Applies To: SharePoint
We recently upgraded to SharePoint 2010. Things went relatively smoothly, but we began to experience problems with some of our Office users. I looked everywhere but I couldn’t find anything that described our problem perfectly or that provided a solution. So here is the guide I wish we’d had before we called Microsoft Support.
Symptoms:
Windows 7/Vista machines had missing/broken links to the sites within the SharePoint Sites library on their machine. These were all users with MySites most of whom had had no problem opening and saving documents directly within Office to SharePoint 2007. This was affecting both Office 2007 and Office 2010 users.
The Save/Open dialog showing a normal SharePoint Sites Library
Sometimes there was a MySite link, sometimes just a Member Sites folder, sometimes neither and sometimes various levels of Member Sites with the wrong type of Icon (Not like shown above). Some users could connect fine although it was very slow, others would have some very strange issues.
In addition to constantly asking for authentication or telling them access was denied to their own MySite, there were users who seemed to be saving their documents nowhere. Checking the Upload Center would show they did save them but not as expected.
For instance, one guy added his personal documents library to Office using the Connect To Office button on the SharePoint Ribbon. Trying to save a word document he double clicked on this link within the SharePoint Sites Library and everything saved. Further investigation with SharePoint Designer showed that their was a word document at his MySite root named PersonalDocuments.aspx.doc!
Obviously these links were broken. Sometimes they were gone from one day to the next and this was causing a lot of frustration. We tried messing with the registry entries, checking our version of Office, verifying access was setup correctly and finally gave up and called Microsoft Support.
Our Environment:
We had had a SharePoint 2007 farm using Windows Authentication. We built a new SharePoint 2010 farm and used the Database Attach upgrade approach. The new farm was built to use Kerberos authentication. When everything was good to go we switched the DNS entries to the new farm and voila, everything worked! (Obviously excluding the weird Office problems).
Our clients are mostly XP machines running Office 2007 – these had no issue. The Windows 7 clients running both Office 2007 and Office 2010 began experiencing the problems even though everything worked fine with SharePoint 2007.
Our DNS entry for SharePoint was set to the FQDN (ie sharepoint.something.something). Although alternate access mapping was setup for just the sharepoint portion, the FQDN is the only public url. This turned out to be the problem.
The Cause of the Problem:
The solution was found in this Microsoft Support article: Prompt for Credentials When Accessing FQDN Sites From a Windows Vista or Windows 7 Computer
In summary, the Web Client service uses Windows HTTP Services (WinHTTP) to do network operations behind the scenes (including requesting the list of Member Sites and MySite urls to update your SharePoint Sites Library). WinHTTP only sends user credentials in response to requests that occur on a local intranet site.
So just add your site to the Trusted Sites list and you’re done! Just kidding, that’s far too easy! WinHTTP does NOT use the security zone settings in Internet Explorer to determine if it should send the credentials. Instead it uses some pretty basic logic:
Are there any periods in the server’s name?
Nope: must be local – send them credentials!
Yes: Eeeek! Evil Internet, no credentials for you!
So if you happen to be using a FQDN or anything else with periods in the address, unless you’ve setup a local (no perioded(?)) proxy, no authentication is gonna happen which is pretty problematic for nearly every use case in SharePoint.
A hotfix is available for Vista and was included in Windows 7. But the hotfix doesn’t fix the logic nor does it start using the security zone definitions from your internet options. It provides a registry configuration of trusted sites (see solution below).
Testing the Problem:
Office only requests this list of sites/libraries once every 24 hours or so based on a registry key. However, following the steps below you can get it to make the request(s) again. In order to watch them, download and install Fiddler. You should be able to see all the requests as it makes them.
Close all Office programs (including Outlook)
Using RegEdit, delete the LinkPublishingTimestamp registry key.
HKEY_CURRENT_USER\Software\AppDataLow\Microsoft\Office\14.0\Common\Portal\LinkPublishingTimestampWindows
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Portal\LinkPublishingTimestamp
If you are using Office 2007, just replace the 14.0 used above with 12.0
Restart the Web Client service using the Services console (Administrator Tools > Services or Run services.msc)
Open Word and choose Save As (It may take a few minutes to start populating).
In Fiddler you should see all or at least most of the requests receive 401 responses (unauthorized). So, let’s get it fixed.
Solution:
- Using RegEdit, navigate to the following key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters - Add a New Multi-String Vlaue (Edit > New).
- Name it AuthForwardServerList and press Enter.
- Set the value (Edit > Modify) to your FQDN. Or you can do something more comprehensive like http://*.something.something
- To verify it worked follow the steps above and see if everything updates (Or wait a day for things to recycle)
Now slap that registry setting in a Group Policy targeted at Windows 7/Vista users and you’re good to go.
