#SharePoint Product Configuration Wizard Error: Unable to create a Service Connection Point in AD #SP2010 #PS2010

While updating one of my Project Server 2010 environment with language pack, the configuration wizard has thrown following error in the end at step 9:

An exception of type Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfig

urationTaskException was thrown.  Additional exception information: The upgrade

command is invalid or a failure has been encountered.

Failed to upgrade SharePoint Products.

ULS logs digging helped me found a substantial clue and reminded me that i did come across to similar issue long time back as well. The issue is related to configuration to track any SharePoint production installation to farm of your organization, and tracking requires container in AD with appropriate user permissions to allow installation. If the account does not have permission to write to this container, the following warning will appear in the log file for the SharePoint Products Configuration Wizard and Wizard will fail at the last step:

Failed to add the service connection point for this farm

Unable to create a Service Connection Point in the current Active Directory domain. Verify that the SharePoint container exists in the current domain and that you have rights to write to it.”

To resolve this follow these steps:

1. On the domain controller, click Start, point to Administrative Tools, and then click ADSI Edit, or use a remote administration tool to connect to ADSI Edit from another computer.
2. On the Action menu, click Connect to, and connect to the domain that you want to use.
3. In the console tree, expand the connection, expand the domain name, and then click CN=System.
4. In the details pane, right-click in the white area, click New, and then click Object.
5. In the Create Object dialog box, in the Select a class box, click container and then click Next.
6. In the Value box, type Microsoft SharePoint Products as the container name, and then click Next.
7. Click Finish.
   The container is created.
8. Right click the container (CN=Microsoft SharePoint Products), and then click Properties.
9. On the Security tab, click Add.
10. In the Select Users, Computers, Service Accounts, or Groups box, add the users that you want to write to this container, and then click OK.
    Note that if a user who cannot write to this container installs SharePoint Server 2010, no new entry will be created. Consider giving all Authenticated Users the permission so that you can track all the objects.
11. In the Group or user names box, select the names that you previously added, and then under the Permissions box, clickAdvanced.
12. In the Permission entries box, select the names that you previously added, and then click Edit.
13. In the Permission Entry for Microsoft SharePoint Products dialog box, in the Permissions box, select the Allow check box forCreate serviceConnectionPoint objects, and then click OK.

Now re-run the wizard and hopefully this time it will go through successfully.

The whole process, with powershell comands as well, can be found here: http://technet.microsoft.com/en-us/library/ff730261.aspx

Happy updating SharePoint farm :)

Posted in: