You are currently offline, waiting for your internet to reconnect

[SDP 5][ ea92b899-11f6-4b51-b909-767b857667c5] SharePoint 2016 General performance and reliability diagnostic (SPPerfPub2016)

This SharePoint Performance and Publishing 2016 (SPPerfPub 2016) manifest is designed to detect certain problematic conditions that may exist in the configuration of a server that's running Microsoft SharePoint Server. The rules in this diagnostic package are limited to SharePoint performance and reliability.

Important The problematic conditions are checked only on the server on which this manifest is executed. To make sure that you have maximum coverage, we recommend that you run SPPerfPub on every computer in the SharePoint farm.

This article discusses the operation of this manifest file.

Required permissions

The rules in the diagnostic package use the Windows PowerShell snap-in for SharePoint to obtain information about your farm. Therefore, the account that is used to run the diagnostic package must either be the farm account or have the required permissions granted through the Add-SPShellAdmin command. Be aware that the farm account is the account under which the timer service and central administration site's application pool are running.

Some rules in this diagnostic package also must have local server administrative permissions to leverage remote and local administrative tools and to access secure system locations, such as the registry. Use the following table to reference the permissions that are required for each rule.
Permission codeDescriptionRequired permission
1Use Windows PowerShell cmdlets to interact with the SharePoint farm.  Farm Administrator
2Run queries against SharePoint databases.Farm Administrator
3Access server administrative tools.Server Administrator
4Access files and other resources on the server.    Server Administrator

More information
This article describes the information that may be collected from a computer when you run SPPerfPub2016.

Information that's collected

Manifest results
DescriptionFile name
Contains the actual results of the SPPerfPub manifest. This is what is displayed back to the user to indicate that status of each rule that is executedResultReport.xml
This is an .xlst transform that formats the results in the ResultReport.xml file. It contains no customer data.Results.xsl
Contains debug information that may be generated during the execution of the manifest. It also contains timings on each of the rules that are run. It may contain customer data; however, every attempt has been made to minimize the amount.SPPerfPub2016.0.debugreport.xml
Contains additional debug information for the manifest execution. It may contain customer data; however, every attempt has been made to minimize the amount.Stdout.log
Contains the environmental information for each computer in the farm. The information that is captured includes the following:

  • Computer name
  • Operating system name
  • Last reboot/uptime
  • Computer model
  • Processors
  • Computer domain
  • Role
  • Operating system language
  • Time zone
  • Total RAM
  • Drives (total and free space available)
This is an .xlst transform that formats the results in the %COMPUTERNAME%_SPSFarmReport_%LANG%_O16SP__%time%.xml file.SPSFarmReport.xslt
Collects the SharePoint farm information. The information that is captured includes the following: 
  • Farm general settings
  • Services on servers
  • Installed products on servers
  • Features on servers
  • Custom solutions
  • Service applications
  • Web applications
  • AAMs and authentication providers
  • Content databases
  • Content deployment
Contains a summary of the performance and capacity values for the Audit Data table. The information in this file includes the following:
  • Total count of Audit Data table rows
  • Size of Audit Data Table on disk
  • Size of Audit Data Table on disk
  • Top 10 Days by count of rows
  • Top 10 Paths by count of rows
Contains a summary of the All Doc Versions table. The information in this file includes the following:
  • Total count of table rows
  • Size of table on disk
  • Size of index on disk
  • Top 10 items by count of documents versions
Contains a summary of the Distributed Cache settings. The information in this file includes the following:
  • Get-AFCacheClusterHealth
  • Get-SPDistributedCacheClientSetting
  • Get-CacheStatistics
  • Get-AFCacheConfiguration
  • Get-CacheHost
  • Get-CacheHostConfig
  • Get-AFCacheAllowedClientAccount
  • Get-SPServiceApplicationPool
  • Get-SPServiceInstance -TypeName Distributed Cache
  • Get-SPServiceApplication -TypeName User Profile Service Application
  • Get-SPServiceInstance -TypeName User Profile Service
  • Get-SPTimerJob -TypeName Microsoft.Office.Server.ActivityFeed.ActivityFeedUPAJob

