Quantcast
Viewing all 6657 articles
Browse latest View live

MIM portal unable to scroll in iPAD

Hi

When our customers use MIM portal from iPad the scroll doesn't work on the popups showing the the details.

This is only on the iPAD and not on other devices works as expected when emulated through the browsers iphone or ipad emulated views.

Please let me know if you have faced the same issue and if so there are any solutions for it.


-Dhayanandh


Forefront identity manager agent :Event id 3 error

Hello, help me with the error in the log, the synchronization server

Forefront identity manager agent :Event id 3 error

Unhandled exception, the CLR will not terminate: System.AppDomainUnloadedException: Attempted to access an unloaded AppDomain..

Thanks!

FIM/MIM Certification

Hi,

Are there any certification exams related to FIM/MIM?

In the past there was exam 70-158, but it was retired and I can´t find any replacement. Any info about this?

By the way, the Technet virtual labs about FIM 2010R2 are also gonne. Any replacement or equivalent for that?

Thanks,

HC

Azure SQL database as DB for MIM 2016?

Hey guys, 

Is it supported or even possible to use an Azure SQL database as the DB for the MIM Service?



Andreas Hultgren<br/> MCTS, MCITP<br/> <a href="http://ahultgren.blogspot.com/">http://ahultgren.blogspot.com/</a>

Failed to retrieve schema, Event ID 6331

Hello All,

I upgraded the FIM2010 installation to MIM2016. Everything seems to be working except I cannot refresh the schema of FIMMA.

I provided the FIM Service Management Agent Account with permissions to the %programfiles%\Microsoft Forefront Identity Manager\2010\Synchronization Service\Bin folder. This did not help.

Here is the error message I get:

A update on the configuration of a MA or MV failed to replicate to a target connector directory that is capable  of storing MA/MV configurations.  As a result, the MA/MV configuration data in this connector directory is not up to date.  Please correct the condition that causes the error, and triggers a resync by updating the password information of the target MA.

Additional information:
Error Code: 0x80230020
Error Message: (Management agent encountered an error exporting to the connected directory.)
Operation: Clean up MAs

Please help,

Thank you

New-FimWorkflowDefinition -Xoml some content disappears

Hi,

I created a script to deploy a FIM worklow.

The wf definition contains a powershell activity (MIMWAL) and I noticed that the WF is created normally but thepowershell variables are removed.

i.e: if I have a PS activity like this (code shortened for legibility):

  <ns1:PowerShellActivity Script="$Workflow = $fimwf.WorkflowDictionary" x:Name="authenticationGateActivity1" /> 

   


Then the PS activity is created and presents in its body only rhe following:
= .WorkflowDictionary


Note: if I import the xoml using the FIM Portal page, the same xoml loads correctly. The issue occurs only when I deploy with New-FimWorkflowDefinition.

Is this a known issue?

Thanks,

JD

Do you want to be acknowledged as Microsoft FIM 2010 Guru? Join June 2019 competition!

Image may be NSFW.
Clik here to view.

What is TechNet Guru Competition?

Each month Microsoft TechNet Wiki council organizes a contest of the best articles posted that month. This is your chance to be announced as MICROSOFT TECHNOLOGY GURU OF THE MONTH!

One winner in each category will be selected each month for glory and adoration by the MSDN/TechNet Ninjas and community as a whole. Winners will be announced in dedicated blog post that will be published inMicrosoft Wiki Ninjas blog, a tweet fromMicrosoft Wiki Ninjas Twitter account, links will be published atMicrosoft TNWiki group on Facebook, and other acknowledgement from the community will follow.

Some of our biggest community voices and many MVPs have passed through these halls on their way to fame and fortune.

If you have already made a contribution in the forums or gallery or you published a nice blog, then you can simply convert it into a shared wiki article, reference the original post, and register the article for the TechNet Guru Competition. The articles must be written in June 2019 and must be in English. However, the original blog or forum content can be from beforeJune 2019.

Come and see who is making waves in all your favorite technologies. Maybe it will be you!


Who can join the Competition?

Anyone who has basic knowledge and the desire to share the knowledge is welcome. Articles can appeal to beginners or discusse advanced topics. All you have to do is to add your article to TechNet Wiki from your own specialty category.


How can you win?

  1. Please copy/Write over your Microsoft technical solutions and revelations to TechNetWiki.
  2. Add a link to your new article on THIS WIKI COMPETITION PAGE (so we know you've contributed)
  3. (Optional but recommended) Add a link to your article at the TechNetWiki group on Facebook to get feedback and tips from the council members and from the community. The group is very active and people love to help. You can even get direct improvements to your article before the contest starts.

Do you have any question or want more information?

