2003 cluster fails to add second node - can't see quorum

October 13, 2014, 3:11 pm

≫ Next: How to delete the orphaned Expected Rule Entries exist in the FIM portal

≪ Previous: Simple Powershell example for FIM

$

0

0

Hi,

 I have a 2 x 2003 Windows Enterprise servers with the following configuration:

- 3 NICs (LAN production, SAN and heart beat). All IPS configured statically, bindings and duplex/speed settings configured as needed.
- Same patch levels on both servers.

I created a single node cluster by following the procedure on Technet (http://www.techrepublic.com/blog/how-do-i/how-do-i-install-configure-and-use-microsofts-iscsi-initiator/). Briefly, I did the following:

1. Install the Ms iSCSI initiator on both nodes
2. Add storage to node 1 first (3 x 5GB iSCI disks were added). Disks formatted quick NTFS and given drive labels.
3. I then added the disks on node 2 via the iSCSI initiator (node 1 is still online at this point)
4. I then powered off node 2
5. On node 1 I installed the Ms Clustering, choosing one of the disks as a quorum disk and the other 2 disks as physical disk resources. I had some trouble adding one of the disk resources, which I resolved by

Cluster res “Disk F:/” /create /group:”Cluster Group” /Type:”physical disk”
Cluster res “Disk F:/” /priv Drive=”F:”

6. Once my cluster was happily online, I then tried adding the second node, but I keep on getting an error the cluster add node wizard along the lines of "Checking all nodes have access to the quorum resource"

Both nodes can see the cluster resources. When node 1 is off, node 2 can see all disks as normal under windows, however when node 1 is on, one of the disks cannot be accessed by node 2 - I suspect this is the quorum disk and that's what is causing my issue, however I don't know how to solve it.

Please advise.

Thanks

---

How to delete the orphaned Expected Rule Entries exist in the FIM portal

October 14, 2014, 4:05 am

≫ Next: FileBased Extended Management Agent (EZMA/ECMA) - template codepage

≪ Previous: 2003 cluster fails to add second node - can't see quorum

$

0

0

Hi,

How to delete the orphaned Expected Rule Entries exist in the FIM portal.

A large number of orphaned Expected Rule Entries exist in the FIM portal (originally 140000k+ objects, currently 75000+ objects). They consume the a lot of FIM database space and slows down the identity lifecycle management synchronization processes.

Regards

Anil Kumar

FileBased Extended Management Agent (EZMA/ECMA) - template codepage

October 14, 2014, 4:44 am

≫ Next: No FIM administrator...cannot access the portal

≪ Previous: How to delete the orphaned Expected Rule Entries exist in the FIM portal

$

0

0

When we create new file based custom MA we have to select CodePage for the template file. Later in it can be updated in MA parameters.

How can we get information what CodePage has been selected while we are in WriteImportFile method?

It will be as well good to know (in case of CSV file) what delimiter character has been selected... 

---

Borys Majewski, Identity Management Solutions Architect (Blog: IDArchitect.NET)

No FIM administrator...cannot access the portal

October 14, 2014, 5:04 am

≫ Next: FIM newbie. Must we upgrade FIM R2 to FIM R2 SP1 in these situations... ?

≪ Previous: FileBased Extended Management Agent (EZMA/ECMA) - template codepage

$

0

0

Somehow my user object who has FIM admin rights got removed. How do I resolve this?

TSTADMIN/adminfim is my user who is site collection administrator. This user was a part of SET Administrator.

Permission MPR 'Admin can do anything' used this set as requet resource to allow all access on FIM portal.

This user object is somehow removed and I do not have a single user who has FIM portal admin access. (I know the user is removed as I could search portal for users with another user who has limited access)

If I try to access FIM portal using this user..I get below error

[ServiceFaultException: The endpoint could not dispatch the request.] Microsoft.ResourceManagement.WebServices.EnumerationClient.Enumerate(Message request) +226 Microsoft.ResourceManagement.WebServices.EnumerationClient.Enumerate(Enumerate enumerate, EnumerateHelper helper) +242 Microsoft.ResourceManagement.WebServices.Client.ResourceTemplate.EnumerateResources(SearchParameters parameters) +782 [UnwillingToPerformException: The endpoint could not dispatch the request.] Microsoft.ResourceManagement.WebServices.Client.ResourceTemplate.EnumerateResources(SearchParameters parameters) +1457 Microsoft.IdentityManagement.WebUI.Controls.ConfigurationModelBase.RetrieveResources(String type, String filter, List`1 attributes) +499 Microsoft.IdentityManagement.WebUI.Controls.UserConfigurationModel.RetrieveUserConfiguration()+536 Microsoft.IdentityManagement.WebUI.Controls.NavigationBarConfigurationModel.get_NavigationBars() +148 Microsoft.IdentityManagement.WebUI.Controls.NavigationBarProvider.BuildSiteMap() +242 Microsoft.IdentityManagement.WebUI.Controls.NavigationBarProvider.get_RootNode()+13 System.Web.UI.WebControls.SiteMapDataSource.GetNodes() +231 System.Web.UI.WebControls.SiteMapDataSource.GetTreeView(String viewPath) +35 System.Web.UI.WebControls.HierarchicalDataBoundControl.GetData(String viewPath) +43 System.Web.UI.WebControls.Menu.DataBindItem(MenuItem item) +53 System.Web.UI.WebControls.Menu.PerformDataBinding() +49 System.Web.UI.WebControls.HierarchicalDataBoundControl.PerformSelect() +114 System.Web.UI.WebControls.BaseDataBoundControl.EnsureDataBound() +82 System.Web.UI.WebControls.Menu.EnsureDataBound()+38 System.Web.UI.WebControls.Menu.OnPreRender(EventArgs e, Boolean registerScript) +64 Microsoft.SharePoint.WebControls.AspMenu.OnPreRender(EventArgs e) +166 System.Web.UI.Control.PreRenderRecursiveInternal() +108 System.Web.UI.Control.PreRenderRecursiveInternal()+224 System.Web.UI.Control.PreRenderRecursiveInternal() +224 System.Web.UI.Control.PreRenderRecursiveInternal() +224 System.Web.UI.Control.PreRenderRecursiveInternal() +224 System.Web.UI.Control.PreRenderRecursiveInternal() +224 System.Web.UI.Control.PreRenderRecursiveInternal()+224 System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +3394

Event viewer gives me this error:

Requestor: Internal Service

Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException: Exception of type 'Microsoft.ResourceManagement.WebServices.Exceptions.UnwillingToPerformException' was thrown.

   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.GetCurrentUserFromSecurityIdentifier()

   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.GetCurrentUser()

   at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Create(Message request)

Please assist.

FIM newbie. Must we upgrade FIM R2 to FIM R2 SP1 in these situations... ?

October 15, 2014, 1:25 am

≫ Next: rules extension - sql reader

≪ Previous: No FIM administrator...cannot access the portal

$

0

0

At present we have FIM 2010 R2 installed on a Windows 2008 host. The portal is on same server as FIMService and Sharepoint 2010 is used. The AD DC is Windows 2008 R2 and Exchange 2010 is in use.

There is talk of possible software/hardware/os upgrades happening in the near future.

What I would like to know is whether we MUST upgrade our working FIM 2010 R2 implementation to FIM 2010 R2 SP1 in the following events:

1. Exchange "upgraded"  2010 -> 2013 (no o/s changes)

2. AD DCs "upgraded" from Windows 2008 R2 to Windows 2012 R2 (still Exch 2010, FIM server unchanged)

3.  FIM server (FIMService + Portal) o/s upgrade from Windows 2008 -> 2012 imminent

Obviously, we only want to upgrade FIM 2010 R2  only when we are forced to.

rules extension - sql reader

October 15, 2014, 7:16 am

≫ Next: Having Multiple Sync Servers Point to the Same FIM Portal

≪ Previous: FIM newbie. Must we upgrade FIM R2 to FIM R2 SP1 in these situations... ?

$

0

0

I am not very familiar with rules extension. I need to write one now. Instead of hardcoding the data in the c# (case 1: value1; case 2; value 2) of the rules extension, can the code read an external sql table to access the data to process? If yes, could you please post a sample code? TIA.

Having Multiple Sync Servers Point to the Same FIM Portal

October 15, 2014, 9:09 am

≫ Next: how to assign "Password Reset AuthN Workflow" to "authNWFRegistered"

≪ Previous: rules extension - sql reader

$

0

0

I have an “operational” environment that has both a sync server and a FIM Portal. I want to set-up a “test” environment to test just the “operational” sync processing. Since I don’t need to test the “operational” FIM Portal, I am considering setting up a “test” sync server and have the FIM MA point to the “operational” FIM Portal. On the “test” sync server, I will just be running MA imports and MA syncs and then examining Pending Exports to monitor behavior. I would NOT be running MA exports on the “test” sync server to prevent collision/breakage with the “operational” sync server. Has anyone ever tried this before?  Any gotchas? Maybe ensure that the FIM MAs on the two sync servers aren’t running at the same time?

---

Ramona Balke

how to assign "Password Reset AuthN Workflow" to "authNWFRegistered"

October 15, 2014, 6:57 pm

≫ Next: FIM Synchronization 2010 R2 Sp1 and SQL 2012 Sp1

≪ Previous: Having Multiple Sync Servers Point to the Same FIM Portal

$

0

0

I'm finding a way to assign "Password Reset AuthN Workflow" to all users' "AuthN workflow Registered" attribute. I know we can do it with auto register ps script.  I'm thinking but is there way to configure inbound sync rule to assign"Password Reset AuthN Workflow" to reference (DN) "authNWFRegistered" attribute?

---

Jason

---

FIM Synchronization 2010 R2 Sp1 and SQL 2012 Sp1

October 16, 2014, 6:35 pm

≫ Next: Password Sync

≪ Previous: how to assign "Password Reset AuthN Workflow" to "authNWFRegistered"

$

0

0

Hello good day.

currently I have the following scenario:

1 Server A Windows 2008 R2 Sp1
B 1 Server with Windows 2012 and SQL 2012 Sp1

On the server I want to install FIM 2012 R2 SP1 when trying to install but fails when SQL Server to contact.

Error:
"Forefront Identity Manager Synchronization Service is having trouble Contacting SQL server using the information provided. PLEASE NOTE THAT Forefront Identity Manager Synchronization Service requires Microsoft SQL Server 2008 SP1 or better. Verify the version, server and instance names as well as firewall settings and try again . "

I have performed the following tests and all work well:

1.Double indeed check that you 'did not fat-finger or simpy are using the wrong server and host names.
2.Verify that you 'can access the server via an ODBC connection going to: Administrator Tools -> Data Sources -> User DSN tab -> Add -> Fill in the server information -> Click "Test Connection"
3.Check the firewall rules / See if you can telnet to the server via telnet XX.XX.XX.XX: 1433
4.Disable IESC for Administrators if it is on
That 5.Verify Full Text Server is installed on the SQL server.
That 6.Verify Agent and SQL Browser (if you are not using the default instance) are running.
That 7.Verify the SQL Native Client is installed.

My question is,

FIM 2010 R2 supports SQL 2012 Sp1 with Sp1?
The FIM server must have some prerequisite for connecting to SQL Server or some settings before installing.

Password Sync

October 17, 2014, 6:26 am

≫ Next: Home Directory not created or not shared

≪ Previous: FIM Synchronization 2010 R2 Sp1 and SQL 2012 Sp1

$

0

0

Can users from different OUs from any single forest(domain) be synced with different O365 tenants ?

If we want to configure SSO in this scenario ... is it possible to have dir sync server with ADFS configured to sync user data from different OUs in same domain to different O365 tenant ? What configuration is required ?

Does FIM 2010 R2 support password sync from on-prem to O365 ?

Please answer this questions in short and share URL for more explanation..!!

Home Directory not created or not shared

October 17, 2014, 11:10 am

≫ Next: Deploy FIM ontop of Service Manager 2012 R2

≪ Previous: Password Sync

$

0

0

Hello,

I am using FIM 2010 to create users, home directories and shares...

Most of the time it is working fine but for some reasons I am getting several users with two patterns:

1. Home directory created but not shared

2. Nothing created

Does any log could help me trace the issue why the HD was not created and why the HD when created was not shared?

Thanks,

Dom

---

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Deploy FIM ontop of Service Manager 2012 R2

October 18, 2014, 2:26 am

≫ Next: September 2014 TechNet Guru FIM Winners announced!

≪ Previous: Home Directory not created or not shared

$

0

0

   As FIM latest sp1 now supports SQL 2012, so,

   Is it possible to install FIM on Service manager management server ?. there are hardware and software requirements but no note on coexistence.

   That would save lot of hardware as FIM already relies on Service Manager DW for reporting.

  

---

Shahid Roofi

September 2014 TechNet Guru FIM Winners announced!

October 18, 2014, 2:25 pm

≫ Next: FIM Maintenence jobs

≪ Previous: Deploy FIM ontop of Service Manager 2012 R2

$

0

0

The September Guru results are posted!

http://blogs.technet.com/b/wikininjas/archive/2014/10/16/the-microsoft-technet-guru-awards-september-2014.aspx

Below are the highlights, just the medal winners. Please see the blog above for more entrants and comments, which had to be trimmed to fit into this 60,000 character forum limit. 

BizTalk Technical Guru - September 2014

	Johns-305 [boatseller]	BizTalk: Working with Preserve Interchange EDI Xml – Part 1	Mandi Ohlinger: "This is a great How To article with the steps and terms clearly defined. If you want to preserve interchanges, you need to read this." TGN: "EDI is a big part of BizTalk, great wrap up, both articles."
	Verma.Sumit	BizTalk Server - Default Pipelines	TGN: "Very nice article explaining the default pipelines "in-depth"." Mandi Ohlinger: "Great detailed information on the XML pipelines. Very informative read. "
	Rahul_Madaan	BizTalk Server - Debatching multiple message types using Envelope Schema	Mandi Ohlinger: "A common task explained simply. Very effective." TGN: "Very nice tutorial. I would love to see some better images though, and a little better elaboration on the different steps, but overall a very good article."

  

Exchange Server Technical Guru - September 2014

Rafael Mantovani

Exchange: Unable to Verify Information About Users Availability

Ed Price: "This is a good article with some good images. This article was originally in English, but because it was posted on the Portuguese Wiki, it got translated into Portuguese! The English version should be pasted into a new article on the English Wiki. Here is the English version: http://social.technet.microsoft.com/wiki/pt-br/contents/articles/26759.nao-e-possivel-verificar-informacoes-de-disponibilidade-dos-usuarios/revision/7.aspx "

Forefront Identity Manager Technical Guru - September 2014

Eihab Isaac (MVP)

FIM 2010 R2: Coexistence Exchange Provisioning Scenario using PowerShell Management Agent

AM: "Eihab, thank you for continuing to make excellent contributions to the community. This is a useful reference for anyone needing to meet similar requirements without the service and portal." PG: "Nice article. Well designed!" Søren Granfeldt: "Great overview on real world challenges with managing diffrent Exchange versions using FIM. Second part wil really complement this article."

Microsoft Azure Technical Guru - September 2014

	Chervine	Predictive Analytics with Microsoft Azure Machine Learning	JH: "Love it! One of my favorite articles on the wiki from last month." Ed Price: "Fantastic article! Incredibly well written with good details and helpful images. This Machine Learning topic is very important and timely right now!"
	Alex Mang	What Are Scoring Profiles In Azure Search?	JH: "Alex has done a tremendous job with his library. Love it that he shares update on the library on the wiki." Ed Price: "Wow, I love all the explanations and detail. And this topic is incredibly valuable. Amazing job!"
	saramgsilva	Microsoft’s Windows App Studio Beta : Connecting a Menu App to Azure Mobile Service	JH: "Great article with a lot of pictures. A good one!" Ed Price: "Great topic, Sara! Very thorough and well written!"

 

Miscellaneous Technical Guru - September 2014

	Brian Nadjiwon	How to Create and Use Enums in Powershell	Ed Price: "Wow, what a detailed article! Great depth and use of images! I think it's time for a PowerShell category!" TGN: "I LOVE ENUMS! Great explaining and a great article. Well done, Brian!" PG: "Nice, practical solution, clear explanation."
	Adnan Umer	Understanding GPU Usage tool in Visual Studio 2013 Update 4	Ed Price: " A fantastic Visual Studio article with great details and vivid images!" TGN: "Very valuable and a great toturiol on how to use the "GPU Usage tool""
	Britt Adams	Unexplained High CPU Usage on Intel E5 Processors	Ed Price: "Very thorough explanation! Great job! " TGN: "Wow, computer science is fun. Nice wrap-up and how-to. I loved it!"

  

SharePoint 2010 / 2013 Technical Guru - September 2014

	Vivek Jagga	SharePoint, Office 365 or a Hybrid Deployment?	Jinchun Chen: "Excellent!" Margriet Bruggeman: "Nice, I can see this one coming in real handy in comparison studies"
	Inderjeet Singh	Common issue when using SharePoint 2013 Multi Tenant environment (Apps and User Profile Synchronization)	Jinchun Chen: "Nice article." Margriet Bruggeman: "Useful and not too much is written about this topics, which adds some bonus points"
	Dan Christian	Tips and Tricks to Resolve Poject 2010 Server Migration Issues	Margriet Bruggeman: "Extensive KB-type article in case you need it"

 

Small Basic Technical Guru - September 2014

	Philip Munts	Small Basic: For Windows 8.1 Tablet	Michiel Van Hoorn: "Great article for those (1) want to make apps for tablet form factors and (2) are looking to package a SB app into a package." Ed Price: "I love it! What an important topic!"
	Nonki Takahashi	Small Basic: Emoji	Michiel Van Hoorn: "Another entry from Nonki which opens up new possibilities. This time Emoji and the font editing." Ed Price: "This is incredibly interesting!"
	Nonki Takahashi	Small Basic: Dictionary	Michiel Van Hoorn: "Simple entry on a powerful feature" Ed Price: "Great overview of the Dictionary Object! Good job integrating the Known Issues and the See Also section!"

 

SQL BI and Power BI Technical Guru - September 2014

	visakh16	Finding SSIS Packages having References to a Table or Column	RB: "Interesting subject, with a lot of practical usage" Jinchun Chen: "Really helpful." PT: "Good article that addresses a specific problem and offers a solution. Thank you"
	Ch. Rajen Singh	SSIS: Export Multiple File With Fixed Size	PT: "This is a good article, well-written and solves a real problem." Jinchun Chen: "Nice article." RB: "Interesting workaround for the fixed file size problem"
	Ed Price - MSFT	Power BI Community Council	PT: "Great information about the purpose and composition of the Power BI Community Council to inform and raise awareness."

 

SQL Server General and Database Engine Technical Guru - September 2014

	Shanky	An Examination of Logging in Truncate Table Statement and Its Comparison With Delete Statement	Jinchun Chen: "Excellent"  AM: "The best!" Ed Price: "Wow, Shanky! What an amazingly thorough and detailed article!"
	Tulio Rosa	SQL Server Load Balancing	AM: "Also very good!" Jinchun Chen: "Excellent"     Ed Price: "Fantastic topic, good job on the diagram, and great use of TechNet Gallery! Plus a Portuguese translation!"
	Ashwin Menon	Get Notified when a database status changes	AM: "This is well explained" Ed Price: "Very thorough article! Good References section!"

   

System Center Technical Guru - September 2014

	Mr X	How to upload new Drivers in SCCM 2012 R2	Peter Laker: "Very nice, thanks Mr X" Ed Price: "Wow. Great use of images to walk the reader through the process! Could benefit from a See Also and Additional Resources type of sections. Very thorough!"
	Mr X	How to create a new Boot Image using SCCM 2012 R2	Peter Laker: "Another good article!" Ed Price: "Short and sweet How To article! It's great to cover all these scenarios. Excellent addition to our System Center library of content!"

Transact-SQL Technical Guru - September 2014

	visakh16	Full Outer Join - The Most Generic Join Statement	JS: "A good summary, though a bit generic and already available mutliple times on the internet. The sample (with data) could be a bit more crisp though." Jinchun Chen: "Very helpful." Ed Price: "I love the explanations at the top in the Context and Reasoning sections! And then the solution has a fantastic mix between explanations, illustrations, and the code snippets. And the links at the bottom help JOIN together the Join resources! Great job!"
	Praveen Rayan D'sa	Dynamic pivot with column alias	Jinchun Chen: "Good." JS: "Make sure no to use a parameter declaration without a size of the variable type, like in VARCHAR, better use Varchar(YourSizeHere)." Ed Price: "Fantastic solution. Good job getting the references in there at the bottom!"
	Saeid Hasani	Calling Stored Procedures Using Transact-SQL	JS: "A good write up for getting the feet wet with procedure, though missing some depth."  Ed Price: "Wow! I love your break out each section, explain it, and give the code snippet. It makes it very easy to read, understand, and get to the right section! To JS's point, it's probably better for beginners than advanced T-SQL gurus, but this content is still very valuable. Great example of the community giving advice and helping out with the content. Incredible article!"

 

Visual C# Technical Guru - September 2014

	João Sousa	ASP.NET WebAPI - Basic Redis	Peter Laker: "Nice WebAPI basics Joao!" JM: "This is best"
	Jaliya Udagedara	Publishing and Subscribing using NServiceBus	JM: "Close second IMO" Peter Laker: "Great intro to NServiceBus! Thanks Jaliya!"
	Adnan Umer	Calculating Percentage Similarity of two Strings in C#	JM: "I like this!" Peter Laker: "Awesome snippet and explanation, thanks Adnan!"

 

Windows Phone and Windows Store Apps Technical Guru - September 2014

	Adnan Umer	Introducing ObjectGraphLibrary to visualize Stack and Heap	JH: "Good article about stack and heap visualization." TGN: "Hardcore stuff, but very valuable. Great article buddy!"
	saramgsilva	Microsoft’s Windows App Studio Beta: Creating a BackOffice App for Menu App	JH: "Another great article by Sara! A lot of code snippets, pictures and explanations." TGN: "Great tutorial, well explained. And a bunch of screenshots. I loved it!"
	Muiz Khan	Using Speech Recognition without Internet	TGN: "Nice one. I love articles that explain something in an easy understanding way. Great work Muiz!" JH: "Good explanation of offline capabilities of speech recognition."

Windows Presentation Foundation (WPF) Technical Guru - September 2014

	Andy ONeill	WPF: CollectionView Tips	KJ: "wow cery thorough!" Peter Laker: "Blindingly good article Andy!"
	Magnus (MM8)	WPF/MVVM: Binding the DatePickerTextBox in WPF	KJ: "useful tip - could see needing to do this and searching for this article and finding it" Peter Laker: "Excellent work as always Magnus!"

Wiki and Portals Technical Guru - September 2014

Durval Ramos

Visio Portal

Peter Laker: "Awe inspiring portal from a Wiki legend!" Ed Price: "Great introduction, a lot of links, divided by sections, and it even has References and Return to Top links! Amazing article!"

  

Windows Server Technical Guru - September 2014

	Mr X	Getting Started with KMS (Key Management Service)	JM: "Another excellent article, great work." Philippe Levesque: "Really good documentation." Richard Mueller: "Good topic with good images to explain." Mark Parris: "Good insights, would be good to higlight also the improvements in 2012 and 2012 R2."
	Kelly Bush	Authentication Policies and Authentication Silos – Restricting Domain Controller Access	Mark Parris: "Nice article, providing further insight into some of 2012 R2's capabilities." Richard Mueller: "Great article with lots of detail. Could use TOC and See Also section." JM: "An excellent article, thanks for the contribution!" Philippe Levesque: "Good article, it explain some security that we don't see much."
	FZB	Windows Server: DNS Service - Negative Caching	Mark Parris: "useful tidbit, i have often seen shortttl zones for such records." JM: "A good article, however it needs a rewrite for clarity." Philippe Levesque: "Andy information to have, thanks for sharing !" Richard Mueller: "Needs more explanation."

Congratulations to everyone who won a medal and thank you to everyone who entered! Your success will be entered into folklore and sung about for generations to come!

If you can do better, or simply wish to join our community and make a name for yourself, please enter this month's competition:

http://social.technet.microsoft.com/wiki/contents/articles/26994.technet-guru-contributions-october-2014.aspx

 

Regards,
Pete

---

#PEJL

Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over to the one and onlyTechNet Wiki, for future generations to benefit from! You'll never get archived again!

If you are a member of any user groups, please make sure you list them in the Microsoft User Groups Portal. Microsoft are trying to help promote your groups, and collating them here is the first step.

FIM Maintenence jobs

October 19, 2014, 6:02 am

≫ Next: FIM workflow fails to send email

≪ Previous: September 2014 TechNet Guru FIM Winners announced!

$

0

0

Hi,

We are facing some issue in FIM performance and came to know that there are some FIM maintenance/housekeeping jobs  are not running properly. Due to this there are lot of  orphaned object and ERE are created. Could any one please suggest below.

• How to identified  and delete orphaned object?
• How to control the FIM maintenance operations and housekeeping jobs?
• In our environment, we have already full synchronization and clear history  scheduler. Is there any other sql jobs or tools which can be used to clean the FIM database. If yes, please   give the name of that, how to enable or run the jobs.

Thanks

Harry 

FIM workflow fails to send email

October 20, 2014, 5:49 am

≫ Next: Updating date while enabling/Disabling user in AD

≪ Previous: FIM Maintenence jobs

$

0

0

I have an MPR which triggers a workflow that shoots out email.

The sending email part of it has suddenly stopped working. I get below error in the workflow instance log.

EXCEPTION DATA\r\n\r\nMESSAGE: WorkflowInstance '53039541-329a-461a-abed-672516d83f9b' could not resolve mail message in activity 'authenticationGateActivity2'.  Mail was not sent.\r\n\r\n**METHOD:Void ResolveMail(System.Object, System.EventArgs)\r\n\r\n**METHOD:Void RaiseEvent(System.Workflow.ComponentModel.DependencyProperty, System.Object, System.EventArgs)\r\n\r\n**METHOD:System.Workflow.ComponentModel.ActivityExecutionStatus Execute(System.Workflow.ComponentModel.ActivityExecutionContext)\r\n\r\n**METHOD:System.Workflow.ComponentModel.ActivityExecutionStatus Execute(T, System.Workflow.ComponentModel.ActivityExecutionContext)\r\n\r\n**METHOD:System.Workflow.ComponentModel.ActivityExecutionStatus Execute(System.Workflow.ComponentModel.Activity, System.Workflow.ComponentModel.ActivityExecutionContext)\r\n\r\n**METHOD:Boolean Run(System.Workflow.ComponentModel.IWorkflowCoreRuntime)\r\n\r\n**METHOD:Void Run()\r\n\r\n\r\n\r\nINNER EXCEPTION DATA\r\n\r\n
------------------------------------------------------------

---

Updating date while enabling/Disabling user in AD

October 20, 2014, 9:22 am

≫ Next: Precedence for Reference Attributes

≪ Previous: FIM workflow fails to send email

$

0

0

Hi All,

We are using FIM 2010 R2 SP1 and integrated with AD.

