Script: Compare-ADGroups.ps1

I recently wanted to do some analysis of existing groups in a well established AD that has a lot of groups (more groups than users in fact). I was hoping to find groups that looked like good candidates for conversion to role-based (aka criteria-based) groups.

Pre-wired access control

Here’s a picture I once used in a presentation (credited to wallwin.ca) to illustrate the mess access control in directories and applications often looks like when you try and do any kind of review and analysis. These days I don’t go into server and patch rooms all that often, but even so it’s been a long…

Tracking down a duplicate ObjectSid

Most people who work with FIM will be familiar with the “Value Violates Uniquess” errors when you try to export an object through the FIM MA that conflicts with an existing object on an attribute that has enforced uniqueness in the FIM Service. If the duplicate is on a string attribute like AccountName then it’s…

Why I care so much about identity data quality

I feel like I’m always trying to convince people that the quality and maintence of identity data is important and worth putting effort into, while they nod and say “sure, sure”, while thinking “this crazy lady knows nothing about reality”. But you know what? I’m not crazy – and here are some reasons why.

Busy year

I’ve really been neglecting this blog this year. After averaging two posts a month over the previous 8 years of this blog (yes it really has been that long – started May 2007), 2015 just hasn’t been much of a blogging year so far. Partly that’s because of the FIM Team User Group – with…

Things you can learn about IdM projects from watching The Imitation Game

I just saw The Imitation Game and, while mostly I was absorbed in the story and particularly Benedict Cumerbatch’s convincing performance, I did recognise some themes from Identity Management projects I’ve worked on. Note there may well be spoilers in this post – I think the Turing/Enigma story is pretty well known anyway, and the film has opened in…

Data Quality Script for the FIM Service

Today I presented a session called “all about data” at the FIM Team User Group meeting. One of the goodies I shared was my Data Quality script. The point of this script is to run against the FIM Service on a regular basis and look for anomalies that can be easily fixed – for example…

New Documentation Script versions

I’ve shared the new version of the documentation scripts here: https://unifysolutions.jira.com/wiki/display/FIMTEAMCOM/Automatic+Word+Documentation The best new feature is in Document_SyncConfig.ps1 which now includes an end-to-end attribute flow map based around Metaverse object/attribute – so showing all IAFs and EAFs going via each Metaverse attribute.