Hi David, I have a dependent sync rule and I have… V - Jul 1, 2013Hi David, I have a dependent sync rule and I have confirmed that it will not disconnect the object when the dependent sync rule is removed. However, everytime the dependent sync rule is removed, FIM tries to export a “Provisioning Delete/Add” to AD. Have you experienced this issue? Any tips would be appreciated. Thanks
Recently, I discovered that under certain conditions the removal of a dependent sync rule could cause the disconnection of objects in AD or other connected data sources. So I had to investigate the inner workings of dependent Sync Rules to uncover this mystery and fix it. FIM allows us to create dependent Sync Rules. First let me explain the what and then a little why. Then allow me to explain a bug that I discovered and how to work around it.
/Remi - Nov 3, 2010This comment has been removed by the author. Hello David! :) Have you got the time to test this in a lab ? I`am experiencing the same problem. And I`ve tried everything without any luck. http://social.technet.microsoft.com/Forums/en/ilm2/thread/deae65d0-ede6-4b36-994b-3695d0cc8260
Lessons learned: Run the Do a FIM MA account configuration quick test script. Always refresh the schema of the FIM MA using the real FIM MA Service Account which we usually call svc-FIMMA. Scenario: You have just modified the schema of FIM Service by creating a new Boolean attribute and have bound it to the user resource type. You refresh the FIM Schema, select the new attribute setup a direct export attribute flow from the corresponding Boolean metaverse attribute to the FIM MA attribute.
Watch out for the latest FIM hotfix. It appears i… Chris Clayton - Nov 4, 2011Watch out for the latest FIM hotfix. It appears it will treat the % as a literal rather than a SQL wildcard.
A little while ago I encountered some rather strange behavior of a Set vs. the XPATH query in FIM 2010. Using the Export-FIMConfig with the -onlyBaseResources -CustomConfig switches I run the following query to see if there are any users without a DisplayName /Person[not(starts-with(DisplayName,''))] It showed 20 So then I created a set, called “~ People with no displayname”, with that as the custom filter. I checked it doesn’t violate any of the limitations listed in the Business Policy Modeling doc (which I must say is a pretty good doc)
I think they can really help in a lot of ways. Acc… Karl - Sep 4, 2011I think they can really help in a lot of ways. Accelerate your business with the help of these factors. Thanks a lot for sharing. business consultant
Jun 10, 2010 1:00 p.m. Eastern / 10:00 a.m. Pacific (60 minutes) To Register follow this link Christopher Yeich - Editor, Strategic Content - Ziff Davis Enterprise David Lundell - Identity Management Practice Director, Ensynch | Microsoft Identity Management MVP Jonathan Sander - IAM and Security Analyst - Quest Software Has your business experienced identity theft, with unauthorized access to your systems, data, and/or trade secrets?
Searching an entire database for a Guid or Unique Identifier can be a bit of a tricky proposition. However a little bit of using T-SQL to generate T-SQL and viola DECLARE @GUIDHunted nvarchar(60) SET @GUIDHunted = ‘0A24EC0C-65EE-4519-89DF-ABD3DD24F7EF’ SELECT *, ‘UNION ALL SELECT '’' + s.name + ‘.’ + ao.name + ‘'’, count(*) FROM ' + s.name +'.[' + ao.name + ‘] WHERE ' + ac.name + ' = '’' + @GuidHunted + ''''
At the FIM Birds of a Feather (BOF) after a discussion about FIM database backups I was asked to make a blog post to more fully elucidate the benefits of using the full recovery model. Since Recovery models affect the transaction log you may find it useful to have the following background about transaction logs: •The Data in tables and indexes are stored in data files not the transaction log
