Adventures in identity management
Just spent the morning looking at Jackson Shaw’s IdM and AD blog. Jackson once worked at Zoomit, the company that created the original MIIS, before being bought out by Microsoft. He’s now at Quest, who seem to doing some interesting things with IdM, including tools which integrate with MIIS. Perhaps I’ll get to have some…
Once you get the hang of Extensible MAs a whole world of possibilities opens up. If you’re trying to achieve something that is related to Identity in some way, and it’s scriptable, then you can do it with an XMA. One such example I came across, in a university environment, was personal websites. Certain users…
Some tasks seem like they should be difficult to implement, but are in fact beautifully simple; while others tangle you up in complications for no apparently good reason. In my MIIS experience I’ve had far more trouble than seems right with Description fields. What I’m talking about here are the types of free-text comment fields…
Thanks to Tomek for letting me know about the DEC2007 conference in Brussels this September. I am now signed up and am geekishly excited about the prospect of spending three days surrounded by fellow MIIS enthusiasts! I am obviously very far gone. I’m also looking forward to being back in Brussels where I lived for…
This method has now been updated for Exchange 2007. Yesterday I posted about archiving home directories by zipping them with an extensible MA, and today I’m going to write about doing something similar with Exchange mailboxes. Exchange mailboxes are most usefully archived to PST files, and the only way I found to automate it was…
One of the things I love about MIIS is that it can be put to work on any object type you care to name, as long as you can cobble together some sort of automation process. One such example is a home directory. While needed by the user, it is not part of the user…
The most time critical aspect of an MIIS installation is likely to be the Password Sync. There are always going to be delays in syncs through the MAs, and people should be used to that – but when a user changes their password they are going to expect it to go straight through. If you…
During the installation of MIIS you are shown a list of groups (MIIS_Admins, MIIS_Joiners etc) which will be created. The groups are local groups, and I expect that most people, on their first installation, just accept that. But wouldn’t it be nice if, at that point, a little more explanation, or perhaps some alternative options…
Here’s a really, really useful trick. You can copy the MicrosoftIdentityIntegrationServer database to another server, run miisactivate, and, within no time at all, have an exact replica of your live server. Let me just spell this out – not only will you have all your MAs, your Metaverse fully populated, and your Connector Spaces fully populated;…
A frustrating deficiency of the Identity Manager application is the inability to copy the list of disconnectors from the Joiner page. I really don’t understand why this functionality wasn’t included – was it just an oversight? Ploughing through the disconnectors is an inevitable part of taking over an existing directory, and to do that you’re…