Hi,
It's my first deployment for MIM 2016 which is similar to FIM 2010 deployment process. I made all steps required and currently I have one issue: when search for users in portal, users displayed like that
Noting that it's a test Lab.
I can't use password reset password because MIM can't read users from MIM portal.
Please Help.
Hi all,
This is probably something really obvious however when I try to configure the PSMA (default schema location - c:\psma\schema.ps1) I get the following
---------------------------
Synchronization Service Manager
---------------------------
Unable to retrieve schema. Error: Exception from HRESULT: 0x80231343
---------------------------
OK
---------------------------
with an error in the event log of:
The extensible extension returned an unsupported error.
The stack trace is:
"Microsoft.MetadirectoryServices.NoSuchObjectTypeException: Error in the application.
at Granfeldt.PowerShellManagementAgent.Microsoft.MetadirectoryServices.IMAExtensible2GetSchema.GetSchema(KeyedCollection`2 configParameters)
Forefront Identity Manager 4.3.1935.0"
The schema.ps1 looks like this:
$obj = New-Object -Type PSCustomObject
$obj | Add-Member -Type NoteProperty -Name "Anchor-StaffID|String" -Value "U123456"
$obj | Add-Member -Type NoteProperty -Name "company|String" -Value "Spark Digital"
$obj | Add-Member -Type NoteProperty -Name "department|String" -Value "Futures"
$obj | Add-Member -Type NoteProperty -Name "description|String" -Value "An Awesome Joe Bloggs"
$obj | Add-Member -Type NoteProperty -Name "givenName|String" -Value "Joe"
$obj | Add-Member -Type NoteProperty -Name "mail|String" -Value "joe.bloggs@spark.co.nz"
$obj | Add-Member -Type NoteProperty -Name "mobile|String" -Value "Spark Digital"
$obj | Add-Member -Type NoteProperty -Name "name|String" -Value "joe"
$obj | Add-Member -Type NoteProperty -Name "postalCode|String" -Value "1010"
$obj | Add-Member -Type NoteProperty -Name "sn|String" -Value "Bloggs"
$obj | Add-Member -Type NoteProperty -Name "streetAddress|String" -Value "1 Awesome Ave"
$obj | Add-Member -Type NoteProperty -Name "telephoneNumber|String" -Value "01234567"
$obj | Add-Member -Type NoteProperty -Name "title|String" -Value "Top Guy"
$obj
If I remove the file (so it actually doesn't exist) I get a different error:
---------------------------
Synchronization Service Manager
---------------------------
Can not find or access Schema script 'c:\psma\aschema.ps1'. Please make sure that the FIM Synchronization Service service account can read and access this file.
---------------------------
OK
---------------------------
So I'm assuming all access to the file is correct but there is something about it not quite right?
I'm new to MIM so any help appreciated.
Justin
Hi,
We are using MIM 2016 (build 4.3.2124.0) and have created a few new email templates that include the following:
However, when the email is rendered, there is a semi-colon ; after each [//target/manager] and [//target/creator]
So for example, the email message looks like this: Dear Joe Blogs;
Is there a way to remove this semi-colon?
Is this a MIM bug?
We dont remember seeing this with FIM in the past.
Thank you,
sk
Hi,
Since the introduction of https://docs.microsoft.com/, we are not able to find anything useful anymore, its like docs.microsoft is aimed at kids? There is usually just a few pages of high level stuff.
Lets hope this is temporary, while content is being moved?
Anyway - where can I find a list of all the MIM 2016 Management Agents and which version of the target systems they support?
Thank you,
sk
Hi,
The search is standard as you can read below. I added the SizeLimit to Ensure 100000 can be read.
In a different environment with just a few accounts it works perfect. I tested it by the client against two ADDS instances: production and Acceptance. I got the same strange behavior.
Why?
I suspect I run into some kind of buffer overflow or limit. But where?
### start
$DeltaPropertiesToLoad = @( "o365License","samAccountName" )
# the MASchemaProperties are the properties that this script will return to FIM on objects found
$MASchemaProperties = @( "mail", "samaccountname", "userprincipalname","o365License","employeeNumber","i3-StudentNummer")
$rootdse = [adsi] "LDAP://RootDSE"
$searchroot = $rootdse.defaultnamingcontext
$domain = new-object system.directoryservices.directoryentry "LDAP://$searchroot", $username, $password
$Searcher = new-object System.DirectoryServices.DirectorySearcher $Domain, "(&(objectClass=user)(objectCategory=person))", $DeltaPropertiesToLoad, 2
$searcher.tombstone = ($operationtype -match 'delta')
$searcher.cacheresults = $false
$Searcher.SizeLimit = 100000
$Searcher | fl
if ($OperationType -eq "Full" -or $RunStepCustomData -match '^$')
{
# reset the directory synchronization cookie for full imports (or no watermark)
$searcher.directorysynchronization = new-object system.directoryservices.directorysynchronization
}
else
{
# grab the watermark from last run and pass that to the searcher
$Cookie = [System.Convert]::FromBase64String($RunStepCustomData)
$SyncCookie = ,$Cookie # forcing it to be of type byte[]
$searcher.directorysynchronization = new-object system.directoryservices.directorysynchronization $synccookie
}
$results = $searcher.findall()
$nr = $results.count
GH
