The attributes behind Message Delivery Restrictions

June 29, 2009

Very helpfull!! I was about to block sending email…

Paweł Jarosz - Sep 1, 2010

Very helpfull!! I was about to block sending emails to disabled accounts - not mailbox but accounts - so I can easily and quick retrieve some data from inactive inboxes. The solution is to create an empty group in AD and set the “dLMemSubmitPerms” parameter to accept messages only from that empty group! Amazing and great many thanks! If somebody else has problem here is the link to the forum with whole conversation -> http://wss.pl/frmThread.aspx?tid=98879

The attributes behind Message Delivery Restrictions

June 29, 2009

Do you know what attributes are used to control who can and can’t send to a Distribution List in Exchange 2003 and Exchange 2007? or Does it use a DACL?

Knowing such things is key if you are going to automate distribution list management through .NET programs, or MIIS/ILM/FIM, Quest ARS or any other tool that is talking to LDAP attributes. For Powershell you need a separate list since the names are different.

Dealing with the ILM 2 RC 0 Cert in Windows server 2003 domain

April 29, 2009

The Password Reset instructions ask us to use Group Policy to distribute the cert to the clients. This only works in Windows Server 2008 functional level domains. In Windows Server 2003 domains you can automate this using cerutil.exe
The following command will export the cert generated by ILM 2 install to the ilm2cert.cer file in the working directory

certutil -store trustedpeople IdentityLifeCycleManager2 ilm2cert.cer

This command can be used to import the cert from the command line
certutil -f -addstore trustedpeople ilm2cert.cer

Problems with Sync Rules in ILM 2 RC0 (err FIM RC0)?

April 20, 2009

If you will take a look at FIM(ILM) connections sc…

Unknown - Apr 2, 2009

If you will take a look at FIM(ILM) connections schema you will see that ILM MA has a direct SQL connectivity to FIM database (not through web service). As far as I know any change to metaverse schema fires up synchronization of this change to FIM database directly through SQL connection.

Problems with Sync Rules in ILM 2 RC0 (err FIM RC0)?

April 20, 2009

Well I had a problem with a recent install – the Metaverse Object Type Dropdown list was empty!

Turns out the source of this drop down list is the mv-data object type. However my install didn’t have this object. Obviously something was wrong. How does one create this object in the first place? Not directly in the portal. I am not certain when this object is supposed to be created. Install time? First export through the ILM MA? None of these seem to match up based on time stamps. It wasn’t created during install. It was created before the first import of the ILM MA, and the first Export of the ILM MA. It does match the time of the creation of the ILM MA in the Identity Manager tool in the synchronization engine. The object is created by a request generated by the Built In Synchronization Account (BISA) this is the account used by the ILM MA.

ILM FIM Webinar Custom Workflow -- Joe Zamora

April 20, 2009

Joe Zamora the maintainer of the Ensynch ILM 2 Custom Workflow Walkthrough is our main presenter at our next Webinar this Thursday at 9 AM Pacific. To register click on the image below. The code from our Pre-con workshop is posted on CodePlex Ensynch Custom WF Activities

http://feeds.feedburner.com/IdentityLifecycleManagerilmBestPractices

Install ILM 2 in a SharePoint Farm

April 16, 2009

As I endeavored to install the ILM 2 Portal into a SharePoint farm (WSS 3.0 SP 1) with a remote database I encountered the following problem:

The dreaded Premature Failure during installation.

When I turned on logging for the install and examined the file, I found:

Action 14:55:25: ConfigPortalAnonymousAccess.

CAQuietExec:

CAQuietExec: This operation can be performed only on a computer that is joined to a server farm by users who have permissions in SQL Server to read from the configuration database. To connect this server to the server farm, use the SharePoint Products and Technologies Configuration Wizard, located on the Start menu in Administrative Tools.

What's in name? Forefront Identity Manager 2010

April 16, 2009

In case you haven’t heard Zoomit VIA or rather Microsoft MetaDirectory Services has been renamed yet again, from Microsoft Identity Integration Server 2003 to Identity Lifecycle Manager 2007 to Forefront Identity Manager 2010 or FIM for short. For obvious reasons the L was dropped when the F was added (Forefront + ILM = FILM).

So ILM 2 => FIM 2010

(stole this graphic from Brad Turner’s blog – his Smart Art creations are beautiful – recently I have been studying smart art under his tutelage I hope to soon approach his level of skill)

a sprinkling of understanding Workflow in ILM 2

September 16, 2008

So by now all of you know that understanding Windows Workflow Foundation is going to be quite helpful in implementing ILM 2.

Having lived 9 of the last 12 months in Redmond, WA, I now understand a lot more about sprinkling

So I thought I would provide a sprinkling of understanding about Windows Workflow Foundation: a categorization of the built in workflows.

Cateory	Activity	Composite	Notes
Conditional	Invoke Web Service
Conditional	Conditional Activity Group
Conditional	IfElse
Conditional	Policy		Akin to a switch statement or Select Case
Conditional	While
Custom	Code
Error	Compensate
Error	Fault Handler
Error	Throw
Flow	Delay
Flow	EventDriven
Flow	Listen	X	2+ event driven
Flow	Parallel	x	2+ sequence for each
Flow	State
Flow	Sequence	X
Flow	SetState
Flow	StateInitialization	X
Flow	Suspend
Flow	Terminate
Flow	Transaction Scope