[SDP 5][ 4175AE57-2F14-4FD2-9FC2-BFE7F8EE9CD8] Diagnostic SharePoint Engineer Troubleshooting Helper 2016 (SETH2016)

Summary
The Diagnostic SharePoint Engineer Troubleshooting Helper 2016 (SETH2016) manifest detects certain problematic conditions that may exist in the configuration of a server that is running Microsoft SharePoint Server 2016.

Important Problematic conditions are checked only on the server on which this manifest is run. To make sure that you have maximum coverage, we recommend that you run SETH on each server in a SharePoint farm.

This article describes the function of the SETH manifest file.

Required permissions

The rules in the diagnostic package use the SharePoint Windows PowerShell snap-in for information about your farm. Therefore, the account that is used to run the diagnostic package must be the farm account or be given the required permissions through the Add-SPShellAdmin command.

Note The farm account is the account under which the timer service and central administration site's application pool run.

Some rules in this diagnostic package must also have local server administrative permissions to use remote and local administrative tools and also to access secure system locations such as the registry. You can use the following table to reference the permissions that are required for each rule.

Permission codeDescriptionRequired permission
1Use SharePoint Windows PowerShell cmdlets to interact with the SharePoint farm.Farm administration
2Run queries against SharePoint databases.Farm administration
3Access server administrative tools.Server administrative
4Access files and other resources on the server.Server administrative
More information
This article describes the information that may be collected from a computer when you run SETH2016.

Information that is collected

Manifest results
DescriptionFile name
This file contains a clean version of the failure and of the warning conditions that are detected during the execution of the SETH manifest. The information that is included is as follows:

· MachineName: Name of the computer for which the information is being collected. (This can be changed to protect privacy before information is uploaded to Microsoft.)

· Timestamp: Date and time when the data was collected.

· RuleID: A GUID value that indicates which SETH rule was triggered. (See the rules section later in this table for more information.)

· InstanceID: A GUID that is used to identify a particular instance of a RuleID that was triggered. (You can have a rule applied multiple times on a computer and have only certain instances trigger a warning. This value will help you isolate that instance.)
{GUID}_seth_O16SP_Failures_mm_dd_yyyy_hhmm_[AM|PM].csv
This is the actual results of the SETH manifest. This is what is displayed back to the user to indicate the status of each rule that is executed.ResultReport.xml
This is the internal file that is generated as a by-product of the execution of the manifest. It contains no customer data.Results.xml
This is an xlst transform that formats the results in the ResultReport.xml file. It contains no customer data.Results.xsl
This file contains debug information that may be generated during the execution of the manifest. It also contains timings on each rule that is run. It may contain customer data. However, every attempt has been made to minimize the amount of customer data.SETH2016.O.debugreport.xml
This file contains additional debug information for the manifest execution. It may contain customer data. However, every attempt has been made to minimize the amount of customer data.Stdout.log
This file contains the environmental information for each computer in the farm. The information that is captured includes the following:

· Computer name

· Operating system name

· Last restart/uptime

· Computer model

· Processors

· Computer domain

· Role

· Operating system language

· Time zone

· Total RAM

· Drives (total and free space that is available)
%COMPUTERNAME%_cfg_%LANG%_FarmEnvironment.txt
This file contains SQL Server information from the SQL instance that hosts the SharePoint Configuration database. The information that is captured includes the following:

· ProductVersion

· ProductLevel

· Edition

· ServerName

· InstanceName

· MaxDegreeOfParallelism

· LastUpdateDate

· IsClustered

· IsFullTextInstalled

· IntegratedSecurity
%COMPUTERNAME%_cfg_%LANG%_FarmEnvironment.txt
This file contains the SharePoint information for each computer in the farm. The information that is captured includes the following:

· SharePoint Configuration Database information

· SharePoint services on server
%COMPUTERNAME%_cfg_%LANG%_O15SP_FarmInformation.txt
Captures the IIS log for computer.%COMPUTERNAME%_iis_%LANG%_O15SP_W3SVC%ID%.cab
Captures the PSCDiagnostic logs for computer.%COMPUTERNAME%_iis_%LANG%_O15SP_PSCDiagnosticLogs.cab
This file collects robust Microsoft Office inventory. The information that is captured includes the following:

· Computer information

· Office product information
%COMPUTERNAME%_roi_%LANG%_O15SP_ROIScan.log
Captures the ULS log for the computer.%COMPUTERNAME%_uls_%LANG%_O15SP_ULSLogs
This file contains information about each computer in the farm. The information enables the detection of password synchronization issues. The information that is captured includes the following:

