SharePoint Pain

Applies to SharePoint 2016; not tested on other versions of SharePoint.    Symptoms   After changing the farm account password in AD, SharePoint fails to update the password with the “Use existing password” option in Central Admin:   Error Message:   Error deploying administration application pool credentials. Another deployment may be active. An object of the type Microsoft.SharePoint.Administration.SPAdminAppPoolCredentialDeploymentJobDefinition named “job-admin-apppool-change” already exists under the parent Microsoft.SharePoint.Administration.SPTimerService named “SPTimerV4”. Rename your object or delete the existing object.   Screenshot:   Findings :   ·         Correlation ID in ULS shows misleading errors as none of reported services are configured for SharePoint: o    Error updating the account password for process identity Id c3c6d96f-3994-4630-8c03-f019b0f22757, please fix manually. An object ...

Symptoms   On Central Admin, Health Analyzer shows "The timer service failed to recycle" warning:   Cause The Timer Service Recycle job was blocked by other running Timer jobs, such as: The running jobs that block the Recycle job could be stuck in the running mode and need to be verified first. Resolution 1.       Make a note of the Failing Servers in the report and run the Timer Service Recycle Job from Central Admin > Monitoring > Job Definitions > Timer Service Recycle .  ( Direct URL:  https://<caDomainName>/_admin/JobEdit.aspx?JobId=<guid>) Click the "Run Now" button. This will kick off the Job across all servers in the farm.  2.       Go to the Running Jobs page (https://<caDomainName>/_admin/ServiceRunningJobs.aspx) and wait until the Job finishes. It will take several minutes. 3.       Check the Job History page (https://<caDomainName>/_admin/Tim...

Symptoms Office Online Server fails to open Office documents and leaves this error in the Office Web Apps event logs:   System.ServiceModel.Security.SecurityNegotiationException: Could not establish trust relationship for the SSL/TLS secure channel with authority '<servername>:809'. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.     Cause IIS sites have the unsupported HSTS configuration: HSTS ==> “ Redirect Http to Https ” It needs to be enabled for the IIS security, but it breaks the Office Online functionality. Resolution Uncheck (disable) the “ Redirect Http to Https ” checkbox for both HTTP80 and HTTP809 sites: The “ Enable ” and “ IncludeSubDomains ” options do not cause the outage. Therefore, they can be left enabled.  No ...