I have a production system with some problems for about 40 users.

It started out when I tried to join some users for a new MA. I got the error 'The operation failed because the object cannot be found'.

First I could not figure out what the error was, as this error normally occours in an export.

After som investegation in the DB I found out, that in the  'mms_csmv_link' table there were some references to some cs objects in the mms_connectorspace table, that does not exists.

So, at some point the connecor space object has been deleted or disconnected(and then deleted), but the link was never deleted in the DB.

I'm afraid to just delete the link in the DB, if there is any history or reference in the CS xml.

anyone knows if there is a fix for this?

Thanks,

Søren

Hi all,

I've imported existing users and groups from AD to FIM and the FIM Portal.

If I now open one of the groups in the FIM Portal I can see all the members of the group.

I then changed the navigation bar to show the SecurityGroup navigation items to all users. (Usage Keyword BasicUI)

Now if I logon to a client computer and open the FIM portal as a standard user and click on "My SG Membership" I don't see any security group entries. I can see all of my DG memberships.

If I go back to the FIM portal server and change on of the existing security groups and add the owner and displayedOwner to the group I can see this group under my SG membership as a standard user.

Did I forget anything? How can I display all memberships without adding an owner to each group? Why are DGs displayed even without an owner?

Thanks in advance

Chris

Hi,

We have nice Outlook add-ins to accept/reject requests.

How about scenario with mobile client (Windows Phone)? Are there any solutions to approve/reject request form WP?

Borys Majewski, Identity Management Solutions Architect (Blog: IDArchitect.NET)

I'm using the file upload method with BHOLD (SP1) RBAC Generator. My 3 file format works fine but I'm having a problem with my 5 file format. I get the following error:  'Roles$' is not a valid name.  Make sure that it does not include characters or punctuation and that it is not too long.

Since my 3 file import works file, I'm assuming the issue must be in the 'Permissions-Applications' or 'Role' file.  Both are rejected. My column names look right.  I have values in the columns that require values.  I have removed as many special characters as possible.  And for the obvious, 'Roles$' is not text within either file. 

Any ideas on troubleshooting this? The MG_PC log files don't tell me much more than the error above. Thanks for you help in advance.

Hi FIM Experts,

I'd like to ask your opinion on this "Delta View vs Delta Table"

Using Delta View (our current scenario), there are triggers for Add, Edit, Delete that will insert Dd and ChangeType to a "Changes" table. Then an SQL view is used to have a complete data plus the ChangeType. Now the script to run synchronization manages the "Changes" table by getting maxid of changes before delta import, perform delta import, then delete records in "Changes" table where id <= previouslyFetchedMaxId after sync cycle is finished.

Using Delta Table, I implemented it following this article:
http://www.wapshere.com/missmiis/how-to-make-a-sql-delta-table
I have 3 additional tables. And in my powershell script to run synchronization, I just call a stored procedure to populate the Delta table, before the synchronization cycle. this SP just do this in summary (truncate t_snapshot, truncate t_delta, load t_snapshot with current table, load t_delta, truncate t_archive, load t_archive with t_snaphsot). So t_archive contains the data of last synchronization. The SP executes for 17 seconds while processing close to 200K records.

My question:

1. Generally, which is recommended? DV or DT?
2. Using DT, I perform truncate and load to 3 tables every 10 mins (because that's the sync interval), any issues?
3. In terms of synchronization issues (ex. data is not sync), which approach is more prone to that?

I really appreciate if you can share your experience and expertise. Thanks!!!

Regards,

Joseph

Experts,

We are in planning stage of FIM and want to know the folders created by FIM after installation like '//Microsoft Forefront Identity Manager\2010\Synchronization Service'.

I know it is weird but we need to provide the folder list of folders before installation.

Please help if you know the folders or refer to any installation document referring to folders created post-installation.

Thanks,
Mann

Hello

I have an aleatory exception : stopped-server on all of my FIM sync service 2010 R2 sp1.

I don't have this error on FIM sync service 2010 

This exception occurs on different ECMA and different execution profile (Import, Synchro).

