MIIs

How many attributes can you have in the Metaverse?

Back in 2013 I published 5 posts about the Secrets of the Metaverse: Parts 1-5: What is the Metaverse? How is the Metaverse data stored? Is there a limit to how many Metaverse attributes I can have? Has access to the metaverse gotten faster with recent releases? How do I safely query the metaverse? Added (Aug 5 2015): How Many Metaverse Attributes can I have? The third post was about how many attributes you can have in the Metaverse in which I said that the mms_metaverse_lineageguid table limits us to 502 single valued non-reference attributes in the Metaverse.

Continue reading

Mistaken Identity

Years ago, I walked into the client site a few months into an Identity Management project, and the PM told me his account had been deactivated by mistake as an employee with the same last name and same first initial was terminated, and they termed his account by mistake. Ironic. A few years before that I visited a client whose VP of HR had his account disabled when they let the janitor go.

Continue reading

The MVP 7 year itch

Congratz, David… Søren Granfeldt - Jul 1, 2013Congratz, David…

Continue reading

The MVP 7 year itch

This morning I received an email letting me know that for the 7th time (every year since 2007) I have been honored by Microsoft with the Microsoft Most Valuable Professional (MVP) Award. All 7 times I have received the award for my “outstanding contributions in Forefront Identity Manager technical communities” and its predecessors. In 2007 despite the product rename Identity Lifecycle Manager (ILM) 2007 the MVP award was for Microsoft Identity Integration Server (MIIS) 2003.

Continue reading

The attributes behind Message Delivery Restrictions

Very helpfull!! I was about to block sending email… Paweł Jarosz - Sep 1, 2010Very helpfull!! I was about to block sending emails to disabled accounts - not mailbox but accounts - so I can easily and quick retrieve some data from inactive inboxes. The solution is to create an empty group in AD and set the “dLMemSubmitPerms” parameter to accept messages only from that empty group! Amazing and great many thanks!

Continue reading

The attributes behind Message Delivery Restrictions

Do you know what attributes are used to control who can and can’t send to a Distribution List in Exchange 2003 and Exchange 2007? or Does it use a DACL? Knowing such things is key if you are going to automate distribution list management through .NET programs, or MIIS/ILM/FIM, Quest ARS or any other tool that is talking to LDAP attributes. For Powershell you need a separate list since the names are different.

Continue reading

MIIS/ILM Error: System.BadImageFormatException

So I had MIIS 2003 SP 1 reporting to me that the format of my GalSync-Extension.dll is invalid. So I tried recompiling it – no luck. Same error. The only MSDN article on this indicated that unmanaged code is being passed to the load method. Through trial and error we found the solution: stop and start the MicrosoftIdentityIntegrationService. If that doesn’t work try a reboot. http://feeds.feedburner.com/IdentityLifecycleManagerilmBestPractices

Continue reading

The Grand Unified Demo of Identity Management

As I was architecting and assembling the Identity All Up workshop (part of the 2008 Directory Experts Conference see the review by Felix Gaehtgens, an analyst for Kuppinger Cole) designed to expose the attendees (or delegates) to all facets of the Microsoft Identity Access Platform, Lori Craw, from Microsoft referred to this as the “Grand Unified Demo”. I chuckled, instantly catching the reference to the still undiscovered Grand Unified Field theory that eluded Einstein and even today’s theoretical physicists.

Continue reading