Rule IDTitleRequired permissionsDescription
8B2B2A65-1FA3-4597-B217-73318182A8CEDisk-based cache at critical capacity4
071A5E86-5193-49C1-A332-C08FD5118238Check Portal Super Reader Account Configuration for Claims Based Web Apps4

Capacity planning guidelines

Rule IDTitleRequired permissionsDescription
38BB68F6-7EAC-420F-852E-5A020C366575Check the number of Crawl Mappings1
EFFCBC54-F17C-4735-B5AA-36DFB770541FCheck the number of Crawl Rules1
3FADCA3A-DA90-49E3-BAD9-61F146329F9CCheck for number of content databases1
D4B272DD-5DB9-47CB-9FAB-3CF3224EB916Check for number of items per folder in the list or library2
8AD5B2D2-2932-468E-B6CF-8F29F3B39D30Check the number security principals added to SharePoint groups2
557DE93D-E86D-49E1-8239-8642781FA27FCheck the number of Index Partitions1
7B31CDF4-4612-4968-A6BC-E106A63DDD9CCheck Item Count of Lists and Libraries1
7BF1F8F9-16F4-41D4-BC74-67F6BEB638BFCheck the list view threshold setting1
80FCC287-E150-4C90-B24D-BC3402F1712DCheck the list view lookup threshold setting1
E7E40739-90C0-4228-BED9-0C8DED1D302FCheck for number of managed paths per web application1
DEE2C14A-A2A8-4274-8908-962D0108C699Check the number of Managed Properties1
19FDA642-93D3-4D1C-BE89-0B9E80D43E13Check total number of terms and term sets2
15459C6E-7195-48C6-BDD3-AE2B2288ADC4Check the total number of terms2
D5254485-FBD0-456D-844C-BD81C4ED3DFACheck the total number of term sets2
E4DD000D-6D82-4B87-9E15-E8620E293B0ECheck for large Number of Search Service Application1
34683B93-483F-4923-BD4E-5671D964F947Check for number of site collections per content database1
C52E4AB7-140B-464B-9284-89D414C50267Check the number of sub-sites2
3ED10900-E8FD-C0DE-DE06-35E2D62DB524Check for Site Collections with a large amount of SharePoint Groups2
EFCE554A-5977-C0DE-DE06-B827E2D1E1D4Check whether there are more than 20 web applications1
B4A7071B-7EE7-C0DE-DE06-4546907CF8E3Crawl Components Per Search Application1
C29CD08F-E40A-C0DE-DE06-FEB7ECA47CDBQuery Components Per Server1
E6F5EE96-5BAC-4CEF-987A-FB7119A9D9FESearch Keywords2
98DD9B54-FBD6-C0DE-DE06-8BB832F93758Blog Posts per Site2

Configuration settings
Rule IDTitleRequired permissionsDescription
78192395-6712-4093-9979-A699BF158D74Check whether the 'debug=true' attribute is set in the web.config file4
EF1144F8-7F02-4552-BCB7-C9B4D9C6AF76Sites fail to upgrade from 20131
9ECC571A-EBBA-C0DE-DE06-A0AE9B529E0BSupported unique permissions1, 2
78B579A4-E244-C0DE-DE06-9399DC13F645The permissions set on the User Information List will cause access denied to anonymous users1, 2
1748BEEC-7617-C0DE-DE06-9E1E2ED206B7An account is missing from 'Allow log on locally'1,3
220B7176-A949-4467-86DA-D8E17DD2606BCheck immediate alerts and change log expiration timer jobs1
DB2D6406-5155-477A-AB9B-DF5E523AA7C0Check for disabled service accounts1, 4
17F09AA0-78E8-4C83-AAFB-BF293E580E1FCheck time difference between SharePoint Servers and Domain Controllers1
8BD57286-B25C-43AA-B68C-B06721B49C89Check the amount of time before a user token times out1, 3


