Adventures in identity management
I have just posted this article in the Greatest Hits series on the ILM Technet forum. http://social.technet.microsoft.com/Forums/en-US/identitylifecyclemanager/thread/f8ad045d-7252-4cd1-a189-d704a8f99129 The article covers various management tasks you can acheive with the standard AD MA, including provisioning and updating of users, mailboxes, contacts and distribution groups. There are quite a few code samples as well.
I last blogged about provisioning home directories such a long time ago that I talked about Netware. I also used a SQL table alongside to keep track of a status field as I was doing some end-of-life management – zipping up the folder and stowing it in an archive location. But we don’t need to…
I just got this error while attempting to provision Exchange 2007 users with ILM 2007 FP1: Event Type:   Error Event Source:   MIIServer Event Category:   Server Event ID:   6801 Date:      15.09.2009 Time:      10:14:02 User:      N/A Computer:   ILMSERVER Description: The extensible extension returned an unsupported error in MIIS. The stack trace is: “Microsoft.MetadirectoryServices.ExtensionException: ****…
One of the questions I was asked at my demo yesterday was “how much will I need to learn about Sharepoint to run FIM?” – which is a fair enough question, considering the emphasis on the Portal and the Sharepoint aspects. After a moment’s reflection my answer was “well… none really”. So far, with ILM…
A while back I proposed a powershell XMA approach to the problem of adding Exchange 2007 mailboxes to existing AD users. This was because my old method of adding an Exchange 2003 mailbox by populating a couple of extra attributes did not seem to work with Exchange 2007. However, in a recent thread on the…
I’m at TEC 2009 in Las Vegas at the moment, and it was officially announced by Microsoft today that the release date for ILM 2 is now Q1 2010, as opposed to the previously publicised date of “any day now”. We should be getting an RC1 version in Q3 this year. I asked if there…
I am working on a demo scenario : Certain information about users (name, department, job title, start date) should come direct from HR or from a simplified User Create form; other account-specific stuff (account name, mail nickname, mail database) should be automatically populated; and the account should be provisioned to AD/Exchange when all information is…
This post builds on yesterday’s which should be read first. Following are the extra Sync Rule and MA configurations that I made which added the Exchange 2007 support.
This post did start with a rant about how much trouble I had getting the codeless provisioning to work – but I’ve been working with it a bit more now, and have sufficiently got the hang of it, so I have rewritten the introduction to this post. This is not an attenpt to change history…
Here’s my scenario: The groups at my work are currently all populated manually in AD. We did discuss the steps needed to move some of the groups into a SQL table where they could be populated using query statements, but we never did get around to it. So I know that the group management capabilities of…