With restarting the service, the excption doesn't appear anymore but for an unknow reason it reappears:

in the event viewer I have thos kind of error :

Faulting application name: miiserver.exe, version: 4.1.3419.0, time stamp: 0x511d9c79
Faulting module name: clr.dll, version: 4.0.30319.17929, time stamp: 0x4ffa59b1
Exception code: 0xc0000005
Fault offset: 0x00000000004e5900
Faulting process id: 0xf8c
Faulting application start time: 0x01cefcaa20d1eda1
Faulting application path: C:\Program Files\Microsoft Forefront Identity Manager\2010\Synchronization Service\Bin\miiserver.exe
Faulting module path: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Report Id: 9f8b2bbb-689d-11e3-b2ce-000a30ffa3a5

OR 

Thanks for your help.

Experts,

Please clarify regarding collation setting used by SQL  (used by FIM).

Why I should bother about collation setting in SQL?

Does one need to change collation setting because server where FIM/SQL will be installed can be non-English

or

Do I need to bother about collation setting because I need to support non-English language FIM Portal?

Please suggest.

Thanks,
Mann

Hello Expert,

The Computed member option is missing in Advance Search in SET.
In Schema management, Computed member is bind to the Set. Would you please let me know how to bring the computed Member option in the drop down list in Advance Search of the set.

Thanks and Regards,
Anirban Singha
Bangalore-India

Hi Team,

It is fresh installation of FIM 2010 R2. FIM Sync, FIM Service and Portal are installed on the same box.

When opening FIM Portal, it does not load properly. Some boxes are misplaced and on checking the status bar I can see a list of errors.

First error in the list is "Syntax error" "WebResource.axd" Code: 0 URL: http://FIMPOrtal/webresource.axd?.......

It is followed by several "The value of the property 'WebForm_GetElementByTagName' is null or undefined, not a Function object" error for ScriptResource.axd file.

I have sharepoing 2010 installed. There is no NLB installed. I get the same error when accessing portal using "localhost" or IP.

Kindly help me fix this error. Any help would be greatly appreciated.

Greetings Techies,

How to integrate an application for access administration with Microsoft Forefront Identity Manager 2010?

Requirements:
Basically, we want to provide and manage access to users for a particular application (can be any application(s)) through Microsoft Forefront Identity Manager 2010.

I would really appreciate suggestions of individuals for this. If you have any documents for the above said implementation please do share.

Many thanks.

Hi,

 I have 3 fim servers:

fimportal - has fim service & portal running (uses account service.fim & service.sharepoint)
fimsync - has synchronisation service & synchronisation DB (uses account service.fimsync)
fimsql - holds portal DB for server fimportal

 I've created an AD MA, FIM MA and an inbound AD sync rule. On my FIM MA I've used account svc-fim (i.e. the account I've used to install FIM). This is not the same account that runs the synchronisation service on fimsync (account svc-fimsync is used for this).

 I've ran a FIM MA import and full sync without issue (I can see my built in, admin account and the sync rule brought into the metaverse). When I do an export I receive an error as shown below.

What I'm not sure about is if it's because I'm using the wrong account for the FIM MA. If so, which account should I use and what's the best way to change my config (without a total reinstall)?

I've selected domain (as a text value), accountname and objectsid in my attribute flow, but I may have configured something wrong here.

