Enabling Audit Logs in SharePoint Online

You can enable audit logs at Site Collection level in SharePoint Online.

Go to Site Settings >> Site Collection Administration >> Site collection audit settings

Automatically trim the audit log for this site is Yes by default and grayed out.

You can choose the number of days between 1-90.

Path of the default Maintenance Log Library. [_catalogs/MaintenanceLogs]

https://spdevonline.sharepoint.com/_catalogs/MaintenanceLogs/Forms/AllItems.aspx

Customize SharePoint Online Sign-in Page

Customize SharePoint Online Sign-in Page

In SharePoint Online you can brand your own sign-in page using the Azure Active Directory (AD) subscription that is included with your Office 365 subscription from the Azure AD thru the Admin Centers.

You can directly go to https://portal.azure.com/ if you already have access.

Click on Azure Active Directory, select Company Branding then Edit.

Below are the options you should be able to update.

1. Sign-in page background image
2. The banner logo
3. User name hint
4. Sign-in page Text

Under Advanced settings, you have 4 more options

1. Sign-in page background color
2. Square logo image
3. Square logo image, dark theme
4. Show option to remain signed in

Save the page once completed.

Below are the updated Options.

OneDrive is not provisioned for this user

Case: OneDrive is not provisioned for this user

Solution: We have two scenarios for accessing OneDrive.

1. Login thru the Client installed with Office Pro plus, which creates a local OneDrive Folder.
2. Login thru the Web, creates a personal site under SharePoint 'My Sites' Site Collection.

Both are interdependent. Because Sync of Items plays a key role.

Though, you install OneDrive Client and try to login, you cannot login because you are not provisioned to create Personal Site. If you click on OneDrive icon in web, it may re-direct to Delve (https://delve.office.com/).

Enable "Create Personal Site" option.

Go to SharePoint admin center >> user profiles >> Manage User Permissions

Note: We can also include specific groups, if not needed for Everyone.

After enabling the above Permissions, You should be able to login into the OneDrive with your Office Account and also Personal Account.

1. Login with Office Account creates a OneDrive folder with Tenant Name

2. Go to OneDrive Try Icon and right click on it to get the below screen.

Click on Settings >> Account tab. Click on 'Add an account' to add you Personal Microsoft Account. 

It creates a folder with Personal (as shown below)

Startup activity will be created in Windows to take care of the Sync Activity.

Icons missing in Office 365 portal

Issue: We were using Office 365 Enterprise E5 Trial. Later got Office 365 Enterprise E3. Once the E5 Trial was expired, the icons got disappeared. Specifically, Word, Excel, One Drive and SharePoint. Tested on IE and Chrome browsers and with peers computers and all the same. Surprisingly this happened to all users.

They even got disappeared from my apps page also https://portal.office.com/myapps

Want to get them back....?

Solution: Surprisingly the solution is in SharePoint admin center.

Please go to SharePoint admin center >> settings >> Show or hide options to make sure OneDrive for Business and sites are selected as Show.

Hooray..........They all are back.

Check Out & Open message while opening PDF

To avoid getting this annoying message while you click on a PDF file in SharePoint, please try the below step.

Please disable "Adobe Acrobat Sharepoint OpenDocuments Component" Add-on in the Internet Explorer.

When you click on the PDF file, the PDF should open in the Browser. Please make sure the below add-on is enabled.

Define Managed Paths in O365 SharePoint

Define Managed Paths option which is available in SharePoint 2007, SharePoint 2010, SharePoint 2013 is not available in O365 SharePoint, SharePoint Online, because we get a Site Collection and proceed from there.

Define Managed paths in SharePoint 2007

Define Managed paths in SharePoint 2010

Define Managed paths in SharePoint 2013

Account lockout with Worker Processes (w3wp.exe)

Jun  01 10:50:00 TRDC1.OU.SP.COM/11.1.9.56/111.99.228.36 MSWinEventLog,4,Security,37482936,Fri Jun 01 10:50:20 2017,4740,Microsoft-Windows-Security-Auditing,SPDEVAPP1\SPFarm,N/A,Success Audit,TRDC1.OU.SP.COM,User Account Management,,A user account was locked out.    Subject:   Security ID:  S-1-5-18   Account Name:  TRDC1$   Account Domain:  NT   Logon ID:  0x9g8    Account That Was Locked Out:   Security ID:  S-1-5-21-787380144-786785121-371256054-14454   Account Name:  SPFarm    Additional Information:   Caller Computer Name: SPDEVAPP1,37363918

We see log on the Domain Controller that SPFarm account was locked out. No clue what is going on.

Install the below Process Monitor (Microsoft Free Tool)
https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx

This tool lets you to go thru the process monitor to get more details about the Account Lockout.

Once you identify the Process Monitor log related to the Account lockout, open Windows Task Manager and add PID (Process Identifier) in the Processes tab.

C:\Windows\system32>tasklist /FI "PID eq 5580" /FI "USERNAME eq spfarm"

C:\Windows\system32>cd inetsrv

To pick the right w3wp.exe among Multiple Worker processes

C:\Windows\System32\inetsrv>appcmd list wp
WP "6064" (applicationPool:e57375f456e1238c9bcf287fe1fd6234)
WP "5284" (applicationPool:SecurityTokenServiceApplicationPool)
WP "5136" (applicationPool:dab94fcb5f6e4bc4be4f9123426cf456)
WP "7684" (applicationPool:4543drad11234cf087f51c04f1671234)
WP "5580" (applicationPool:90123851e0a1470093450b2d67b2bc73)
WP "696" (applicationPool:9fb84a123c7c4123b70eadbsd2c7adfd)

Get Worker Processes ( w3wp.exe) List : Another method

To get list of running  worker process, Open IIS Manager ( Run > Inetmgr ), Select root level from left site navigation tree and from “Features View Panel” select “Worker Processes”

Click on the “Worker Processes” to get details of all worker process which are currently running as shown in below.

