Comments on: Configuring SharePoint 2010 Search in a one-way trust scenario

By: widget76

widget76 — Wed, 07 Dec 2011 17:29:00 +0000

You don’t need managed accoutns, just use the old good STSADM with peoplepicker and searchadforests…

By: Tyler Cranston

Tyler Cranston — Fri, 02 Dec 2011 23:49:00 +0000

This problem has now been identified by Microsoft and a resolution is listed here: http://support.microsoft.com/kb/2344518

By: SharePoint Search – AuthzInitializeContextFromSid failed » Andy Burns’ SharePoint Blog

Fri, 08 Apr 2011 13:19:24 +0000

[...] I found a post from Matt Stratton where he mentions this being a problem in a one-way trust between domains scenario. And I found others describing the the same – repeatedly - and so changing their search [...]

By: Nibbel

Nibbel — Fri, 28 Jan 2011 13:14:00 +0000

Hi Matt, thx for this. Its sounds like my problem here.
I have SP Foundation 2010 on a Server 2008 Standard (not R2). The Domain came over an samba server, not an AD. I can search with local users on the SP Server but Domain users cant find anything..
I have followed your text and try
$cred = Get-Credential
I gave the right informations in the cred-window (user: DOMAINUSER, Password: ) and i try to add the domain account
New-SPManagedAccount -Credential $cred
but it says
New-SPManagedAccount : The value for {0}-Parameter is not supported..

+ New-SPManagedAccount <<<< -Credential $cred
+ CategoryInfo : InvalidData: (Microsoft.Share…wManagedAccount:
SPCmdletNewManagedAccount) [New-SPManagedAccount], ArgumentException
+ FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletNewManag
edAccount

I cant add the Domainuser account as an managed account and so I cant search with an domain user on this SP server :(
Any Ideas?

I have a look on the KB, but I think its a problem.. I have Foundation, not Server.. no CMDlet "Get-SPEnterpriseSearchServiceApplication"

By: Henrik

Henrik — Fri, 21 Jan 2011 09:53:00 +0000

This KB can also be used to overcome this obstacle:
http://support.microsoft.com/kb/2344518

By: Paul

Paul — Thu, 09 Dec 2010 12:08:00 +0000

Thank You Matt! Very helpful. I didn’t have exactly the same problem but it solved the issue i was having!

By: Satheesh

Satheesh — Wed, 20 Oct 2010 08:21:02 +0000

Canete,

Run the SharePoint Management Shell using a account which is part of user domain. to make sure that account is able to access sharepoint, add that account as Farm account. Then execute this powershell script.

By: Canete

Canete — Mon, 18 Oct 2010 18:24:04 +0000

Satheesh, how did you get it to work? Can you provide the PowerShell commands that you use?

Thank you

By: Canete

Canete — Mon, 18 Oct 2010 17:11:33 +0000

Matt, can you please explain how you got this to work? It would really help if you could provide examples of the PowerShell commands that you used.

Thanks again.

By: Canete

Canete — Mon, 18 Oct 2010 16:20:10 +0000

I’m having the same issue. When I try to add the new managed acoount using the following PowerShell commands:

$cred = Get-Credential -Credential Domain\UserX
New-SPManagedAccount -Credential $cred

I get the following error:
New-SPManagedAccount : An error occurred while getting information about the user UserX at server Domain: Access is denied
At line:1 char:21
+ New-SPManagedAccount <<<< -Credential $cred
+ CategoryInfo : InvalidData: (Microsoft.Share…wManagedAccount:
SPCmdletNewManagedAccount) [New-SPManagedAccount], InvalidOperationExcepti
on
+ FullyQualifiedErrorId : Microsoft.SharePoint.PowerShell.SPCmdletNewManag
edAccount

Is there anything that I'm missing here?

Thank you