Share via


One or more servers can't retrieve People Picker credentials (SharePoint Server 2019)

APPLIES TO: no-img-132013 no-img-162016 yes-img-192019 no-img-seSubscription Edition no-img-sopSharePoint in Microsoft 365

Rule Name: One or more servers can't retrieve People Picker credentials.

Summary: The People Picker is configured to use specific credentials when searching for users in certain forests or domains. There are one or more servers in this farm that can't retrieve these credentials. Without these credentials, the People Picker won't be able to search for users in those forests or domains from these servers.

Cause: The application credential key wasn't found on these servers or they don't have the same application credential key originally used to store the People Picker credentials. Servers must have an application credential key to store and retrieve People Picker credentials. The application credential key must be identical on each server.

Resolution: Use the Set-SPApplicationCredentialKey cmdlet on each failing server to set the application credential key. If the current People Picker credentials were stored using a different application credential key, you must set the new application credential key on every server in the farm and then save the People Picker credentials again.


Additional resources

Training

Module

Secure Windows Server user accounts - Training

Protect your Active Directory environment by securing user accounts to least privilege and placing them in the Protected Users group. Learn how to limit authentication scope and remediate potentially insecure accounts.

Certification

Microsoft Certified: Windows Server Hybrid Administrator Associate - Certifications

As a Windows Server hybrid administrator, you integrate Windows Server environments with Azure services and manage Windows Server in on-premises networks.