Thanks

Fault Reason: The endpoint could not dispatch the request.\r\n\r\nFault Details: <DispatchRequestFailures xmlns="http://schemas.microsoft.com/2006/11/ResourceManagement" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema"><DispatchRequestAdministratorDetails><FailureMessage>Exception: Other 
Stack Trace: Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Other ---&gt; System.Data.SqlClient.SqlException: Procedure or function 'GetDomainConfigurationIdentifiersFromDomain' expects parameter '@domainName', which was not supplied.
   at Microsoft.ResourceManagement.Utilities.ExceptionManager.ThrowException(Exception exception)
   at Microsoft.ResourceManagement.Data.Exception.DataAccessExceptionManager.ThrowException(SqlException innerException, TransactionAndConnectionScope scope)
   at Microsoft.ResourceManagement.Data.DataAccess.GetDomainConfigurationIdentifiersFromDomain(String domainName)
   at Microsoft.ResourceManagement.ActionProcessor.DomainConfigurationActionProcessor.AddDomainConfigurationFromDomain(CreateRequestParameter domainNameParameter, RequestType request)
   at Microsoft.ResourceManagement.ActionProcessor.DomainConfigurationActionProcessor.DoRequestCreationPreProcessByAttribute(RequestType request)
   at Microsoft.ResourceManagement.ActionProcessor.ActionDispatcher.DoRequestCreationPreProcessByAttribute(RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.CreateRequest(UniqueIdentifier requestor, UniqueIdentifier targetIdentifier, OperationType operation, String businessJustification, List`1 requestParameters, CultureInfo locale, Boolean isChildRequest, Guid cause, Boolean doEvaluation, Nullable`1 serviceId, Nullable`1 servicePartitionId, UniqueId messageIdentifier, UniqueIdentifier requestContextIdentifier, Boolean maintenanceMode)
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Put(Message request)
   --- End of inner exception stack trace ---</FailureMessage><DispatchRequestFailureSource>Other</DispatchRequestFailureSource><AdditionalTextDetails>Request could not be dispatched.</AdditionalTextDetails></DispatchRequestAdministratorDetails><CorrelationId>0c7141ca-63a2-42ae-92c3-a0c95de0d940</CorrelationId></DispatchRequestFailures>

Below shows separate MA account and separate FIM Sync Account

IT Support/Everything

The results for November's TechNet Guru competition have been posted!

Sorry for the delay copying over to the forums, busy times indeed!

http://blogs.technet.com/b/wikininjas/archive/2013/12/16/technet-guru-awards-november-2013.aspx

Congratulations to all our new Gurus for November!

We will be interviewing some of the winners and highlighting their achievements, as the month unfolds.

Post your DECEMBER contributions here:

http://social.technet.microsoft.com/wiki/contents/articles/21343.technet-guru-contributions-for-december.aspx

Read all about December's competition in the stickied post, at the top of this forum.

Below is a summary of the medal winners for  November. The last column being a few of the comments from the judges.

Unfortunately, runners up and their judge feedback comments had to be trimmed from THIS post, to fit into the forum's 60,000 character limit, however the full version is available on TechNet Wiki.

Some articles only just missed out, so we may be returning to discuss those too, in future blogs.

BizTalk Technical Guru - November 2013

SharePoint 2010 / 2013 Technical Guru - November 2013

Small Basic Technical Guru - November 2013

SQL BI and Power BI (SSAS, SSIS, SSRS, Power Pivot) Technical Guru - November 2013

Transact-SQL Technical Guru - November 2013

Visual Basic Technical Guru - November 2013

Visual C# Technical Guru - November 2013

Windows Phone and Windows Store Apps Technical Guru - November 2013

Windows Presentation Foundation (WPF) Technical Guru - November 2013

SQL Server General and Database Engine Technical Guru - November 2013

Windows Server Technical Guru - November 2013

As mentioned above, runners up and their judge feedback were removed from this forum post, to fit into the forum's 60,000 character limit.

A great big thank you to EVERYONE who contributed an article to last month's competition.

Hopefully we will see you ALL again in this month's listings?

As mentioned above, runners up and comments were removed from this post, to fit into the forum's 60,000 character limit.

You will find the complete post, comments and feedback on the main announcement post.

Please join the discussion, add a comment, or suggest future categories.

If you have not yet contributed an article for this month, and you think you can write a more useful, clever, or better produced wiki article than the winners above, here's your chance! :D

Best regards,
Pete Laker

More about the TechNet Guru Awards:

• TechNet Guru Competitions

#PEJL

Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over to the one and onlyTechNet Wiki, for future generations to benefit from! You'll never get archived again!

If you are a member of any user groups, please make sure you list them in the Microsoft User Groups Portal. Microsoft are trying to help promote your groups, and collating them here is the first step.