The Account SPFarm was getting locked with the App Pool with PID 5580. Updated the App Pool with different account and monitored for a couple of days. Everything is fine now.

Delete a service application (SharePoint 2010)

Removing the SharePoint 2010 Service application can become quite a pain when the removal hasn’t work out the way it should have or when it is corrupted.

In my case I am trying to remove the Corrupted Search Service Application.

1. I tried removing thru Central Admin. It took time and got timed out. No Luck.
2. Tried to remove using Powershell script, no luck.

$spapp = Get-SPServiceApplication -Name "Search Service Application"

Remove-SPServiceApplication $spapp -RemoveData

3. Finally tried the STSADM command, Yeah...it worked!!!

STSADM.EXE -o deleteconfigurationobject -id "b90b7108-b808-4186-8d86-1ed1da72f3d0"


NOTE: Please Open the Powershell with "Run as Administrator"

PDF Files Issue in SharePoint 2010

In SharePoint 2010 document libraries, the PDF’s that have been uploaded do not show the correct icon and only give you the option to save instead of opening them.

The below PowerShell script downloads a icon GIF image from Adobe named pdficon_small.gif, places it in the images folder under the 14 hive, associates it in the DOCICON.XML file, sets Browser File Handling to Permissive, and then runs IISReset.

PowerShell

$14 = "C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14"

$src = "http://www.adobe.com/images/pdficon_small.gif"

$dst = $14 + "\TEMPLATE\IMAGES\pdficon_small.gif"

$webClient = New-Object System.Net.WebClient

$webClient.DownloadFile($src, $dst)

$xml = New-Object XML

$xml.Load($14 + "\TEMPLATE\XML\DOCICON.XML")

$icoAsn = $xml.CreateElement('Mapping')

$icoAsn.SetAttribute('Key','pdf')

$icoAsn.SetAttribute("Value","pdficon_small.gif")

$icoAsn.SetAttribute("Open Control","SharePoint.OpenDocuments")

$xml.DocIcons.ByExtension.AppendChild($icoAsn)

$xml.save($14 + "\TEMPLATE\XML\DOCICON.XML")

Add-PSSnapin Microsoft.SharePoint.PowerShell

Get-SPWebApplication | ForEach-Object {$_.BrowserFileHandling = “Permissive”; $_.update()}

iisreset

                                           The pdf icon was downloaded to the IMAGES folder.

             The PDF Key was added to the DocIcon.XML with this PDF GIF image icon file.

Browser File Handling to "Permissive" will enable the PDF’s to be opened instead of only saved. 

PDF docs now have the correct icon and are allowed to be opened.

Microsoft KB Article related to PDF Issue in SharePoint.
________________________________________________________________________

We can also enable opening PDF files is by adding the pdf extension to the allowed MIME types of the web application.

VIEW

$webApp = Get-SPWebApplication "http://sp2010dev/"

$webApp.AllowedInlineDownloadedMimeTypes

ADD

$webApp = Get-SPWebApplication "http://sp2010dev/"

$webApp.AllowedInlineDownloadedMimeTypes.Add("application/pdf")

$webApp.Update()

REMOVE

$webApp = Get-SPWebApplication "http://sp2010dev/"

$webApp.AllowedInlineDownloadedMimeTypes.Remove("application/pdf")

$webApp.Update()

SSL Certificate Update

In SharePoint, IIS is the only place where the SSL Certificate needs to be uploaded and attached to the Site in the Site Bindings.

1. Click on the root node in IIS 7 Manager and select the “Server Certificates” icon in the feature pane on the right, you should Import your Cert here.



2. Enter a name (I’m using company.com in this example) and click OK. You should see your certificate appear in the list of server certificates.



3. Select the IIS site that is running the SharePoint application and click on the “Bindings…” link on the right hand side of the page.

4. To enable SSL click “Add”, select “https” and select the SSL certificate we created earlier:



5. Click OK. At this point we have configured IIS to allow connections to this site over SSL but we need to let SharePoint know to map these requests to the correct web application.

Configure SharePoint to accept requests over HTTPS

6. Navigate to Central Administration > Operations, select “Alternate Access Mappings” and click “Edit Public URL’s”


7. Select the Alternate Access Mapping Collection for the FBA web application and enter the relevant HTTPS address (e.g. My FBA site is located at http://www.company.com as an example so I would enter https://www.company.com). It is up to you which Zone you put the URL in as this doesn’t affect anything and is just there to help you remember what they are each used for.

Sometimes, even after the SSL Certificate is updated properly and the old Certificates are deleted, it will still be showing the OLD SSL Cert and may cause issues.

We should run the below Commands to make the NEW SSL Cert get updated.

• 1. Issue an iisreset /stop command
• 2. Then type net stop http followed by net start http
• 3. Issue an iisreset /start command

Even though you ran the above Commands sometimes, site will not be accessible. Verify the below option of the specific Web Site and make sure it is set to 'Ignore'. Don't forget to reset IIS, if the below option is modified.