· Computer name

· Application pool name

· User name (domain and user ID) under which the application pool runs

· A password hash for the password that is associated with the application pool user name per computer
%COMPUTERNAME%_seth_O15_PasswordSync.txt
This file collects the time zone information for each server in the farm.%COMPUTERNAME%_tz_%LANG%_TimeZoneInfo
This file collects the routing and throttling rules for Request Management for each web application.%COMPUTERNAME%_cfg_%LANG%_O15SP_RequestManagement.txt
This file collects all the SPApp and its URL and app domain server.%COMPUTERNAME%_cfg_%LANG%_O15SP_SPApp.txt
This file collects all the information about SharePoint caching. This includes Blob, Output, and Object cache.%COMPUTERNAME%_cfg_%LANG%_O15SP_SPCaching.txt
Captures the Robots.txt for computer.%COMPUTERNAME%_robots_%LANG%_O15SP_Robots.cab
This file collects the Web Application AAM and IIS Binding information.%COMPUTERNAME%_cfg_%LANG%_O15SP_WebAppBindings.txt
This is an xlst transform that formats the results in the %COMPUTERNAME%_SPSFarmReport_%LANG%_O15SP__%time%.xml file.SPSFarmReport.xslt
This file collects the SharePoint farm information. The information that is captured includes the following:

· Farm general settings

· Services on servers

· Installed products on servers

· Features on servers

· Custom solutions

· Service applications

· Web applications

· AAMs and authentication providers

· Content databases

· Content deployment
%COMPUTERNAME%_SPSFarmReport_%LANG%_O15SP__%time%.xml
This file contains a summary of the performance and capacity values for the Audit Data table. The information in this file includes the following:




· Total count of Audit Data table rows

· Size of Audit Data Table on disk

· Size of Audit Data Table on disk

· Top 10 Days by count of rows

· Top 10 Paths by count of rows
%COMPUTERNAME%_cfg_%LANG%_O15SP_AuditDataReport.txt
This file contains a summary of the All Doc Versions table. The information in this file includes the following:



· Total count of table rows

· Size of table on disk

· Size of index on disk

· Top 10 items by count of documents versions
%COMPUTERNAME%_cfg_%LANG%_O15SP_DocVersionsReport.txt
This file contains a summary of the Distributed Cache settings. The information in this file includes the following:

· Get-AFCacheClusterHealth

· Get-SPDistributedCacheClientSetting

· Get-CacheStatistics

· Get-AFCacheConfiguration

· Get-CacheHost

· Get-CacheHostConfig

· Get-AFCacheAllowedClientAccount

· Get-SPServiceApplicationPool

· Get-SPServiceInstance -TypeName Distributed Cache

· Get-SPServiceApplication -TypeName User Profile Service Application

· Get-SPServiceInstance -TypeName User Profile Service

· Get-SPTimerJob -TypeName Microsoft.Office.Server.ActivityFeed.ActivityFeedUPAJob
%COMPUTERNAME%_cfg_%LANG%_O15SP_DistributedCacheReport.txt

System logs
Rule IDTitleDescription
Basic system information
3CAE6F84-C3F5-4DB2-80D1-66C15B7BEF2EFarm environment
FB2C97D5-3681-49B8-972F-8EF0379D7F80Farm Information
1A0049DC-543D-4F73-9555-CCE314C4A463SharePoint farm report

Authentication Configuration

Rule IDTitleRequired permissionsDescription
78B579A4-E244-C0DE-DE06-9399DC13F645The permissions set on the User Information List will cause access denied to anonymous users.1, 2
DDE88E63-BD4F-4FED-8338-488F6286AEADThe anonymous access account is not set to IUSR1http://support.microsoft.com/kb/2892419
3F024330-C458-4B39-B2D2-9C4ABD1EFCD5Check SQL Service Account for delegation1http://support.microsoft.com/kb/811889
1527DE74-E3F0-424A-8F26-4388840CF33FCheck for KB9799174http://support.microsoft.com/kb/979917
C6F6524B-2BD6-4788-B2DD-E609151A378ACheck for Application Pool password mismatch1, 4http://technet.microsoft.com/en-us/library/ff607826.aspx
2233F30F-EA46-44E0-AD93-D5826C349715Check for authentication mode attribute1, 4http://technet.microsoft.com/en-us/library/ee806890.aspx
E3BCD45E-00A6-43FB-A930-69800785987BCheck the local farm trust1http://support.microsoft.com/kb/2545744
0D277B72-A1C3-4CC3-BC37-A2B19DEEA41ECheck the Web Application User Permissions1http://technet.microsoft.com/en-us/library/ff607719.aspx
D2C42A33-6707-458D-8898-BAC12C10D7ABCheck for distributed cache timeout for ADFS Web Apps1
E286A6A8-13E7-4E68-A3BE-C1384F2569F6Check for Deny Authorization Rules in IIS4https://technet.microsoft.com/library/cc772206.aspx
Database Management
Rule IDTitleRequired permissionsDescription
420F4EBA-5532-455B-9DE6-F6D2E4A54D9FCheck if SQL Server Collation configuration is supported1, 2http://support.microsoft.com/kb/2008668
BCBDBA07-B354-4A76-85AD-C8E5CE8AD315Check if database snapshots are enabled1https://technet.microsoft.com/library/ms187054.aspx
0A53557F-2398-4DE7-AB78-908DA3D89C6BCheck whether Request Management service is started on all WFE1https://technet.microsoft.com/en-us/library/jj712708.aspx
24CE5FF4-95EC-4240-9743-C1D9B61CE9F4Check whether Request Management service has some rule destinations that are unavailable1https://technet.microsoft.com/en-us/library/jj712708.aspx