Feel free to ask any questions below, or Join us at the official MicrosoftTechNet Wiki groups on facebook. Read More about TechNet Guru Awards.

If you win, people will sing your praises online and your name will be raised as Guru of the Month.

Image may be NSFW.
Clik here to view.

PS: Above top banner came from Bala S.


JAYENDRAN ARUMUGAM

Image may be NSFW.
Clik here to view.
Image may be NSFW.
Clik here to view.
Image may be NSFW.
Clik here to view.

Azure AD Connect - sync-generic-failure - A different entry with target identifier already exists

Dear,

In an Exchange Hybrid scenario, I have connected Azure AD Connect with two different Active Directories, one is the Account forest and the other is the Resource forest.

The user object which causes the error in Azure AD Connect has three connectors:
- Account forest
- Resource forest
- Azure AD

The sync error occurs on the connector from the Account forest during synchronization process.

In the following post I read that an solution approach would be to move the affected user object into an OU which is out of scope, run a delta sync, move the user object back to the original OU which is in scope, run again the delta sync: (https://social.technet.microsoft.com/Forums/en-US/9f528006-d5aa-4ca1-b873-ca802d85ad07/syncgenericfailure-error-in-adconnect?forum=ilm2) 

Unfortunately, I can't use that solution approach. I need a solution that does not require deletion of the user object.

Does anyone have an idea or similar experience?

I appreciate any help or information.

This is the stack trace from the sync error:

<extension-error-info><extension-name>SyncRulesEngine</extension-name><extension-callsite>not available</extension-callsite><extension-context>not available</extension-context><call-stack>A different entry with target identifier already exists
   at Microsoft.MetadirectoryServices.SyncRulesEngine.Server.ObjectLinkGraph.AddLink(IObjectLinkModification link, IEntryModification sourceEntry, IEntryModification targetEntry)
   at SyncManagedUtil.PopulateGraphLinks(IObjectLinkGraph graph, CMvObject* mvObject, IEntryModification csEntry, IEntryModification mvEntry)
   at ObjectNamespace.LoadLinkedTargetObjects(IObjectLinkGraph graph, IEntryModification targetMvObject)
   at Microsoft.MetadirectoryServices.SyncRulesEngine.JoinModule.LinkSourceToTarget(IEntryModification sourceObject, IEntryModification targetObject, SynchronizationRule syncRule, SyncRulePipelineArguments pipelineArguments, Boolean joiningToExistingTarget)
   at Microsoft.MetadirectoryServices.SyncRulesEngine.JoinModule.ExecuteJoinProcessingForSyncRule(IEntryModification sourceObject, SynchronizationRule syncRule, SyncRulePipelineArguments pipelineArguments, AttributeFlowModule attributeFlowModule, Guid excludedMVObjectIdWhenSearchingGraphForJoin)
   at Microsoft.MetadirectoryServices.SyncRulesEngine.JoinModule.Execute(PipelineArguments argsToProcess)
   at Microsoft.MetadirectoryServices.SyncRulesEngine.Server.SyncEngine.RunSyncPipeline(SyncRulePipelineArguments pipelineData, List`1 pipelineChain)
   at Microsoft.MetadirectoryServices.SyncRulesEngine.Server.SyncEngine.Synchronize(SynchronizationOperation operation, IObjectLinkGraph inputGraph, Boolean preview)
   at ManagedSyncRulesEngine.Synchronize(ManagedSyncRulesEngine* , CCsObject* sourceCsObject, CMvObject* mvObject, SynchronizationOperation operation, Char** error)


powershell script to search all users in PAM

Hello,

I was looking out for a powershell script that would output all PAM users in the environment with their SourceAccountName & PrivAccountName attribute, was also looking to add the PAM linked user attribute too for all these users. All these users in the PAM bastion domain are linked to our primary domain & we want a report with all these linked details. 

MIM 2016 Troubleshooting Resource Control Display Configuration

Whenever I attempt to view or export the configuration data from any of the RCD configurations, I receive the "Unable to process your request."ErrorPage.aspx

Everything else seems to work fine except Users Photo is not displayed on the General TAB of users properties page.
I've tried searching on line but all the troubleshooting TIPS are out of date.  This is all I see in the event log:

The portal was unable to complete a request and showed a user the default error page.

An unhandled exception was caught.

Image may be NSFW.
Clik here to view.


Robert W. Kirchhof

Provisioning users in external AD

We are looking to use FIM or MIM 2016 to sync users from AD on one domain to AD on a second domain and provision those accounts for use. We dont have any need for the portal for portal features from what I can tell unless there are some options for provisioning that are only in there.

