![]()
| | | |
| Applies To | | |
| | | |
| Product(s): | ProjectWise User Synchronization Service | |
| Version(s): | All | |
| Environment: | N/A | |
| Area: | N/A | |
| Subarea: | N/A | |
| Original Author: | Bentley Technical Support Group | |
| | | |
Overview
The ProjectWise User Synchronization Service (USS) is used to synchronize ProjectWise user and group accounts with Windows user and group accounts. This allows users to log into ProjectWise using the same username and password that they use to log in to Windows.
We will look at a few areas in configuring the ProjectWise Synchronization Service, including Trust, Permission, and ProjectWise Administration.
Troubleshooting:
Trust
ProjectWise requires there to be a two way trust when the ProjectWise Integration and USS servers are in one domain and the users ‘live’ in another domain in Active Directory. Make sure there is a two way trust between domains.
Permission
On the Integration Server, go to services: the synchronization service 'logon user' must be a domain user and be able to enumerate users on each domain.
- Make sure this user has 'log on as a service' rights on the computer running the USS. (We usually use a domain admin.)
- If you had to change the user name or password, you need to uninstall the service, then reinstall and input the user name and changed password. (This information gets set in the registry during the install.)
Administration
If your ProjectWise USS stops working, first check the services on the Server (typically the Integration Server) and ensure that the ProjectWise USS is running.
If the service appears to be running, open ProjectWise Administrator.
- In your data source, go to the Windows Security System node and right click User Synchronization Service, and select Properties. When the dialog opens you should see the name of the Computer that the User Synchronization Service is on.
![]()
- Highlight and delete all entries (do not highlight and retype). Make sure you have the correct information before deleting the current entries.
- Retype the computer name where USS resides. In some cases we have seen browsing to the Server may not work and you can’t find the Server name. If this is the case, type in the name of the computer that has the USS running. (Example: \\myserver)
- Retype the ProjectWise username and password. The main ProjectWise Admin account. (Not the service account and not a user account with “admin rights”).
- Restart the USS services.
- From the ProjectWise Administrator, execute User Synchronization. Go to the Windows Security System node and right click User Synchronization Service, then select Synchronize Accounts
** If none of the above resolves the problem please configure logging by doing the following:
- Go to the drive that USS is installed on.
- On a Windows 2008 Server go to .. \Program Files (x86)\Bentley\ProjectWise\bin and open the usersync.log.xml file in notepad.
- Change all priority values = "warn" to "all". Save the file, then stop and restart the synchronization service.
- Execute a "synchronize accounts". Wait a few minutes for the log to generate. The usersync.log file is located under C:\Users\Public\Bentley\Logs directory and is called usersync.log.
- Open the usersync. log with notepad and do a search for “Unique constraint violated” (without the quotes)You will likely find a line that looks similar to this:
User group issue
2014-02-19 15:22:03,761 ERROR [0x00000000] pwise.usersync - Failed to create user group 'MyDomain\MyGroup[MyDatasource://MyDomain.com/DC=us/OU=company/OU=MySection/CN=MyGroup] [S-1-2-12-123456-123456789-123456789-12345]' in the datasource 'PROJECTWISE.mydomain.com:PWdatasource'. Unique constraint violated
User issue
2014-02-19 15:22:04,856 ERROR [0x00000000] pwise.usersync - Failed to create user 'MyDomain\MyUser [MyDatasource://MyDomain.com/DC=us/OU=company/OU=MySection/OU=MyGroup] /CN=MyUser] [AD:S-1-2-12-123456-123456789-123456789-12345]' in the datasource 'PROJECTWISE.mydomain.com:PWdatasource'. Unique constraint violated
Follow the instructions below to fix the user and groups that are listed in these lines.
What if only one user has a problem or several random users are not being synchronized?
Typically there is a lost SID or the user was created in ProjectWise with a SID that no longer matches the SID in Active Directory.
- In PW Admin, go to the User Account Properties.
- On the General tab, under Security, switch the account type from window-synchronized to windows
- Run user synch.
- Go back to the user account and switch back to Windows-synchronized.
- Run the User Synch again.
If you have several users or groups you can highlight them all, go to properties and make the changes as directed above.
![]()
Switching the user to “windows” and then back to “windows synchronized” should flush and recreate the user SID.