A. Change registry settings
A known cause is the presence of the following key in the registry of the servers that are running the sandboxed host service. (An additional symptom of this cause is that the service stops a few seconds after starting.)HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\RPCIt does not matter what the value of the key is, or even if the key has any value. If the key is present, the user account in which the sandboxed host process runs must be able to read it because the process tries to when it starts up. By default, the user account does not have permission to read it (because, by default, the key is not present). You must give the Users group of the computer permission to read the key.
Note: It is not sufficient to give such permission to the Authenticated Users group, because the sandboxed process removes the Authenticated User token from the the user account in which the sandboxed host process runs. This also makes that account a restricted account which means it is not sufficient to give permission to read the key to that account alone. Since the account is not considered authenticated, doing this would have no effect. However, the account does inherit the permissions of the computer’s User group.
Take the following steps on every server which has the key and which is running the sandboxed host service.
- Open the registry editor and navigate to the key.
- Right-click the key and select Permissions.
- On the dialog that opens, click Add.
- In the dialog that opens, enter the following in the Enter the object names to select box: computername\Users.
- Click Check Names.
- After the name has resolved, click OK.
- Restart the sandboxed host service on all servers on which it is to run. It cannot hurt to do an iisreset as well.
B. Change host file to point clr.microsoft.com to local machine
You can redirect these attempts by adding the following line to the end of the hosts file located at C:\Windows\System32\drivers\etc:
127.0.0.1 crl.microsoft.comThis must be done on all servers running the sandboxed host service. Then restart the SharePoint 2010 User Code Host service on all these servers. It cannot hurt to do an iisreset as well.
C. Change system configuration files of Sandbox service to skip certificate verification in Code Access Security policies.
- Open SharePoint 2010 Central Administration
- Navigate to “Configure service accounts” in Security section
- Select ‘Windows Service – Microsoft SharePoint Foundation Sandboxed Code Service’ in the dropdown control.
- Then you will see which account is used for Sandbox Service.
(Get-SPManagedAccount
–Identity
"DOMAINUserCodeServiceAccont"
).Sid.Value
|
http://www.pdfshareforms.com/error-sandboxed-too-busy-handle-request/
and
Rick Kirkham from the Sharepoint dev team
http://blogs.msdn.com/b/sharepointdev/archive/2011/02/08/error-the-sandboxed-code-execution-request-was-refused-because-the-sandboxed-code-host-service-was-too-busy-to-handle-the-request.aspx
No comments:
Post a Comment