{"id":655,"date":"2009-12-31T08:34:11","date_gmt":"2009-12-31T08:34:11","guid":{"rendered":"https:\/\/www.wapshere.com\/missmiis\/?p=655"},"modified":"2009-12-31T08:34:11","modified_gmt":"2009-12-31T08:34:11","slug":"group-management-comparison","status":"publish","type":"post","link":"https:\/\/www.wapshere.com\/missmiis\/group-management-comparison","title":{"rendered":"Group Management Comparison"},"content":{"rendered":"<p>Following on from my <a href=\"https:\/\/www.wapshere.com\/missmiis\/is-there-too-much-overlap-between-fim-2010-and-exchange-2010\">last post<\/a> about the overlaps between FIM and Exchange 2010 I wanted to clarify for myself the group management capabilities in FIM, Exchange 2010 and ILM.<\/p>\n<blockquote><p>Warning: I will have to revisit this post &#8211; as I haven&#8217;t yet installed Exchange 2010 in a production environment the Exchange comments are based on reading rather than hands-on experience, and in particular I&#8217;m unsure about the management of email-enabled Security groups.<br \/>\n<!--more--><\/p><\/blockquote>\n<table border=\"2\">\n<thead>\n<tr>\n<th colspan=\"4\">Exchange Distribution Groups<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td width=\"10%\">\u00c2\u00a0<\/td>\n<td width=\"30%\"><strong>FIM 2010<\/strong><\/td>\n<td width=\"30%\"><strong>Exchange 2010<\/strong><\/td>\n<td width=\"30%\"><strong>ILM 2007<br \/>\nor FIM Sync<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Rules based<br \/>\neg., &#8220;All Finance Dept&#8221;<\/td>\n<td>Managed and populated\u00c2\u00a0in FIM Portal.<\/p>\n<ul>\n<li>All users must also be represented in FIM Portal.<\/li>\n<\/ul>\n<\/td>\n<td>Dynamic Distribution Lists<\/td>\n<td>External genarator needed<br \/>\nEg., Group Populator<\/td>\n<\/tr>\n<tr>\n<td>Manually populated<\/td>\n<td>Managed and populated in FIM Portal.<\/p>\n<ul>\n<li>Owner approval workflow,<\/li>\n<li>Join and approve in Outlook,<\/li>\n<li>Create, join and approve in FIM Portal.<\/li>\n<\/ul>\n<\/td>\n<td>Managed and populated directly in AD<\/p>\n<ul>\n<li>Owner approval workflow,<\/li>\n<li>Request and approve in Outlook,<\/li>\n<li>Create in ECP.<\/li>\n<\/ul>\n<\/td>\n<td>No native functionality to permit manual group popluation.<br \/>\nSynchronizes membership lists from one system to another (eg., from a database table to AD).<\/td>\n<\/tr>\n<tr>\n<td>Other Management<\/td>\n<td>\n<ul>\n<li>Manage other attributes, eg., who can send to the list,<\/li>\n<li>Auto-generate new groups, eg., for a new Department or Location (with Workflow development).<\/li>\n<\/ul>\n<\/td>\n<td>Exchange management tools.<\/td>\n<td>Synchronize any attribute, though it must be generated somewhere outside ILM.<\/td>\n<\/tr>\n<tr>\n<td>Access Control<\/td>\n<td>Permissions to create, delete, modify granted in FIM Portal only.<\/td>\n<td>Permissions to create, delete, modify granted in AD &#8211; though RBAC simplifies.<\/td>\n<td>N\/A<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u00c2\u00a0<br \/>\n\u00c2\u00a0<\/p>\n<table border=\"2\">\n<thead>\n<tr>\n<th colspan=\"4\">Security Groups<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td width=\"10%\">\u00c2\u00a0<\/td>\n<td width=\"30%\"><strong>FIM 2010<\/strong><\/td>\n<td width=\"30%\"><strong>Exchange 2010<\/strong><\/td>\n<td width=\"30%\"><strong>ILM 2007<br \/>\nor FIM Sync<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Rules based<br \/>\neg., &#8220;All Finance Dept&#8221;<\/td>\n<td>Populated and managed in FIM Portal.<\/p>\n<ul>\n<li>All users must also be represented in FIM Portal.<\/li>\n<\/ul>\n<\/td>\n<td>N\/A<\/td>\n<td>External genarator needed<br \/>\nEg., Group Populator<\/td>\n<\/tr>\n<tr>\n<td>Manually populated<\/td>\n<td>Managed and populated\u00c2\u00a0in FIM Portal.<\/p>\n<ul>\n<li>Owner approval workflow,<\/li>\n<li>Join and approve in Outlook <em>only if the group has an email address<\/em>,<\/li>\n<li>Create, join and approve in FIM Portal.<\/li>\n<\/ul>\n<\/td>\n<td>Membership management for Security groups with email address?<\/p>\n<p>N\/A for non-email emabled Security groups.<\/td>\n<td>No native functionality to permit manual group popluation.<br \/>\nSynchronizes\u00c2\u00a0membership lists from one system to another (eg., from a database table to AD).<\/td>\n<\/tr>\n<tr>\n<td>Other Management<\/td>\n<td>\n<ul>\n<li>Replicate the groups\u00c2\u00a0to other systems &#8211; not just AD,<\/li>\n<li>Auto-generate new groups, eg., for a new Department or Location (with Workflow development).<\/li>\n<\/ul>\n<\/td>\n<td>Mail-enable existing AD Security groups using Exchange management tools.<\/td>\n<td>Replicate the groups\u00c2\u00a0to other systems &#8211; not just AD.<\/td>\n<\/tr>\n<tr>\n<td>Access Control<\/td>\n<td>Permissions to create, delete, modify granted in FIM Portal only.<\/td>\n<td>N\/A<\/td>\n<td>N\/A<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n","protected":false},"excerpt":{"rendered":"<p>Following on from my last post about the overlaps between FIM and Exchange 2010 I wanted to clarify for myself the group management capabilities in FIM, Exchange 2010 and ILM. Warning: I will have to revisit this post &#8211; as I haven&#8217;t yet installed Exchange 2010 in a production environment the Exchange comments are based&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"footnotes":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":[]},"categories":[43,42,22,34],"tags":[],"class_list":["post-655","post","type-post","status-publish","format-standard","hentry","category-exchange-2010","category-fim-2010","category-groups","category-ilm2007"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pkp1o-az","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/655","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/comments?post=655"}],"version-history":[{"count":10,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/655\/revisions"}],"predecessor-version":[{"id":665,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/posts\/655\/revisions\/665"}],"wp:attachment":[{"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/media?parent=655"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/categories?post=655"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.wapshere.com\/missmiis\/wp-json\/wp\/v2\/tags?post=655"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}