

She walked down the street with speed, keys in her hands all the way from the office, ready to unlock the steel cage then each of the locks and deadbolts on the door.  Were she stopped by a miscreant, the keys would double as an improvised but effective weapon, stabbing at they eyes and face.  Her other hand wrapped around a cigarette lighter in her pocket, loading her fist.  She had stuck coins between her fingeers in that fist, forming an efffective knuckleduste, although she had no idea if she could punch someone if it actually came to that.

At this time of year the days ended early – she hated the darkness and the cold.  So hard to see people, so many more shadows for lurking in.  The cold brought hoods and hats, concealers of facial expressions and intent.  Large coats hiding weapons more formidable than her own.  Steam rising from mouths like dragon’s caves.  The one solace of winter was that the young men didn’t congregate as much as in summer.  The cold discouraged the threat from lingering outside.

The broad street was well lit with a soulless yellow glow that gave a papery sheen to the skin.  Cars passed regularly.  Shops provided refuge, although they were the most frequent starting points for being followed.

Were those steps behind her getting faster? Closer?

Her route was carefully selected not for speed but for defense.  A faster route would have taken her through the housing estate.  She had heard the police considered some estates “no go” areas.  Drug dealers often fought there and it was only a matter of time before an innicent was caught in the cross-fire.  She longed for the promotion that could take her far from the cul-de-sacs, broken front gates, motor cycles with rotting flat tyres, children of broken marriages.

For now she skirted the edges, for ever heading outwards, but with an eye to what might lie within.  Worst of all were the underpasses, a network of tunnels linked to the centre of a roundabout, which the traffic whizzed around unaware of the no mans land within.  Pedestrians were herded in by barriers at every point where crossing the road would be the path of least resistance.  At each entry point were two paths leading down to the tunnels – one with steps, the other a long hairpinned ramp for wheelchairs and prams, and those who couldn’t handle the steps.  This offered a choice, and she had often selected the least efficient on in order to establish if the person behind was tailing her.

That these tunnels were dangerous, threatening places was self evident.  The architects and included fish eye mirrors at each bend so walkers could see if anyone was lurking around the corner.

Someone had somehow burnt the mirrors to a rusty brown colour.  They no longer shed light on who was lying in wait.

Best to just walk calmly and confidently, with speed and certainty, past anyone that might be in there.  They were cowards really unwilling to take a risk on those who seemed sure of themselves.