Hey Everyone, I've been installing FIM components on a customers production environment and I've run into a problem that I cannot solve. Before I get into the problem, let me give you a background of their environment. We recently installed FIM Sync on a separate machine. We have a DC machine. We have a SQL machine. On the machine I am working on, it is a Windows Server 2012. It has SharePoint Foundation 2013 and we are trying to install FIM Service and Portal on it. 

The problem is that whenever we try to install the Service and Portal, the installation will start and will stop near the end, rollback, and says that the installation ended prematurely. I run a verbose logging because we are not receiving any errors anywhere and everything seems to be working. The error that I found in the verbose log is as follows:

CustomAction SetPolicyforServiceAccount returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 15:59:41: InstallExecute. Return value 3.

After that, the system starts to roll back the installation. Does anyone have any idea what the issue is/how to fix it? If you need any clarification, please dont hesitate to ask. I'll try and respond as quick as I can.

Thanks a lot!

Hello, 

I had done an MVExtension to provision Organisation Unit from AD to AD LDS. 

When i create an OU it's OK, but when i rename it and i run a synchro i visualise that the OU is renamed but when i run an export i have un error to modify attribut owned by system.

Has anyone a solution for this 

Thanks.

Hello at all,

I having a strange issue in one of my customers environments.

My eventlog is filled with many many error saying either "The given key was not present in the dictionary." and "Resource is missing".

Here are the full details on both eventlogs:

Requestor: urn:uuid:e1603551-065e-4f84-a236-acb00d1c8e18
Correlation Identifier: 3fdbcc5d-45d2-4541-830d-a7ccffed9327
Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Other ---> System.Collections.Generic.KeyNotFoundException: The given key was not present in the dictionary.
   at System.ThrowHelper.ThrowKeyNotFoundException()
   at System.Collections.Generic.Dictionary`2.get_Item(TKey key)
   at Microsoft.ResourceManagement.Query.QueryParametersGenerator.WriteRequestedAttributes()
   at Microsoft.ResourceManagement.Query.QueryParametersGenerator.BuildParameterString()
   at Microsoft.ResourceManagement.Query.QueryProcessor.BuildSqlCommand(Query objectRepresentation, Boolean countResultsOnly)
   at Microsoft.ResourceManagement.Query.QueryProcessor.ExecuteQuery(Query query, Nullable`1 maximumTime, Boolean& endOfSequence, Boolean countResultsOnly, Int64& resultCount, Int64& executionTime)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecutePullActionImpl(PullRequestParameter pullParameter)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteEnumerateAction(RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteAction(RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteAction[ResponseBodyType](RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request, Guid requestIdentifier, Object redispatchSingleInstanceKey, Boolean isRedispatch)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request)
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Enumerate(Message request)
   --- End of inner exception stack trace ---

Requestor: urn:uuid:b3694817-313e-449f-b471-6484b3917c02
Correlation Identifier: 3fae4696-f7de-490f-bb77-a3603fce43f0
Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.PermissionDeniedException: ResourceIsMissing
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteGetAction(RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteAction(RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteAction[ResponseBodyType](RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request, Guid requestIdentifier, Object redispatchSingleInstanceKey, Boolean isRedispatch)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request)
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Get(Message request)

and also some short snippet from the FIM Service trace in verbose mode:

Microsoft.ResourceManagement Verbose: 0 : Request '' status was updated in-memory from 'NotFound' to 'Validating'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4651988Z
Microsoft.ResourceManagement Verbose: 0 : Request created: ''