General Performance and Reliability

Rule IDTitleRequired permissionsDescription
4402C39D-7F32-4448-8CD2-91133C7B63CFCheck for application pool recycle settings3http://blogs.msdn.com/b/steveshe/archive/2007/12/23/overlapped-recycling-and-sharepoint-what-are-the-64-bit-settings.aspx
9ECC571A-EBBA-C0DE-DE06-A0AE9B529E0BSupported unique permissions1, 2http://technet.microsoft.com/en-us/library/cc262787(v=office.14).aspx#ListLibrary
33A8CA67-9771-C0DE-DE06-3FF3A4750358CRL Checking4http://blogs.technet.com/b/lukeb/archive/2011/04/13/sharepoint-delays-crl.aspx
EEA07685-E339-C0DE-DE07-9F7F97AC7E59InetPub moved to separate drive1,4http://support.microsoft.com/kb/2752331
1748BEEC-7617-C0DE-DE06-9E1E2ED206B7An account is missing from 'Allow log on locally'1,3http://technet.microsoft.com/library/cc756809.aspx
DB2D6406-5155-477A-AB9B-DF5E523AA7C0Check for disabled service accounts1,4http://technet.microsoft.com/en-us/library/cc781527(v=WS.10).aspx
C67C8509-84C6-4672-9C4D-34CEF56DA742PageParserPath directives are not configured correctly4http://support.microsoft.com/kb/2659203
5203B8D0-E089-C0DE-DE06-42DC9D73AE77Web Application Batch Compilation1, 4http://support.microsoft.com/kb/2659203
2CEC69D9-9222-C0DE-DE06-06942DF190CEMalformed Xml was found in a web.config file1, 4http://msdn.microsoft.com/en-us/library/ms256153(v=vs.90).aspx
02C8BACE-1D7B-C0DE-DE05-36DE92EA674DCGI and ISAPI settings are incorrect1, 4
45952226-46F1-4867-892D-22914259E9AASecurity Token Web Service is not available1http://support.microsoft.com/kb/2493524
648ABBED-FC26-43A9-8AD0-229E4E1558E5Check the .NET Trust level for SharePoint Web Services1,4http://support.microsoft.com/kb/815147
03778503-CA8E-4FF1-AA25-FAD5A00F5104Check the authentication modes for Security Token Web Service1,4http://support.microsoft.com/kb/2493524
9075ED01-1E56-461B-A8C2-F049CC13652DSecurity Token Service Application is not online1http://support.microsoft.com/kb/2493524
C717129A-25D9-4A00-9821-ED7BE333F7EECheck for Built-In Application Pool Identity1, 4http://technet.microsoft.com/library/ff805066.aspx
2A6B030D-6425-46FD-8E03-42865DC9462ACheck if Web Services anonymous user identity is IUSR1
E259EEED-8042-492D-95FA-76E5198D859ACheck for asterisk in IIS Site Host Headers1, 4
5DDE95FB-2637-4C10-A657-84038614A916Check if Windows Auth Extended Protection is Enabled1, 4
42D9CAA4-08C1-4824-B97F-265A8BE126F2Check for missing Machine Keys in IIS4https://technet.microsoft.com/library/cc731979.aspx
D6BDB2E0-36EC-C0DE-DE06-6AE127D5762EHealth Analyzer errors1, 2http://technet.microsoft.com/en-us/library/ff686788(v=office.14).aspx
17F09AA0-78E8-4C83-AAFB-BF293E580E1FCheck time difference between SharePoint Servers and Domain Controllers1
27005E36-74D8-401C-9DBF-4BDF82F8FF70Check if Impersonation Level is set to Identify4http://msdn.microsoft.com/library/ms681722.aspx
6A8495B4-993E-4668-A8B5-094F93021FECCheck for installed products mismatch in registry and database1, 4
0A0A4D14-3F86-409C-A6C0-F8E6680CE9D4Check for Data Source Name mismatch3
A8807C93-A607-4825-B97D-1A89F05717F0Check if Data Source Name is accessible3
7B092422-5273-4742-A8F4-644A65AE018BCheck if Request Filtering Override is set to Deny4http://msdn.microsoft.com/library/ms689460.aspx
B14A6BA4-6A56-4992-90C9-5E7FDD205434Check if clienttemplate.js exists within the layouts directory1, 4
DEFF20EE-F55C-4837-9A93-04E52B28FC3ECheck for network chimney settings that may cause issues3http://support.microsoft.com/kb/951037
46D2B3D6-C7BE-4A64-B68B-90A8F068F318Check whether the network driver settings are using Jumbo packets3
897B47A4-6A14-472E-ABB3-203A7C9056E2Check whether the network driver is old or outdated3http://support.microsoft.com/kb/912222
9E8C354C-A794-46B5-B1F4-FB1D145AB3F3Check whether the winsock providers are out of order3http://support.microsoft.com/kb/2000689
C595FFB6-2E91-4354-AF5E-5D62513B76E4Check whether the Root Certificate of the farm is added to the local certificate store1http://support.microsoft.com/kb/2625048
5EB2905F-7619-45F6-84B9-F7AE2FC4864ACheck Portal Super Reader Account Configuration1http://technet.microsoft.com/en-us/library/ff758656.aspx
3425A50A-CDD8-41D4-AA89-6512611E7E0FVerify that defaultProvider="AspNetWindowsTokenRoleProvider" if roleManager enabled="true" for CA1, 4http://support.microsoft.com/kb/2735026
A0650077-7F64-4EF0-9023-092E9BF90BF2Check whether the certificate chain takes more than 10 seconds to finish1http://social.technet.microsoft.com/wiki/contents/articles/4954.windows-xp-certificate-status-and-revocation-checking.aspx
C561F893-F8A9-4684-85D2-487AFBF877E4Check for FIPS algorithm4http://technet.microsoft.com/library/cc263215.aspx
20A65937-7466-4D30-AB60-696315D0FE82Check User Rights Assignments for 'Replace a Process-level Token'1, 4http://technet.microsoft.com/library/cc784623.aspx
ABDC5740-01A7-41F3-B610-9F119EEF7696Check if SharePoint Web Application ports are open in the Windows Firewall1, 4http://technet.microsoft.com/library/dd448559.aspx
220B7176-A949-4467-86DA-D8E17DD2606BCheck status of job-change-log-expiration1https://technet.microsoft.com/library/cc678870.aspx
5DEF13A2-6716-42F7-8E22-4D4C3F985EF6Check status of job-immediate-alerts1https://technet.microsoft.com/library/cc678870.aspx
9E7DA950-17B0-44C7-8E3C-2AF5AFE2A1D2Check for Kernel Mode Authentication on Web Apps1http://technet.microsoft.com/library/gg502602.aspx
76C04E55-609E-47A6-96A2-31AAD504DF6ECheck for HTTP Redirect on Web Apps1, 4http://technet.microsoft.com/library/cc732969.aspx
B3263CE5-4A11-4AC2-80BE-EBA0C0B4AE27Check for HTTP Keep Alive on Web Apps1, 4http://technet.microsoft.com/library/cc772183.aspx
74B418B9-84CD-491D-9251-A0B6C572FCE5Check SharePoint application pool .Net Framework version1, 4
8282AAB4-6164-4991-A78B-5CDFE4917C4FCheck for expired SharePoint certificates4http://technet.microsoft.com/library/cc730605.aspx
43527CA8-95FB-4B57-B93C-9FDFDCFD90A0Verbose Logging is currently enabled for SharePoint1http://technet.microsoft.com/en-us/library/ee748656.aspx
FE9646E1-BDEB-4960-A04A-F9571430932FCheck content database for outdated statistics1, 2https://support.microsoft.com/en-us/kb/3103194
2D56D082-693E-4282-A58A-A121D1446D29Check if W3Svc is running4https://technet.microsoft.com/library/cc734944.aspx