Lucas
September 24, 2012 at 8:08 pm
Thanks for the sharing, it works for us, another question is whether it is possible to get the recycle timer less than 24 hours? I find some users can see the links straight away whilst some takes longer than 24 hours?
Lucas
hotmail.es crear cuenta
January 23, 2013 at 8:01 am
Hey There. I found your blog using msn. This is a very
well written article. I’ll make sure to bookmark it and return to read more of your useful information. Thanks for the post. I will certainly comeback.
acpe.edu.au
April 20, 2013 at 3:11 am
Piece of writing writing is also a fun, if you be acquainted
with after that you can write or else it is difficult to write.
car town hack download
May 3, 2013 at 2:42 am
Hello friends, how is all, and what you desire to say regarding this post, in my view
its really remarkable designed for me.
Xanax
May 7, 2013 at 8:22 pm
Your own report has established beneficial to me
personally. It’s really informative and you really are certainly quite
experienced in this field. You possess popped my eye to be able to various thoughts about this particular subject together with interesting and reliable articles.
Fausto
May 8, 2013 at 8:45 am
Believe it or not now you can make some money from some of the social networks that
we are involved in. If you have selected the wrong market, the chances
of your business being profitable will be very slim.
I consider this to be the biggest advantage
of having an internet business over other kind of business.
piensos
May 15, 2013 at 7:41 pm
Recibe saludos y muchas gracias.
http://www.fastsync.de/3dgc/userinfo.php?uid=4068
May 16, 2013 at 1:48 pm
The developers are saying that Defiance is a pixel perfect shooter,
so if you aim at your target’s head it WILL be a headshot instead of the invisible dice rolling a 5 and telling you that you somehow missed. Aside from the obvious difficulties of pitching so brilliantly in such a high pressure situation, Larsen’s feat is
even more impressive when one considers that the Dodgers had four
future Hall of Famers in their lineup: Duke Snider, Jackie Robinson, Roy Campanella and
Pee Wee Reese. t love the unself-conscious little boy or girl, the undaunted miniature
explorer who moves with unbridled enthusiasm to experience life.
Terri
May 21, 2013 at 10:18 am
Hi there, simply became alert to your blog thru Google, and found that it’s really informative.
I am gonna be careful for brussels. I’ll appreciate
in the event you continue this in future. A lot of other people shall be
benefited out of your writing. Cheers!
Matt
May 23, 2013 at 4:48 pm
THANK YOU for this page! You have no idea how long I spent bashing my head against the wall over this one. There are pleas for help on this one all over the internet, but I couldn’t find any that actually had not just a solution, but a complete explanation of the problem and why it occurs.
Sir, you rock!
radio nottingham weather
May 25, 2013 at 1:44 pm
No longer does a music lover need to bother about traveling out
of range when a fantastic song comes on over the vehicle
radio. They also apparently believe that their customers who like a particular
song they hear on the radio, are likely to purchase that song,
which could add to downloads from i – Tunes.
But mostly BBC Radios 4 and 5 because, being speech orientated,
they’re more like what I do, so I can learn lots from them.
radio vestival.pt
May 27, 2013 at 10:05 pm
You have to give a tube radio at least 20 to 30 minutes just to warm up and then
you decide what frequency you want to be on and load the
plate and tune them up. It was an entertaining radio program that played the music people wanted to hear combined with
his groovy upbeat personality. Whats more is that 2G phones can come in
a tinier and slimmer package, even its batteries.
ski holiday
May 28, 2013 at 1:47 am
Wow, this article is pleasant, my younger sister is analyzing such things,
so I am going to tell her.
radio farda musik
May 29, 2013 at 6:41 pm
Broadcast satellite “in the Star on the 9th,” was successfully launched in June last year, it
can be said is a milestone in the field of live satellite event.
It was an entertaining radio program that played the music people wanted to hear combined with his groovy upbeat personality.
Whats more is that 2G phones can come in a tinier and
slimmer package, even its batteries.
トリーバーチ キーケース
June 13, 2013 at 2:02 am
You actually make it seem so easy with your presentation but I find this matter to be actually something which I think I would never
understand. It seems too complex and very broad for me.
I am looking forward for your next post, I’ll try to get the hang of it!
radio results network marquette
June 14, 2013 at 2:41 pm
That’s like Houston Texas being without a Country station. It was an entertaining radio program that played the music people wanted to hear combined with his groovy upbeat personality. But mostly BBC Radios 4 and 5 because, being speech orientated, they’re more like what I do, so I can learn lots from
them.