    ThreadId=16
    DateTime=2013-12-19T14:14:23.4671990Z
Microsoft.ResourceManagement Verbose: 0 : Entered RequestDispatcher with Request Object; RequestIdentifier 'dd715f67-ccba-4496-bb6e-1fba39283358'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4681991Z
Microsoft.ResourceManagement Verbose: 0 : Add request 'dd715f67-ccba-4496-bb6e-1fba39283358' to cache with RequestStatus 'Validating'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4681991Z
Microsoft.ResourceManagement Information: 1 : RequestDispatcher enter processing pipeline;  RequestIdentifier 'dd715f67-ccba-4496-bb6e-1fba39283358'; Operation 'Get'; Object ''; RequestStatus 'Validating'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4691992Z
Microsoft.ResourceManagement Verbose: 0 : RequestDispatcher is processing RequestIdentifier 'dd715f67-ccba-4496-bb6e-1fba39283358' for a 'Get' operation on object '' with RequestStatus 'Validating'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4701993Z
Microsoft.ResourceManagement Verbose: 0 : Request 'dd715f67-ccba-4496-bb6e-1fba39283358' status was updated in-memory from 'Validating' to 'Validated'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4761999Z
Microsoft.ResourceManagement Verbose: 0 : RequestDispatcher is processing RequestIdentifier 'dd715f67-ccba-4496-bb6e-1fba39283358' for a 'Get' operation on object '' with RequestStatus 'Validated'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4772000Z
Microsoft.ResourceManagement Verbose: 0 : Executing initial authentication.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4782001Z
Microsoft.ResourceManagement Verbose: 0 : Request 'dd715f67-ccba-4496-bb6e-1fba39283358' status was updated in-memory from 'Validated' to 'Authenticating'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4792002Z
Microsoft.ResourceManagement Verbose: 0 : Request 'dd715f67-ccba-4496-bb6e-1fba39283358' status was updated in-memory from 'Authenticating' to 'Authenticated'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4802003Z
Microsoft.ResourceManagement Verbose: 0 : RequestDispatcher is processing RequestIdentifier 'dd715f67-ccba-4496-bb6e-1fba39283358' for a 'Get' operation on object '' with RequestStatus 'Authenticated'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4802003Z
Microsoft.ResourceManagement Verbose: 0 : Request 'dd715f67-ccba-4496-bb6e-1fba39283358' status was updated in-memory from 'Authenticated' to 'Authorized'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4812004Z
Microsoft.ResourceManagement Verbose: 0 : RequestDispatcher is processing RequestIdentifier 'dd715f67-ccba-4496-bb6e-1fba39283358' for a 'Get' operation on object '' with RequestStatus 'Authorized'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4822005Z
Microsoft.ResourceManagement Information: 1 : WS: Action.Get.Execute.Enter
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4822005Z
Microsoft.ResourceManagement Verbose: 0 : XPathDialectParser.ParseXPathExpression.Enter(/Person[ObjectID='fb89aefa-5ea1-47f1-8890-abe7797d6497'])
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4842007Z
Microsoft.ResourceManagement Verbose: 0 : XPathDialectParser.Enumerate.BuilderResult(/Person[ObjectID = 'fb89aefa-5ea1-47f1-8890-abe7797d6497'])
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4872010Z
Microsoft.ResourceManagement Verbose: 0 : XPathDialectParser.ParseXPathExpression.Exit(/Person[ObjectID = 'fb89aefa-5ea1-47f1-8890-abe7797d6497'])
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4872010Z
Microsoft.ResourceManagement Information: 1 : Query: QueryProcessor.ExecuteQuery.ExecuteReader.Enter
    ThreadId=16
    DateTime=2013-12-19T14:14:23.4882011Z
Microsoft.ResourceManagement Information: 1 : Query: QueryProcessor.ExecuteQuery.ExecuteReader.Exit
    ThreadId=16
    DateTime=2013-12-19T14:14:23.6252148Z
Microsoft.ResourceManagement Verbose: 0 : Request 'dd715f67-ccba-4496-bb6e-1fba39283358' status was updated in-memory from 'Authorized' to 'Denied'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.6282151Z
Microsoft.ResourceManagement Information: 1 : RequestIdentifier 'dd715f67-ccba-4496-bb6e-1fba39283358' exited RequestDispatcher with RequestStatus 'Denied'.
    ThreadId=16
    DateTime=2013-12-19T14:14:23.6282151Z
Microsoft.ResourceManagement Information: 1 : WS: Get:PermissionDenied
    ThreadId=16
    DateTime=2013-12-19T14:14:23.6302153Z
Microsoft.ResourceManagement Error: 3 : Requestor: urn:uuid:0aac2c9a-5a8b-44c7-ba8b-909d459a3d66
Correlation Identifier: 771ee212-67a9-410a-bffe-fef76a78e366
Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.PermissionDeniedException: ResourceIsMissing
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteGetAction(RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteAction(RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteAction[ResponseBodyType](RequestType request)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request, Guid requestIdentifier, Object redispatchSingleInstanceKey, Boolean isRedispatch)
   at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request)
   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Get(Message request)
    ThreadId=16
    DateTime=2013-12-19T14:14:23.6312154Z
Microsoft.ResourceManagement Information: 1 : WS: Get: exit
    ThreadId=16
    DateTime=2013-12-19T14:14:24.0012524Z
Microsoft.ResourceManagement Information: 1 : WS: Get: enter
    ThreadId=16
    DateTime=2013-12-19T14:14:24.0792602Z
Microsoft.ResourceManagement Information: 1 : WS: ObjectType,ObjectID,DisplayName,Locale
    ThreadId=16
    DateTime=2013-12-19T14:14:24.0822605Z
Microsoft.ResourceManagement Information: 1 : WS: GetCurrentUserFromSecurityIdentifier.Enter: S-1-5-21-1343024091-790525478-839522115-44293
    ThreadId=16
    DateTime=2013-12-19T14:14:24.0832606Z
Microsoft.ResourceManagement Information: 1 : WS: GetCurrentUserFromSecurityIdentifier.Exit
    ThreadId=16
    DateTime=2013-12-19T14:14:24.0842607Z
Microsoft.ResourceManagement Information: 1 : Get(fb89aefa-5ea1-47f1-8890-abe7797d6497)
    ThreadId=16
    DateTime=2013-12-19T14:14:24.0852608Z