Lists and Libraries
Rule IDTitleRequired permissionsDescription
A94AC628-67DF-C0DE-DE07-8146B53F19C0Check for proxy in SharePoint1, 2http://office.microsoft.com/en-us/windows-sharepoint-services-it/editing-the-web-config-file-HA001191508.aspx
E266385D-1CEA-4B6A-B237-4EB4238D909BWebDav Module Installation Check1, 4http://support.microsoft.com/kb/2171959
823C65CF-D269-40DF-9930-8C871440A8CBVerify that PortalSuperUser has "Full Control" permissions that are granted through Policy for Web App1http://technet.microsoft.com/en-us/library/ff758656.aspx
33997564-C7FC-4DA8-8631-08A7EFF8FB84Site collection locks1, 2http://technet.microsoft.com/en-us/library/cc263c238.aspx
6E574B9B-17E5-4C62-BB33-634CF8061152IIS Handler Mapping Must Have Execute Permission1, 4
31B72275-CEA6-4430-93EF-62F9D14E400CRoot Site Collection is required1, 2http://support.microsoft.com/kb/2590564
18198ECB-932D-4039-BFEB-999697462ADBA Web Applications ParserEnabled property must be set to True1, 2http://blogs.technet.com/b/yashgoel-msft/archive/2012/11/28/unable-to-re-use-saved-list-templates-in-sharepoint-2010.aspx
3B088E47-BD4E-4FBD-AA40-17194DA34A4ECheck Web Apps process account permissions on the My Site Web Application1
86729545-CCBC-483C-90B3-D6B53F5CB45DCheck for Server Name Indication on Web Apps1, 4
1FF33E7C-1B80-47F6-9643-F12919E366B2Check for space in HTTP Response Headers
Planning, Supportability, Architecture, and Boundaries
Rule IDTitleRequired permissionsDescription
5F9036B9-F302-46A0-8235-A73EA47B9434Permissions to access the local farm by using PowerShell commands1Check the user's ability to execute SharePoint PowerShell commands, and issue a warning if the user does not have the appropriate access
A05A9CE8-16DE-4FCC-A5AD-EC0F90784260Check for minimum hardware configuration3http://technet.microsoft.com/en-us/library/cc262485.aspx
5800DF39-1C51-463D-87DF-0EC1A37FC16ECheck for unsupported installation configurations in SharePoint 20161, 4http://support.microsoft.com/kb/2764086
6ED6FCB6-8917-4953-8279-8A09944BBA23Check for WebGarden configuration4http://technet.microsoft.com/library/cc298550.aspx
460DBD54-D69F-4DC9-A6C3-57B1481C0EA3Check how much physical RAM is allocated for Distributed Cache1https://technet.microsoft.com/library/jj219613(office.15).aspx

Programmability
Rule IDTitleRequired permissionsDescription
2DB0F9D4-B097-41E3-A8B4-B16DECB4EFDDCheck whether DNS entries are created for each app domain for SP Apps1, 3http://technet.microsoft.com/en-us/library/fp161230(v=office.15).aspx
6A0085C3-4673-C0DE-DE05-4C8BC15F9F90Check SQL and SharePoint servers' system time differentiation1, 2http://technet.microsoft.com/en-us/library/jj852172(v=ws.10).aspx
E1C2F15B-121F-49EC-B3A5-29A90B9701E2Check if Refresh Metadata Feed Timer Job ran recently1
E2B33D9A-9E61-4522-A895-73ECC7CFDAC0Check if Refresh Metadata Feed Timer Job schedule is modified from default1
E3E66D04-244A-4666-9C98-75CC9BD0CF5DCheck status of Refresh Metadata Feed Timer Job1
93E04B9F-BD19-4AFD-9758-C6ED2FA3A444Check User Code Execution Tier configuration1http://technet.microsoft.com/library/ff603638.aspx
Publishing Portal Features, Caching, and Content Deployment
Rule IDTitleRequired permissionsDescription
C3B5E92C-4B76-4484-97CC-C3177230E2D6Verifies the feature definition files for installed features1http://technet.microsoft.com/en-us/library/ff607680.aspx
72A342A1-8B91-448F-8224-67DF9156665ACheck if ThreadingModel is set to Both for PhotoMetadataHandler4
Searching, Crawling, and Related Items
Rule IDTitleRequired permissionsDescription
5E85D384-C082-4982-BA4A-4C0183A73089Collect information about Search Runtime1
3CCB74BF-E5DC-4950-A29C-87935380462DCollect each Search Component Detail Diagnostic1
27594146-3183-49B3-A31C-EC55109F57C1Collect each Search Component Health State Check1
DC1A2159-A1AA-4B24-8922-6A91149F2632Verify Search Component health state check1http://technet.microsoft.com/en-us/library/cc262485(v=office.15).aspx
A356873F-80F4-C0DE-DE07-AA79A7B33821Registry Offload settings1http://blogs.msdn.com/b/distributedservices/archive/2009/11/06/a-com-server-application-may-stop-working-on- windows-server-2008.aspx
DC1A2159-A1AA-4B24-8922-6A91149F2632Check whether the Crawl Component's temp files folder exists4http://support.microsoft.com/kb/2628230
42A80BE2-6E02-4B1B-9125-CB49FF1FF091Check if Application Server Administration Service Job exists1
433BE5AA-0F3C-42E1-B958-3D27655A68D3Check if Application Server Administration Service Job ran recently1
4475D8F3-A222-42DB-8F18-4FBFF013ABA1Check if Application Server Administration Service Job schedule is modified from default1
453E9EFB-B5D7-4C25-AFE6-1CF7A43BA161Check status of Application Server Administration Service Job1
CF480ABF-DDCA-457C-98A9-01C8161443CFCheck noderunner.exe.config for modifications to the memory limit1, 4
99FDC230-117C-4931-A06D-0D668EF00862Check the group policy setting for offloading user registry settings1, 4http://blogs.msdn.com/b/distributedservices/archive/2009/11/06/a-com-server-application-may-stop-working-on-windows-server-2008.aspx
4298BA58-9003-C0DE-DE07-1E720756EF28Check if Sitedata.asmx is modified1, 4http://msdn.microsoft.com/en-us/library/ms774821(v=office.12).aspx
199466D0-ECCA-C0DE-DE07-A0CA38491A7ACheck if search indexer performance level is modified from default1, 4https://technet.microsoft.com/en-us/library/cc788931(v=office.12).aspx#BKMK_Threads
28EE16F8-7919-4C24-9A5A-0D3C40B582BBCheck start addresses for content sources1http://support.microsoft.com/kb/2000365
06C162ED-A56E-44E3-BD50-FE222A9AD20DCheck for search service app proxy URI mismatch1
B740A656-522C-4ACC-9393-31C94171D2CFCheck for search service app proxy in proxy group1http://technet.microsoft.com/library/ee704550.aspx
81D3001B-11A2-4A31-9562-C3BD5EB894C5Check for changes to IgnoreCertCNError registry key1http://technet.microsoft.com/library/dd630760.aspx
C901AD77-CD52-4863-B7A3-943C7BCE186ECheck if registry key DebugFilters is not set to 04http://technet.microsoft.com/library/dd630757.aspx
D999154A-C1C2-44A0-AF5A-72475639CECCCheck if registry key DebugWordBreakers is not set to 04http://technet.microsoft.com/library/dd630757.aspx
2F449690-601E-42D5-A9AD-120D1B71E803Check if Search Robot Threads Number is not set to 01, 4http://technet.microsoft.com/library/dd630757.aspx
8DE4C205-BA74-4A76-9DDF-C2DCCDFA4426Check if root directory folder exists1, 4
1855DAA7-B280-4261-AE36-DFEDB645625CCheck status of SharePoint Search Location Configurations1
21E921EE-8804-43BE-9992-1C5C2FDEB443Check for search service application index size limit1https://technet.microsoft.com/library/jj862355.aspx
CA2E4323-955B-4BD2-A2A2-8E9B35FDEB42Check if Primary search host controller has the latest repository version1https://technet.microsoft.com/library/jj219482.aspx
CA31EE38-4CC5-4E37-BF5F-960E715BB199Check if search host controller is online1https://technet.microsoft.com/library/jj219482.aspx
ED85393F-B739-43DB-BABE-1A432B13EF3CCheck if search content source name length exceeds 32 characters1
E823733B-F102-4E65-993F-160B88160BCDCheck status of search query and site settings service1http://technet.microsoft.com/en-us/library/ff468691.aspx
D71257B8-0591-C0DE-DE07-CD0A1853E0A3Check content access account permission on web applications1http://technet.microsoft.com/en-us/library/cc678863.aspx#Section3
CDE10F2E-D02E-C0DE-DE07-86A4E8DBC212Check whether people search is configured1http://technet.microsoft.com/en-us/library/hh582311.aspx
3920CEE6-ADBE-C0DE-DE07-65EEB09BA3EDCheck people search configuration1http://technet.microsoft.com/en-us/library/hh582311.aspx
C96935DB-4BC5-43E4-AEBE-06FE0D286830Check if search proxy server exists and is accessible1http://technet.microsoft.com/library/ee808895.aspx
76C39B77-7C01-43BA-BEEB-D904F089D833Check custom dictionaries update job with mms configuration1

