SharePoint Tips: Configuring Search in a One-Way Trust

(This article was previously published on Matt Milsark’s UnderstandSharePoint blog)

Search Sometimes Works …

No Search ResultsOkay, so has this ever happened to you? You install and configure a beautiful, fresh, and pristine SharePoint environment. Of course, you test search by performing a full crawl. Results are returned. All’s good. Right? Well you log in as a different user and run the same exact search. Instead of results,  however, you get that aggravating and dreaded no search results screen! Ugh…

What’s going on?!

This scenario occurs if you have a one-way trust established and are performing a search with a user from the trusted domain.

One Way Trust DiagramIn order to rectify this situation, you’ll have to configure your Search Service Application to store ACLs in Claims format. To do this, you’ll have to use PowerShell (credit goes to Sladecross for this).

$SearchApp = Get-SPServiceApplication %searchGUID%
$SearchApp.setproperty(“ForceClaimACLs”, 1)

Replace %searchGUID% with the GUID of the Search Service Application.
Run this if you know the GUID:

Get-SPServiceApplication
After you perform a full crawl, you’ll see search results, regardless of which domain you’re logged in.

I’ve also witnessed situations where the search crawling account was a domain account from the trusted domain. This does allow users from the trusted domain to perform search. However, the problem with this is twofold because configuring a managed account with an account from the trusted domain causes all sorts of wacky things:

1.) The inability to access the Configure Managed Accounts screen from the UI.
2.) When logged-in from the other domain (the non-trusted one) you won’t see search results. It becomes an either/or situation.

Using the PowerShell script allows any user, regardless of domain, to see the search results.

Oh, and you don’t have to force your web application to Claims based authentication.

So go ahead: run the script, run a full crawl, and allow both domain accounts the ability to accurately perform searches in SharePoint 2010. Hope that helps!

VN:F [1.9.22_1171]
Rating: 10.0/10 (6 votes cast)

About Matt Milsark

At Fpweb.net, Matt builds many of our clients' environments as well as supports and maintains them. These range from a simple dedicated single server to large multi-server SharePoint farms. Because of the sheer number of clients we have and the myriad of ways they use SharePoint, Matt has become intimately familiar with many aspects of SharePoint. Matt warns, "SharePoint is a beast. You may think you’re an expert at SharePoint, only to find out later you’re an expert at merely a small aspect of the beast's capabilities." Matt is also passionate about vinyl records. Check out his music site at lplives.com.
This entry was posted in SharePoint Tips & Tricks and tagged , , , , . Bookmark the permalink.

2 Responses to SharePoint Tips: Configuring Search in a One-Way Trust

  1. Smrutri says:

    It’s help me lot. Thank you very much

  2. Pingback: The Internet Can’t Teach You Everything – The More You Know…

Leave a Reply

Your email address will not be published. Required fields are marked *

Let's make sure you're human first: *