You cannot limit the People Picker on the site-collection level to find only users in a specific organization unit (OU) in a trusted domain in a SharePoint site

Article translations Article translations
Article ID: 967612 - View products that this article applies to.
Expand all | Collapse all

Symptoms

You want to limit the People Picker control on the site-collection level to find users in a specific organization unit (OU) in a trusted domain. However, you cannot use the stsadm -o setsiteuseraccountdirectorypath command to work with OUs from a trusted domain. You can use the stsadm -o setsiteuseraccountdirectorypath command only when the OU is from the same domain where the Microsoft Office SharePoint Sever (MOSS) 2007 farm is installed.

Resolution

To resolve this issue, install the hotfix package that is described in the following Microsoft Knowledge Base article:
961750 Description of the Windows SharePoint Services 3.0 hotfix package (Sts.msp): February 24, 2009
After you install this hotfix, follow these steps to enable LDAP referral chasing for trusted domains. This makes sure that the stsadm -o setsiteuseraccountdirectorypath command to work with OUs from a trusted domain:
  1. Visit the following Microsoft Web site to download Windows PowerShell:
    http://www.microsoft.com/windowsserver2003/technologies/management/powershell/default.mspx
  2. Install and then start Windows PowerShell.
  3. In Windows PowerShell, run the following command to set the new PeoplePickerSettings.ReferralChasingOption property and to enable the new behavior on a Web application.
    [Reflection.Assembly]::Load("Microsoft.SharePoint, Version=12.0.0.0, Culture=neutral, PublicKeyToken=71e9bce111e9429c") 
    [Reflection.Assembly]::Load("System.DirectoryServices, Version=1.0.5000.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a")
    $webapp=[Microsoft.SharePoint.Administration.SPWebApplication]::Lookup("http://webapp") 
    $webapp.PeoplePickerSettings.ReferralChasingOption =  [System.DirectoryServices.ReferralChasingOption]::All; 
    $webapp.Update(); 
    
    
Steps required to make it to work in Sharepoint 2010

1. No hotfix needs to be installed as it is built in Sharepoint 2010 RTM

2. Following commands need to be run from SharePoint Management Shell

[Reflection.Assembly]::Loadwithpartialname("System.DirectoryServices")
$webapp=[Microsoft.SharePoint.Administration.SPWebApplication]::Lookup("http://webapp")
$webapp.PeoplePickerSettings.ReferralChasingOption = [System.DirectoryServices.ReferralChasingOption]::All;
$webapp.Update();

Properties

Article ID: 967612 - Last Review: October 25, 2012 - Revision: 5.0
Applies to
  • Microsoft Windows SharePoint Services 3.0
  • Microsoft Office SharePoint Server 2007
Keywords: 
kbexpertiseinter kbqfe kbfix kbsurveynew kbprb KB967612

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com