Security
Rule IDTitleRequired permissionsDescription
EC2FB075-DD02-4E4D-89AE-B260D3F34014Check whether DisableLoopbackCheck registry is set3http://support.microsoft.com/kb/926642
B88B6AD8-2368-4724-8447-1C62F931A521Check the default blocked file types1, 4http://technet.microsoft.com/library/cc262496.aspx
13D7F8E1-220B-4591-85C0-FEF64E9ECA4FCheck for IIS Directory Browsing1, 4http://technet.microsoft.com/library/cc731109.aspx
Server and Farm Configuration and Administration
Rule IDTitleRequired permissionsDescription
2F38FD7A-DEED-4D54-8711-8E3DC2301EAADetect databases that require an upgrade1http://technet.microsoft.com/en-us/library/ff607813.aspx
36161129-FE9F-4B2A-89E5-0075B95C18D2All Timer Service Servers in a farm should be in the same time zone1, 4http://support.microsoft.com/kb/2734729
2AFDF425-D3FE-410B-A952-9E6B1A6B71DBTimer service servers should be in the same time zone as the Central Administration servers1, 4http://support.microsoft.com/kb/2734729
94636052-E114-4773-AADC-E31AE6E34270All Central Administration servers in a farm should be in the same time zone1, 4http://support.microsoft.com/kb/2734729
8BFCA359-CAF2-4E5B-96B0-611E94E623BBVerify that each AAM URL has a backing IIS site1http://support.microsoft.com/kb/2624320
78192395-6712-4093-9979-A699BF158D74Check whether the debug=true attribute is set in the web.config file4http://msdn.microsoft.com/en-us/library/s10awwz0.aspx
D86A3935-2BA6-C0DE-DE06-6D20320FCA74SharePoint Service Connection Point4http://technet.microsoft.com/en-us/library/ff730261.aspx
1D4CA0F6-2741-4432-9AAB-2B7DFD6D5F95Check if outgoing email server passes DNS check1, 4http://technet.microsoft.com/library/cc263462.aspx
6243EF65-5671-414E-B3A6-6C0CEC592C19Check if Immediate Alerts Timer job exists1
625B19AB-8053-491A-BE9F-DE008D2B1371Check if Immediate Alerts Timer job has ran within its schedule1
626103B1-404A-4F6C-9CE5-6F5BF52DC53BCheck if Immediate Alerts Timer job schedule is changed from default1
6277E604-4ED0-4B2E-A02D-FF907EEFB952Check if Immediate Alerts Timer job is online and enabled1
D83259F4-E3EB-4DD4-A4CD-94B9320C2205Check if the Mail Drop Folder Exists1, 4http://technet.microsoft.com/library/cc263260.aspx
0C8C236A-C8B8-41EC-833A-F1D4D8C1DFA6Check if the SharePoint Farm account has modify permission on the mail drop folder1, 4http://technet.microsoft.com/library/cc263260.aspx
5CA37E4F-A28A-41A5-A978-569526064B53Check if SPIncomingEmailService is enabled1http://technet.microsoft.com/library/cc263260.aspx
0035FD9A-4924-4227-AF8D-57E33BDE5CABCheck if Usage or Web Analytics Timer Job is removed from the farm1
00421F8F-7922-44A9-BE1E-80C5BD18781ECheck if Usage or Web Analytics Timer Job has ran recently, within it's schedule1
00B78160-394F-46EF-9BB7-FAD52E05EB0CCheck if Usage or Web Analytics Timer Job schedule is changed from default1
00F58998-9E18-41A6-8B7F-F49DEB175A73Check if Usage or Web Analytics Timer Job is Online1
2D7C351D-3044-45B6-9430-8792F5F9EF4BCheck if Sandboxed Solutions Resource Quota is disabled1
67C8E3DF-45A7-C0DE-DE06-857FB5419E3FChecks if SharePoint 2016 is at a Pre-RTM1, 4http://technet.microsoft.com/evalcenter/hh973397.aspx
19C5BFBD-6B69-40E6-BD5B-A97EAC7D0088Check for correct configuration of identity impersonation in web.config1, 4http://support.microsoft.com/kb/979917
74AE6A28-1711-4D83-B6AA-5B5DFC043686Check for BUILTIN\Administrators in farm administrators group1http://technet.microsoft.com/library/cc263291.aspx
1FE2CB13-62B4-4F63-965F-FA69F5EB05F6If the Distributed Cache Service is not started on at least one server, the distributed cache is not populated1https://technet.microsoft.com/library/jj219613(office.15).aspx
E1B36F06-03DF-4B56-9F9A-81BDF5D3765FCheck if AppHostSvc is running4http://technet.microsoft.com/library/cc735036.aspx
3913E70E-980D-4AF1-99DE-613ACFC27942Check if Usage Analysis State is Paused or Failed1
EBAAB241-277F-4FAE-B099-4C7918CE915ECheck Tail Trimming for Views and Search Queries1https://technet.microsoft.com/library/dn794239.aspx
B4B9A380-CABC-44EC-9379-5AA7B456F4A0Check Usage Definition for Max Total Size and Retention Period1https://technet.microsoft.com/library/ff607542.aspx
BAB3AAD7-0D2E-47C7-867E-1368B16A60C4Check if UPA Claim Provider farm feature is enabled1
96D25952-008B-45C9-89D8-4A017F16887ACheck if App Installation Timer Job exists1
96D3B292-60BA-4791-A0E6-0E57BA813E03Check if App Installation Timer Job ran recently1
96D4B6D6-DB03-43CE-899A-4266138D9913Check if App Installation Timer Job schedule is modified from default1
96D5F3B1-9680-4777-A4FB-99FC96E12B02Check if App Installation Timer Job is Online1

