User Profile Service Application – Stuck on starting [How to troubleshoot]
Updated: Apr 11
You must run the UPA Service Instance as the Farm Account.
Farm Account must be a local administrator of the machine running the UPA Service Instance during provisioning only.
Farm Account must have Log on Locally rights.
The Synchronization Connection Account must have Replicating Directory Changes.
Stop User profile service and User profile sync service on ALL sharepoint servers in the farm
Clear timer config cache by following the “resolution” documented at http://support.microsoft.com/kb/939308
Delete the Pending timer job related to the UPA sync service provisioning using Central administration->Monitoring->check job status
Confirm that the security token service has only windows and anonymous enabled ( from IIS manager->Sharepoint werb services->Security tocken service->Authentication (under IIS))
On the SharePoint server access the registry editor and confirm that the information related to FIM ( database servername , sync DB name etc ) are properly populated, if found wrong , back up the registry key and edit the values to reflect the right information. HKLM\system\currentcontrolset001\services\FIMservice HKLM\system\currentcontrolset002\services\FIMservice HKLM\system\currentcontrolset\services\FIMservice
Delete all FIM related certificates from certificate store ( for account and system) . Make sure that no FIM related certificate are listed in any folders when looking at certificate manager.
From Central administration->Application managment->Manage service application, Make sure the User profile service application and its proxy are started. If found stopped, its always recommended to recreate them taking necessary backups (mysites)
Start User profile service on the machine where yoiu would like to start the User profile sync service (use central administration console)
Once the service is started, try starting the User profile sync service from the central administration site