My question is basically this. Is it possible to sync accounts from one AD, have them created in the other AD, just using the sync engine and rules? Or do we have to use the portal and outbound sync rules in there to actually get the accounts to create in the other AD database. We tried it briefly before breaking for the day but it didnt seem to do anything. Im wondering if we need the relationship page int he portal to actually get that sync to work. We are all testing this out with no experience with it so we are pretty blind.

Thanks

FIM Self Signed Certificate in the personal store

Hi,

I've noticed on my 4 FIM servers (SQL, sync, portal and SSPR) I have a self signed cert in the personal computer store similar to that shown in the pic. I never specifically installed these and I don't know what they are used for (if at all). One of the issues is that the certificates are being flagged as self signed and insecure by Nessus scans - before I remove them I wanted to ask if anyone else has seen this. I'm wondering if the FIM or SQL installer installs the cert into the personal store without informing the admin - looking at the certs I can't ascertain a purpose as the friendly name and SAN simply matches the server name.

I'd be interested to hear the thoughts of others on this.

Thanks

Image may be NSFW.
Clik here to view.


Renew or reinstall MIM Service certificate

What are the requirements for the MIM Service certificate, or steps to renew it?

Get MA Run Statistics including Object Details

Hi Experts,

Is there a way to pull last run details of an MA with counters and Object details?

I did tried LithNetMIISAutomation and WMI interface.

Seems like there is no interface to pull out the object details of the last run except the Sync Manager Console.

Is there any programmatic way of pulling it?

Thanks,

Siva


Thanks and Regards, Siva Kumar Balaguru

Request MPR - Multiple attributes on Target - one Common WF

Hi,

I would like to have a Request MPR to call a WF when any of 4 fields are changed and apply a common logic on them.

I have it implemented with 4 diferrent MPR and 4 different workflows (1 por each attribute)

How can I do this with just 1 MPR (with multiple attributes target) and then on the workflow be able to know wich attributes were changed ( and which triggered the wf) and apply my WF logic only to those changed fields?

Thanks,

JD



Password Sync to target domain fails after a couple of hours

Hi All,

We're running in to issues attempting to sync passwords between two domains that appears to be related to a kerberos timeout following an FIM 2010 to MIM 2016 upgrade.

We manage the domain in which MIM 2016 is configured (CORP) and have an MA configured for the domain (EXT) we're pushing passwords to and everything works perfectly well for a couple of hours then it begins to fail. Originally the issue was reported as being intermittent but after some investigation I've found the following:

After providing credentials for the service account selecting "Connect to Active Directory Forest" or selecting "Containers" from within the "Configure Directory Partitions" password sync begins to work immediately.
Testing password resets through the day works without issue.
Testing the following morning fails to reset the password on the target domain.
Providing credentials again resolves the issue immediately.

Each time I provide the credentials in the MIM console the following 2 events are logged on the server (CORP):

Security-Kerberos
Error code: 0x20 KRB_AP_ERR_TKT_EXPIRED
Extended Errpr: "0xc0000133 KLIN(0)"
Server Realm: EXT.FQDN

Security-Kerberos
A kerberos error message was received" on logon session CORP.FQDN\SVC_FIMSync
Error Code: 0x19 KDC_ERR_PREAUTH_REQUIRED
Server Realm: EXT.FQDN

I'm aware the first error indicates a potential issue with time sync between the two domains but we've had a look at this and results show a difference of +/- 00.000xxxx so don't believe this is the cause.

Has anyone ever come across a similar issue? 

Any help is appreciated.

FIM - Change an attribute value using Extentions

Hi All,

Im trying to modify a value when the value gets pushed from the MA to the MV but only when the item is a new entry.

Im using the MA MapAttributesForExport event to run the code.

Any guidance would be appreciated!

MIM Support for Windows Clustering

Hello,

Does MIM 2016 support Windows Server 2016 Cluster Services?

I recently attempted to install MIM on what turned out to be a Windows Server 2016 Cluster rather than a SQL Server cluster (shared disks, etc).  My attempts failed as I couldn't get the MIMMA properly connected to the MIM Service database.  So we now have 2 rebuilt standalone servers running SQL Server 2016 standard and MIM is now successfully installed and running with all of the relevant databases installed on one of the SQL Servers.  My question is, is it now possible to apply a Windows Server 2016 cluster with the two SQL Servers as nodes on the cluster, or will this break MIM?

Thanks for your thoughts in anticipation

MIM SSPR - Different Security Questions in QA Gate for different users set

Is it possible to setup different types of security questions in QA GATE for different sets of user? I

s this possible in MIM? If yes, then can anyone give a clue about it?



F.

MIM SSPR - Power Shell Script for Registering Users Automatically

I came to know from a video on internet that it is possible to register users through a powershell script automatically by setting answer to security questions. Can anyone provide me with such script?

 


F.

Viewing all 6657 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>