Tracelog is nearly identical on the "key not present" error, after authorized, the request (which i can see is a read/get) is switched back todenied.

The only thing that in common in all errors in the tracelog is that it occurs on a get of a guid/reference.

In Portal everthing is working like expected i see no errors, all data is displayed like it should, not resources oder value are missing.

But at the most places I click in portal it generates one of the to event, even if I switch from one user tab to another, but only this ones which holds group reporting controls (no errors on tab where manager and assistant are displayed).

Eventlogs also apperas on displaying all users or searching for them and even in request history and MPR list.

I am the initial administrator and in addition give (for testing) explicit read to all objects with all attributes to the admin set

So the problem is not that urgent as all is working like expected but it fills up my eventlog, making it hard to seperate this errors from real issues.

Environment ist FIM 2010 R2 Sp1 with latest Hotfix (4.1.3496.0) running on SharePoint Foundation 2013 on a Server 2008 R2. SP2013 was installed with the help on the guide from FimSpecialist.

Anyone a hint on how to solve this ?

Regards
Peter

Peter Stapf - Doeres AG - My blog:JustIDM.wordpress.com

Hello , 

In FIM Server, i put the account FIMwssSvc for Sharepoint Timer but i had errors in event viewer ? 

Insufficient SQL database permissions for user 'Name: xxxxxxxxxxx SID: S-x-x-xx-xxxxxxxx-xxxxxxxxx-xxxxxxxxxxx-xxxxxxxxxxx ImpersonationLevel: Impersonation' in database 'SharePoint_Config_31388a75-...........' on SQL Server instance 'xxxxxxxxx\Sharepoint'. Additional error information from SQL Server is included below. 

The EXECUTE permission was denied on the object 'proc_GetTimerRunningJobs', database 'SharePoint_Config_31388a75-......', schema 'dbo'.

Is anyone has this issue ? 

If an Organisation wants a User (lets Say- Paul Walker) to act as a Sub-Administrator, Who can see the Security Groups or My SGs or My SGs Membership in its Naigation Resource Bar in Fim Portal and the Search Scope as well to view that Data.

Found a Solution.