Setting up, Upgrading, Deploying, and Updating
Rule IDTitleRequired permissionsDescription
835BDC58-3D40-4D44-8B0D-938536DDB5B6Running Robust Office Inventory Scan (ROIScan)4http://technet.microsoft.com/en-us/library/hh221405.aspx
B4B17887-105F-46FF-B5FC-6FA513E9BC0CCheck if SQL Server Native Client is installed1, 4http://technet.microsoft.com/library/cc262485.aspx
EF1144F8-7F02-4552-BCB7-C9B4D9C6AF76Sites fail to upgrade from 20101http://technet.microsoft.com/library/ff382641
5D0F3BD2-6BED-C0DE-DE07-6FC5DBB510CFThe Farm Needs an Upgrade1http://blogs.technet.com/b/sbs/archive/2011/05/24/you-must-manually-run-psconfig-after-installing-sharepoint-2010-patches.aspx
F86CF8E2-A537-4615-9C6A-37FA218E3731Check if AppFabric 1.1 is installed4https://msdn.microsoft.com/library/hh334300.aspx
F8F24452-E0E5-46BA-A38A-8FC9DB26B7EACheck for KB9823074http://support.microsoft.com/kb/982307
05D31B82-F3EF-4D8D-A681-01BF45EDE3AEConfiguration files will never be upgraded after they are touched4http://msdn.microsoft.com/en-us/library/aa370532(v=VS.85).aspx
DBFAEB9A-961A-4DC1-99B9-F589A2A4FF27Check for missing patches1http://technet.microsoft.com/sharepoint/ff800847.aspx
7A02A53E-17EC-4928-9C05-041C733DFE54Required user is not permissioned on resource1, 4http://technet.microsoft.com/en-us/library/cc678863.aspx
E9199078-858E-45FB-8369-B25C7CFD9B2BResource does not have the appropriate permissions for the named user on this resource1, 4http://technet.microsoft.com/en-us/library/cc678863.aspx
Site collections
Rule IDTitleRequired permissionsDescription
8B2B2A65-1FA3-4597-B217-73318182A8CEDisk-based cache at critical capacity4http://technet.microsoft.com/en-us/library/cc770229.aspx
3266CE69-EBEB-4D24-83E7-F75301B5025ECheck for enable32BitAppOnWin644http://msdn.microsoft.com/en-us/library/microsoft.web.administration.applicationpool.enable32bitapponwin64(VS.90).aspx
0C4C7678-2A8C-C0DE-DE06-66E417008012Checks the SharePoint Configuration Database for malformed Xml properties in the objects table.1, 2
071A5E86-5193-49C1-A332-C08FD5118238Check Portal Super Reader Account Configuration for Claims Based Web Apps1http://technet.microsoft.com/en-us/library/ff758656.aspx
DE89AC8C-2DFC-454C-A9ED-C72EF271A5F9Check whether multiple AppCatalog web template is used on a single web application or single farm1http://technet.microsoft.com/en-us/library/fp161237(v=office.15)
User profiles
Rule IDTitleRequired permissionsDescription
3C865138-1C6A-42D1-ABC1-C3DF28B77001Check the cache allowed clients accounts1http://msdn.microsoft.com/library/ff428172.aspx
4B5F4EBB-2018-472F-9131-48A95A3A21FCDetect Disabled Timer Service Instances in the Farm1http://support.microsoft.com/kb/2616609
FF3E4AE6-3DCA-4B85-9F54-A0C4F60F04A7Check if People Picker Search Active Directory Domains passes nltest1
3DDB2C1F-29E4-4035-BBAC-047A275FFAFFCheck if People Picker Hide Inactive Profiles is configured1, 4
7E7ACD48-5A3F-4090-B726-4FB4506E15F3Check if trust direction is outbound or bidirectional for people picker domain1, 4https://technet.microsoft.com/library/gg602075.aspx
7E82BBA6-B63A-4A77-9532-003FC41B347ECheck if a trust exists for people picker domain1, 4https://technet.microsoft.com/library/gg602075.aspx
7E9F40C4-D87A-49AA-9339-F0C4C6952D62Check trust type for people picker domain1, 4https://technet.microsoft.com/library/gg602075.aspx
5DFE8052-6294-4B27-81B5-18FED77DC27BCheck whether the root of the web application is provisioned for My Site Host of any given user profile service application1
8B44C564-C065-4C0F-A376-DA44AE86206FCheck the distributed cache host status1https://technet.microsoft.com/library/jj219613(office.15).aspx
9468CABC-60F5-C0DE-DE03-A660655B416FUser profile sync account has a proxy enabled1, 4
594146D1-5DFA-4B13-9E90-F5C19D26D47BCheck if Social Ribbon Control feature is enabled1http://technet.microsoft.com/library/ee721062.aspx