Rule IDTitleRequired permissionsDescription
2F38FD7A-DEED-4D54-8711-8E3DC2301EAADetect databases that require an upgrade1
4F51675D-8358-C0DE-DE06-E7074F5509BFChecks for orphaned databases in SharePoint1
E425A500-35ED-4FB5-8461-C4FD49031155Check the content database for orphaned objects1
0A0A4D14-3F86-409C-A6C0-F8E6680CE9D4Check for Data Source Name mismatch3
A8807C93-A607-4825-B97D-1A89F05717F0Check if Data Source Name is accessible3
420F4EBA-5532-455B-9DE6-F6D2E4A54D9FCheck if SQL Server Collation configuration is supported1, 2
FE9646E1-BDEB-4960-A04A-F9571430932FCheck content database for outdated statistics1, 2

Hardware and software requirements
Rule IDTitleRequired permissionsDescription
8F1C132D-2656-4D8D-9E58-606C0F97B748Check for minimum hardware configuration3
86CF8E2-A537-4615-9C6A-37FA218E3731Check if AppFabric 1.1 is installed4

Rule IDTitleRequired permissionsDescription
c67c8509-84c6-4672-9c4d-34cef56da742PageParserPath directives are not configured correctly4
5203B8D0-E089-C0DE-DE06-42DC9D73AE77Web Application Batch Compilation1, 4
4402C39D-7F32-4448-8CD2-91133C7B63CFCheck for application pool recycle settings3
3425a50a-cdd8-41d4-aa89-6512611e7e0fVerify that defaultProvider="AspNetWindowsTokenRoleProvider" if roleManager enabled="true" for CA1, 4
C6F6524B-2BD6-4788-B2DD-E609151A378ACheck for Application Pool password mismatch1, 4
3266CE69-EBEB-4D24-83E7-F75301B5025ECheck for enable32BitAppOnWin644
6ED6FCB6-8917-4953-8279-8A09944BBA23Check for WebGarden configuration4
2CEC69D9-9222-C0DE-DE06-06942DF190CEMalformed Xml was found in a web.config file1, 4
02C8BACE-1D7B-C0DE-DE05-36DE92EA674DCGI and ISAPI settings are incorrect1, 4
33A8CA67-9771-C0DE-DE06-3FF3A4750358Checking Certificate Revocation List (CRL) connection3
DDE88E63-BD4F-4FED-8338-488F6286AEADThe anonymous access account is not set to IUSR1
648ABBED-FC26-43A9-8AD0-229E4E1558E5Check the .NET Trust level for SharePoint Web Services1,4
456E96A9-DD92-4781-9085-2780898D5272Check Kerberos Web Apps for authPersistNonNTLM1, 4
9AC00049-6457-46EB-895A-35C4984E1E4ACheck Kerberos Web Apps for authPersistSingleRequest1, 4
9075ED01-1E56-461B-A8C2-F049CC13652DSecurity Token Service Application is not online1
45952226-46F1-4867-892D-22914259E9AACheck whether Security Token Web Service Exists1, 4
03778503-CA8E-4FF1-AA25-FAD5A00F5104Check the authentication modes for Security Token Web Service1, 4
c717129a-25d9-4a00-9821-ed7be333f7eeCheck whether application pools are domain or built-in accounts1
9e7da950-17b0-44c7-8e3c-2af5afe2a1d2Check for Kernel Mode Authentication for each web application1,4
76C04E55-609E-47A6-96A2-31AAD504DF6ECheck for HTTP Redirect on Web Apps1, 4
B3263CE5-4A11-4AC2-80BE-EBA0C0B4AE27Check for HTTP Keep Alive on Web Apps1, 4
74B418B9-84CD-491D-9251-A0B6C572FCE5Check SharePoint application pool .Net Framework version1, 4
2A6B030D-6425-46FD-8E03-42865DC9462ACheck if Web Services anonymous user identity is IUSR1
1FF33E7C-1B80-47F6-9643-F12919E366B2Check for space in HTTP Response Headers1
13D7F8E1-220B-4591-85C0-FEF64E9ECA4FCheck for IIS Directory Browsing1, 4
E259EEED-8042-492D-95FA-76E5198D859ACheck for asterisk in IIS Site Host Headers1, 4
450C32A4-225D-460F-9840-9FE16DD2C88ECheck for Require SSL on Web Apps1, 4
5DDE95FB-2637-4C10-A657-84038614A916Check if Windows Auth Extended Protection is Enabled1
7B092422-5273-4742-A8F4-644A65AE018BCheck if Request Filtering Override is set to Deny4
42D9CAA4-08C1-4824-B97F-265A8BE126F2Check for missing Machine Keys in IIS4
E286A6A8-13E7-4E68-A3BE-C1384F2569F6Check for Deny Authorization Rules in IIS4
2D56D082-693E-4282-A58A-A121D1446D29Check if W3Svc is running4

