Skip to content

{ Author Archives }

I have worked in systems design, implementation and administration for over 15 years. In the past few years I have become fascinated with Identity Management, and MIIS in particular, through a complex project I engineered from inception for a major international Business School. Through this blog I hope to share some of the lessons I have learned, and the thoughts I have about this fascinating area of IT.

FIM Newbies – please also look at the “old” sync methods before making a decision

There’s a lot of interest in FIM, and that’s great – but I worry about all the focus on the codeless sync rules, which I’m not a fan of. Meanwhile behind it we have the best, most efficient and most flexible sync engine out there, now in 64-bits, and ready to do all sorts of impressive [...]

Creating Groups in the FIM Portal using powershell

I’ve been having a bit of a play with the powershell interface to the FIM Portal. I wanted to pre-populate a demo environment with an interesting set of criteria-based Securoity and Distribution groups, but they get a bit tedious to create by hand, and I wanted to see if powershell was the answer.
I’m pretty pleased [...]

ConnectionChangeTime

This got me out of a pickle today. A slip-up in a join rule caused hundreds of bad joins to be made. There were far too many to un-do by hand, but then I figured out I could add a few lines to the Provisioning Sub of the MVExtension to remove all the joins made [...]

Account Deprovisioning Scenarios

I just posted this article in the Greatest Hits series of the ILM Technet forum. It describes some of the methods and considerations around disabling and deleting users accounts with ILM.

Group Management Comparison

Following on from my last post about the overlaps between FIM and Exchange 2010 I wanted to clarify for myself the group management capabilities in FIM, Exchange 2010 and ILM.
Warning: I will have to revisit this post – as I haven’t yet installed Exchange 2010 in a production environment the Exchange comments are based on [...]

Is there too much overlap between FIM 2010 and Exchange 2010?

I’ve been getting myself up to speed on the new feaures of Exchange 2010, and some of them look a little familiar…

Five things about MPRs

Next in my “Five things about FIM” posts – five things I have learnt about Management Policy Rules.

Five things about the FIM Portal

I’m having a big FIM week this week – in fact it’s more like a FIM Fortnight! I’ve delivered a three day training, demonstrated the product to a client, and I’m presenting FIM at a half-day seminar next week. (See here if you happen to be in Vaud, CH and you’d like to come.)
So while [...]

Managing Exchange 2000/2003/2007 with ILM 2007

I have just posted this article in the Greatest Hits series on the ILM Technet forum.
http://social.technet.microsoft.com/Forums/en-US/identitylifecyclemanager/thread/f8ad045d-7252-4cd1-a189-d704a8f99129
The article covers various management tasks you can acheive with the standard AD MA, including provisioning and updating of users, mailboxes, contacts and distribution groups. There are quite a few code samples as well.

A real life SCR failover

Quite unexpectedly this week, I got to genuinely use SCR “in anger” when I killed a client’s production Exchange 2007 server by attempting to install SP2 on it (for that whole sorry story see http://social.technet.microsoft.com/Forums/en/exchangesoftwareupdate/thread/713d2b17-f19d-4eaf-8146-c51f59942d08?prof=required). I’ll keep my swearing about SP2 off the page here and focus on the hero of the week – which was SCR!