Additional information

Password synchronization reportThe password synchronization report is a new file that is generated with the 1.3.0.0 release of SETH. The output of this file resembles the following:

Password Synchronization Report Generated from SERVER1: 04/08/2011 10:51:13



============================================================================





Machine Name UserName Password Hash

======== ==================================== =================== ========================



SERVER1 0cbce7b825854b9d93b2610c3627533a contoso\user1 taggcB3Cg9kkSVLVZlCTyg==



SERVER2 0cbce7b825854b9d93b2610c3627533a contoso\user1 KU91YgOOM8CYdezeuhn96w==



SERVER1 SecurityTokenServiceApplicationPool contoso\user1 taggcB3Cg9kkSVLVZlCTyg==



SERVER2 SecurityTokenServiceApplicationPool contoso\user1 KU91YgOOM8CYdezeuhn96w==



SERVER1 SharePoint - 30699 contoso\user1 taggcB3Cg9kkSVLVZlCTyg==



SERVER2 SharePoint - 30699 contoso\user1 KU91YgOOM8CYdezeuhn96w==



SERVER1 SharePoint Central Administration v4 contoso\user1 taggcB3Cg9kkSVLVZlCTyg==



SERVER1 c408cf58b72d493da1925746dd8a0012 contoso\user2 LmbbRTCUtCxxfGHdq3l/nA==



SERVER2 c408cf58b72d493da1925746dd8a0012 contoso\user2 LmbbRTCUtCxxfGHdq3l/nA==



SERVER2 SharePoint - 80 contoso\user2 LmbbRTCUtCxxfGHdq3l/nA==



SERVER1 SharePoint - 80 contoso\user2 LmbbRTCUtCxxfGHdq3l/nA==


The information is sorted by UserName and Name (application pool). As the sample output shows, the password hash for the 0cbce7b825854b9d93b2610c3627533a application pool has a different value on SERVER1 than it has on SERVER2. This indicates that the passwords do not match. This might have occurred because the password was changed on one server but not on the other. As the sample output for the SharePoint – 80 application pool shows, the password hash is identical on both servers in the farm. This indicates that the passwords are in sync.

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.
Properties

Article ID: 3166493 - Last Review: 06/14/2016 15:52:00 - Revision: 3.0

Microsoft SharePoint Server 2016

  • KB3166493
Feedback