For a customer, a few colleagues and I are building a FIM 2010 RC1 environment. Within this customer, internals and externals were identified as follows: Internals --> Attribute 'SomeID' has a value Externals --> Attribute 'SomeID' does not have a value   Now how would you do that in a dynamic SET as the functions 'IsPresent' or ...

For a FIM 2010 RC1 I had to remove Windows Sharepoint Services 3.0 (WSS3) and reinstall it. After reinstalling it I had found out the webpage was showing me the exact same info as before the removal. Then I remembered there was also something like a Windows Internal Database which is needed by WSS3. When removing WSS3, the Windows Internal ...

Today I was working with ILM 2007 at a client's site. The client uses a W2K3 AD. ILM is installed on a W2K8 server and I wanted to use ''Active Directory Users and Computers (ADUC)'' with the ''attribute editor'' tab to check some attributes. To be able to view the ''attribute editor'' tab in ADUC you need to first enable Advance Features. After ...

If you have exported a Hyper-V VM to a folder and then try to import it again on another computer for example, you might get the following error:   [Window Title] Hyper-V Manager [Main Instruction] A server error occurred while attempting to import the virtual machine. [Content] Import failed. [Expanded Information] Import failed. ...

Based upon my post about ''Multiple Authoritative Sources for Group Memberships and how about precedence in ILM'', a technology partner and I were setting up and test/demo environment. The idea was as follows. The MGMT app is authoritative for groups and group memberships, which then flow into AD. Group Membership is established on business ...

If you are using Windows PowerShell Remoting right now with WinRM CTP3 (or lower) on Windows Server 2008, it may break after you apply Service Pack 2 (SP2) for Windows Server 2008 (W2K8). One of the symptoms is the WinRM service not starting anymore and throwing the following error.   The solution? Don't install SP2! J WAIT! There ...

Have you ever needed to create your own AD design, either for some customer or for your own company? If the answer is YES and you need good information as a reference, check the following. Microsoft has several documents and guides that can help you create your own AD design. It helps you with the basic Table of the Contents (TOC) of your ...

I was setting up a demo/test rig with all kinds of stuff to work with ILM2007 and provision objects. Part of that install was Exchange 2007 with SP1. So my one and only VM hosts the following: Windows Server 2003 SP2 ADDS, ADCS SQL 2005 SP2 Exchange 2007 SP1 + RollUp 3 ILM2007 FP1 (MIIS 2003 SP2 & CLM 2007) Visual Studio 2008 And I ...

A few days ago I was chatting with a colleague of mine in the UK about automated permissions assignment in AD through DSACLS. His reason to do this was because of CLM deployments where you had to use different kinds of Extended Rights that are defined in AD throughout the AD environment. Each AD deployment by default contains a set of Extended ...

What to do with user accounts that are or not mailbox enabled when the corresponding user(s) leave(s) the company. For that, and without buying a full blown solution you can create tooling in a simple way if the following process is sufficient for you.   IT IS A 5 STEP PROCESS: (1) Be sure to receive some notification a user has left the ...