Rule IDTitleRequired permissionsDescription
43527ca8-95fb-4b57-b93c-9fdfdcfd90a0Verbose Logging is currently enabled for SharePoint1

Rule IDTitleRequired permissionsDescription
D6BDB2E0-36EC-C0DE-DE06-6AE127D5762EHealth Analyzer errors1, 2
67C8E3DF-45A7-C0DE-DE06-857FB5419E3FSharePoint is at a version less than RTM4
8282AAB4-6164-4991-A78B-5CDFE4917C4FCheck for expired SharePoint certificates4
6243EF65-5671-414E-B3A6-6C0CEC592C19Check if Immediate Alerts Timer job exists1
625B19AB-8053-491A-BE9F-DE008D2B1371Check if Immediate Alerts Timer job has run within its schedule1
626103B1-404A-4F6C-9CE5-6F5BF52DC53BCheck if Immediate Alerts Timer job schedule is changed from default1
6277E604-4ED0-4B2E-A02D-FF907EEFB952Check if Immediate Alerts Timer job is online and enabled1
D83259F4-E3EB-4DD4-A4CD-94B9320C2205Check if the Mail Drop Folder Exists1, 4
0C8C236A-C8B8-41EC-833A-F1D4D8C1DFA6Check if the SharePoint Farm account has modify permission on the mail drop folder1, 4
27005E36-74D8-401C-9DBF-4BDF82F8FF70Check if Impersonation Level is set to Identify4              
6A8495B4-993E-4668-A8B5-094F93021FECCheck for installed products mismatch in registry and database1, 4
D2C42A33-6707-458D-8898-BAC12C10D7ABCheck for distributed cache timeout for ADFS Web Apps1
B14A6BA4-6A56-4992-90C9-5E7FDD205434Check if clienttemplates.js exists within the layouts directory1, 4


Rule IDTitleRequired permissionsDescription
2233F30F-EA46-44E0-AD93-D5826C349715Check for authentication mode attribute1, 4
E3BCD45E-00A6-43FB-A930-69800785987BCheck the local farm trust1
C595FFB6-2E91-4354-AF5E-5D62513B76E4Check whether the Root Certificate of the farm is added to the local certificate store1
A0650077-7F64-4EF0-9023-092E9BF90BF2Check whether the certificate chain takes more than 10 seconds to finish1
C561F893-F8A9-4684-85D2-487AFBF877E4Check for FIPS algorithm4
20A65937-7466-4D30-AB60-696315D0FE82Check User Rights Assignments for 'Replace a Process-level Token'1, 4
74AE6A28-1711-4D83-B6AA-5B5DFC043686Check for BUILTIN\Administrators in farm administrators group1
ABDC5740-01A7-41F3-B610-9F119EEF7696Check if SharePoint Web Application ports are open in the Windows Firewall1, 4


973559 Frequently asked questions about the Microsoft Support Diagnostic Tool (MSDT) when it is used with Windows 7 or Windows Server 2008 R2


Article ID: 3166495 - Last Review: 06/14/2016 00:27:00 - Revision: 1.0

Microsoft SharePoint Server 2016

  • KB3166495