Skip to content

{ Category Archives } ILM

FIM Newbies – please also look at the “old” sync methods before making a decision

There’s a lot of interest in FIM, and that’s great – but I worry about all the focus on the codeless sync rules, which I’m not a fan of. Meanwhile behind it we have the best, most efficient and most flexible sync engine out there, now in 64-bits, and ready to do all sorts of impressive [...]

Creating Groups in the FIM Portal using powershell

I’ve been having a bit of a play with the powershell interface to the FIM Portal. I wanted to pre-populate a demo environment with an interesting set of criteria-based Securoity and Distribution groups, but they get a bit tedious to create by hand, and I wanted to see if powershell was the answer.
I’m pretty pleased [...]

Account Deprovisioning Scenarios

I just posted this article in the Greatest Hits series of the ILM Technet forum. It describes some of the methods and considerations around disabling and deleting users accounts with ILM.

Group Management Comparison

Following on from my last post about the overlaps between FIM and Exchange 2010 I wanted to clarify for myself the group management capabilities in FIM, Exchange 2010 and ILM.
Warning: I will have to revisit this post – as I haven’t yet installed Exchange 2010 in a production environment the Exchange comments are based on [...]

Is there too much overlap between FIM 2010 and Exchange 2010?

I’ve been getting myself up to speed on the new feaures of Exchange 2010, and some of them look a little familiar…

Five things about MPRs

Next in my “Five things about FIM” posts – five things I have learnt about Management Policy Rules.

Five things about the FIM Portal

I’m having a big FIM week this week – in fact it’s more like a FIM Fortnight! I’ve delivered a three day training, demonstrated the product to a client, and I’m presenting FIM at a half-day seminar next week. (See here if you happen to be in Vaud, CH and you’d like to come.)
So while [...]

Managing Exchange 2000/2003/2007 with ILM 2007

I have just posted this article in the Greatest Hits series on the ILM Technet forum.
http://social.technet.microsoft.com/Forums/en-US/identitylifecyclemanager/thread/f8ad045d-7252-4cd1-a189-d704a8f99129
The article covers various management tasks you can acheive with the standard AD MA, including provisioning and updating of users, mailboxes, contacts and distribution groups. There are quite a few code samples as well.

Creating user home directories – Windows version

I last blogged about provisioning home directories such a long time ago that I talked about Netware. I also used a SQL table alongside to keep track of a status field as I was doing some end-of-life management – zipping up the folder and stowing it in an archive location.
But we don’t need to be [...]

ExternalEmailAddress is mandatory on MailUser

I just got this error while attempting to provision Exchange 2007 users with ILM 2007 FP1:

Event Type:    Error
Event Source:    MIIServer
Event Category:    Server
Event ID:    6801
Date:        15.09.2009
Time:        10:14:02
User:        N/A
Computer:    ILMSERVER
Description:
The extensible extension returned an unsupported error in MIIS.
The stack trace is:

“Microsoft.MetadirectoryServices.ExtensionException:
**** ERROR ****

ExternalEmailAddress is mandatory on MailUser.

**** END ERROR ****

**** ERROR ****

The mail [...]