All integration is done through synch rule and no coding.

Now we have a new requirement to update date in AD while enabling and disabling user.

Kindly suggest, how it can be achieved through synch rule.

Thanks,

Mann

Precedence for Reference Attributes

October 20, 2014, 1:29 pm

≫ Next: Password reset using FIM

≪ Previous: Updating date while enabling/Disabling user in AD

$

0

0

I have 2 Management Agents:

1. FIM MA (FIM Service Management Agent)
2. HR MA (SQL Server Management Agent)

For both MA's, I have an Import attribute flow to metaverse attribute "manager". The "manager" attribute has an export flow to FIM MA & AD MA

The import precedence defined for "manager" (does not have equal precedence) is defined as:

1. HR MA
2. FIM MA

There are records in the HR MA that have a "invalid" reference value (i.e. a value that doesn't point to another anchor\DN in the same MA), however that same object has a valid "Manager" reference in the FIM MA.

What I'm experiencing is when I run a sync from HR MA, it will delete the manager in AD for which we have an export flow to. If I then run a sync from the FIM MA, it will add the manager (as defined from the Portal) back to AD. If I then re-run the HR MA sync it will go back and remove the manager in AD again.

How should the sync engine handle attribute precedence for reference attributes specifically those with higher precedence that are invalid?

I'm running FIM 2010 R2 v4.1.3559.0

Password reset using FIM

October 21, 2014, 9:14 am

≫ Next: FIM Set membership not evaluating

≪ Previous: Precedence for Reference Attributes

$

0

0

Hi,

As per  my knowledge, FIM can be used to reset the password only on Active directory. Is there any option or possibility to reset the password on the below target system.

Windows

McAafe

Pointsec

AS400

If yes, kindly suggest how to achieve it.

Thanks

Harry

FIM Set membership not evaluating

October 22, 2014, 4:14 am

≫ Next: Non-existing mail-person

≪ Previous: Password reset using FIM

$

0

0

Hi

In the FIM Portal, we use a number of sets and MPRS to run workflows and previously have had no problems.

We're having a difficulty with a particular set of "Requests" where we want to run a workflow if a Request is denied to email a 3rd party.   Our set has the following criteria:

-----------------------------------------------

Select request that match all of the following conditions:

Request status is denied

TargetResourceType is VisitorConfigurator (a custom resource type).

 ------------------------------------------------

If you 'view members'  in the RCDC it looks to have the right members, although we have now discovered that the RCDC merely displays what it _should_ have, not what it actually has.   The workflow is never run when the Authoriser denies the request.   However:  When the FIM_TemporalEventsJob is run at 1AM (or manually) we find that the set gets fixed, we see a request passes through called "Set Correction For Set deniedRequests"  and our workflow magically runs!

We have added an additional binding to the Request resource type for the Email attribute - this is what is going to be used for our 3rd party email address.   We have another set which is actually used to send the email:

-------------------------------------------------------------------
Select request that match all of the following conditions:

E-Mail starts with %
-------------------------------------------------------------------

This works fine!   So, it seems if we try to create a set based on the original attributes it doesn't work but with our added one it does.  We've looked at permissions and we think we have everything covered there, and if it weren't the SQL job wouldn't work.   We are now at a bit of loss as to how to move forward!

Any ideas?

Regards

Andy Swiffin and Ian Swift, University of Dundee

Non-existing mail-person

October 22, 2014, 1:12 pm

≫ Next: How to remove OTP Email address

≪ Previous: FIM Set membership not evaluating

$

0

0

When i were about 14 i made a hotmail account with a name and address to a person that does not exist, so now when i can't access my account anymore i don't know what to do.

So basically, i have an account on a non-existent person and i need access to this account, what do i do?