MSP Server 2007, Promlems doing a Sync with AD.

[Jay]

Hi, I am trying to do a sync with our company's AD and having issues. I get
the following event errors when I try to sync with active directory. I know
the group is valid because I am able to sync with this group on another MSP
2007 server environment.

One server environment is located in Europe doing a sync with our Europe
users.

One server environment is located in the US doing a sync with all our US
users.

The environments are totally separate instances.

On the US environment I can sync with any AD group

The Europe environment will not complete a AD sync with any group.

Error in event log:

Project User: Administrator
Correlation Id: 1e3fd195-94b3-4da1-97eb-ab4136f142f0
PWA Site URL: http://proj2007/PWA
SSP Name: proj2007-ssp
PSError: Success (0)
Active Directory ERP Synchronization cannot resolve reference to Group. This
could be because the group does not exist, the user does not have permission
or because of a communication problem between the project server application
server and active directory. FQDN: (e-mail address removed). Active Directory
Guid: 894d1e7d-1188-794d-94e1-21e5e6c1d310.

For more information, see Help and Support Center at

Standard InformationSI Entry Point:
Project User: Administrator
Correlation Id: 1e3fd195-94b3-4da1-97eb-ab4136f142f0
PWA Site URL: http://proj2007/PWA
SSP Name: proj2007-ssp
PSError: Success (0)
A general exception occurred during communication with Active Directory.
Context: The server is not operational.
.. Additional Information: (null). Exception Info: (null)

Standard InformationSI Entry Point:
Project User: Administrator
Correlation Id: 1e3fd195-94b3-4da1-97eb-ab4136f142f0
PWA Site URL: http://proj2007/PWA
SSP Name: proj2007-ssp
PSError: Success (0)
A general exception occurred during communication with Active Directory.
Context: GetGroup (GUID and FQDN). Additional Information: An exception
occurred while trying to find an active directory group using it's AD GUID
and FQDN. ADGUID: '%s', FQDN:'%s'. Exception: '%s'.. Exception Info:
894d1e7d-1188-794d-94e1-21e5e6c1d310

Any help or suggestions would be greatly appreciated.

 

[Scott M Wagner - MVP]

Jay,

It appears to be a communication issue with the server that is running AD.
Do you know the name or ip address of that computer? Can you ping that
computer? Try start->run->cmd and in the command box type tracert and either
the name or the ip address of the server running AD.

It may just be a timeout issue because the reponse takes too long.

 

[Paul Conroy]

are the US and EMEA servers in the same domain ? if not then that's your
problem.

 

[Jay]

Just to clarify, this is when trying to create users accounts by doing an AD
sync.

I am able to ping the AD server without problems.

I search for the group and select the name to sync with so appears to see AD.

I can even create a resource manually by searching AD but it will not sync.

Both are a part of our company’s domain.

Both the US and EU MOSS 2007 environments were setup previously and we just
added the MS Project component to each farm. There were no issues with AD
during the MOSS configuration

-Jay

 

[Paul Conroy]

from the Project Server, open Active Directory Users & Computers whilst
logged on with the SSP Admin account. Can you read the ERP security group ?

Create a SharePoint site. Can you assign rights to the ERP AD group ?

Does any of the users in the ERP security group have a user name which
contains a period "." ?