Blog

FIM RC 1 is here – what’s new?

FIM RC 1 is here. Microsoft released it on Sept 30th which is the end of Q3 of 2009 which means the ILM/FIM team at Microsoft met their stated deadline announced back in March. Here is the download: http://technet.microsoft.com/en-us/evalcenter/cc872861.aspx What’s new: Gil Kirkpatrick has a nice post about the differences in the data structure: Auditing FIM 2010 RC1 Darryl Russi a Sr. Test Lead at Microsoft has started blogging about FIM RC 1 performance:

Continue reading

ILM 2 RC 0 -- Luke, Check the Transaction Log!

A few weeks ago I encountered an ASP.NET error when I tried to access http://myilmserver/identitymanagement/ Eventually I went to my SQL Server and discovered that despite having space on the disk and Autogrow turned on the Transaction Log was full and wouldn’t grow anymore. So if you encounter this error then maybe you too can listen to the force telling you to check the SQL Server Transaction Log for MSILM.

Continue reading

AD RMS on R2 -- new Federation Features

AD RMS on Windows Server 2008 R2 adds a really slick feature blogged about here: Group Expansion for Federated Users Prior to R2 to issue a use license to a federated user they need to specifically be granted permissions. With Windows Server 2008 R2 you can create a contact matching the external federated user and then place the contact in the group and then they have the same RMS permissions as that group.

Continue reading

At it again -- Geneva Part II

Once more we invite you to another Ensynch Identity Management webinar. This is part 2 in our series of 4 on Geneva (ADFS, WIF). This one is going to be led by Chris Calderon one of our ADFS Experts, so naturally this will be filled with excellent technical content. As will Part 3 as it focuses on Windows Identity Foundation. Webinar Agenda: - How Geneva provides business value to organizations seeking Single-Sign-On (SSO)?

Continue reading

MVP for the 3rd time

Both my colleague Brad Turner and I were renewed for ILM MVP. I am glad to receive this honor another year. Congrats to new ILM MVP Marc Mac Donnell You can see a list of all ILM MVP’s that have chosen to make their profiles public (Marc hasn’t setup his yet). I just hope I can win the MVP at home! http://feeds.feedburner.com/IdentityLifecycleManagerilmBestPractices

Continue reading

Webinar: How Microsoft Geneva Streamlines Business

When: Wednesday, July 29, 2009 10:30 to 11:30 (PST) 12:30 to 1:30 (CST) 1:30 to 2:30 (EST) [Register Now] Presenters: David Lundell, ILM MVP Identity Management Practice Leader, Ensynch Jonathan Sander IAM and Security Analyst Quest Software Webinar: How Microsoft Geneva Streamlines Business - Learn How to Reap the Benefits of True Web Single-Sign-On and Federation Has your organization been forced to deploy one-off solutions to solve login or compliance problems with a newly deployed technology?

Continue reading

4th of July -- Independence Day

233 years ago, 56 men signed a document and began a labor to give birth to a nation. I am very grateful for their service and for their sacrifices and for each and every soldier, and dutiful civil servant since then. They have afforded me and my family a great many blessings. As well some of my family members have been privileged to serve. One of my grandfathers taught ground school during World War II and the other served in the Army and was stationed in Greenland.

Continue reading

The attributes behind Message Delivery Restrictions

Very helpfull!! I was about to block sending email… Paweł Jarosz - Sep 1, 2010Very helpfull!! I was about to block sending emails to disabled accounts - not mailbox but accounts - so I can easily and quick retrieve some data from inactive inboxes. The solution is to create an empty group in AD and set the “dLMemSubmitPerms” parameter to accept messages only from that empty group! Amazing and great many thanks!

Continue reading

The attributes behind Message Delivery Restrictions

Do you know what attributes are used to control who can and can’t send to a Distribution List in Exchange 2003 and Exchange 2007? or Does it use a DACL? Knowing such things is key if you are going to automate distribution list management through .NET programs, or MIIS/ILM/FIM, Quest ARS or any other tool that is talking to LDAP attributes. For Powershell you need a separate list since the names are different.

Continue reading

H30, Geneva Cola, Sitrus and Orange Fizz

Back in business school I was a connoisseur of fine commercials. Recently I watched a commercial for Lipton Ice Tea (note I am a teetotaler who doesn’t drink tea) and I have to admire their cleverness in coming up with names for competitor products (see the title) in their “Lipton Tea, I think I love you” commercial. (Lyrics here) Really the names are clever although the best is the H30 – I just love it, a chemical compound that as far as I can tell can’t exist, but we all know they are making fun of flavored water.

Continue reading