How to update the approver lists of an existing workflow (Request approval)

December 18, 2014, 12:16 pm

≪ Previous: Sharepoint update name Required

Hi,

I need to add a new approver to an existing request approval. Really appreciate any help, hint to do that.

I tried to add members to ComputedActor of the request and approval object. I was able to update approval but not request. When try to approve, it will not generate approval response.

Another thought is to get containingworkflow of the request, update the workflow parameter from there. but not sure if that is possible? How to trigger the workflow after the request approval already been created?

Thanks very much,

Min

↧

malwarebytes anti-malware

December 19, 2014, 2:34 am

≫ Next: System.InvalidOperationException: The dependent component ' syncule bla bla ' is not available.

≪ Previous: How to update the approver lists of an existing workflow (Request approval)

السلام عليكم.. سؤالي هو لماذا لا يعتمد برنامج مالويربايتز مضاد المالوير كبرنامج مضاد فيروسات ومضاد برامج التجسس في مركز الصيانة في لوحة التحكم لنظام ويندوز 7؟

↧

System.InvalidOperationException: The dependent component ' syncule bla bla ' is not available.

December 19, 2014, 1:20 pm

≫ Next: SSPR Automatic User Registration - Encoding Issue

≪ Previous: malwarebytes anti-malware

Hello,

Since few days , i unable to add groups using FIM Portal on all my ADMA agents. My request has PostProcessingError status

Log Name:      Forefront Identity Manager
Source:        Microsoft.ResourceManagement
Date:          12/18/2014 8:03:30 PM
Event ID:      2
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      ****
Description:
System.InvalidOperationException: The dependent component '****' is not available.
   at Microsoft.ResourceManagement.Workflow.Activities.SynchronizationRuleActivity.ValidateSyncRuleDependancies(String action, Dictionary`2 synchronziationRuleTree, Dictionary`2 targetExpectedRulesList)
   at Microsoft.ResourceManagement.Workflow.Activities.SynchronizationRuleActivity.GenerateAddExpectedRuleEntry(ActivityExecutionContext executionContext)
   at Microsoft.ResourceManagement.Workflow.Activities.SynchronizationRuleActivity.Execute(ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity activity, ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime)
   at System.Workflow.Runtime.Scheduler.Run()
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft.ResourceManagement" />
    <EventID Qualifiers="0">2</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-12-18T19:03:30.000000000Z" />
    <EventRecordID>8858975</EventRecordID>
    <Channel>Forefront Identity Manager</Channel>
    <Computer>*********</Computer>
    <Security />
</System>
<EventData>
    <Data>System.InvalidOperationException: The dependent component '_SYNCRULE AM5 Security Group In/Outbound' is not available.
   at Microsoft.ResourceManagement.Workflow.Activities.SynchronizationRuleActivity.ValidateSyncRuleDependancies(String action, Dictionary`2 synchronziationRuleTree, Dictionary`2 targetExpectedRulesList)
   at Microsoft.ResourceManagement.Workflow.Activities.SynchronizationRuleActivity.GenerateAddExpectedRuleEntry(ActivityExecutionContext executionContext)
   at Microsoft.ResourceManagement.Workflow.Activities.SynchronizationRuleActivity.Execute(ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity activity, ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime)
   at System.Workflow.Runtime.Scheduler.Run()</Data>
</EventData>
</Event>

↧

SSPR Automatic User Registration - Encoding Issue

December 20, 2014, 1:21 am

≫ Next: Identity and password stolen by spouse

≪ Previous: System.InvalidOperationException: The dependent component ' syncule bla bla ' is not available.

Hi,

I'm using a script to programatically register SSPR users, it's based on the sspr script here:

https://konab.com/automate-sspr-registration-fim-2010-r2/

This scripts works fine, but I have an issue. HR provide me with an ASCII exported CSV file containing the answers. I convert the ASCII to unicode using notepad and import the file using a script (my script uses "-Encoding Unicode" with the import-CSV cmdlet. The problem I have is:

When users type their SSPR answers in a web browser, if the answer has a space (i.e. " ") the response always fails, but if the user copies their answer from the input file, this works.

I've tried modifying the input CSV file by doing a find and replace on white space by copying a single blank space and then doing a replace using a typed space and saving the file as Unicode. This has the opposite effect - if a user types their answer, it works, but if they do a copy and paste from the input source it fails.

In summary, I want to give users the option of copying and pasting their SSPR answers, as well as typing them in directly - however I can't do that, it seems as if I'm hitting encoding issues somewhere. I've tried importing the file as ASCII but that's even worse - any answers with space fail regardless of whether I type or copy the answer in.

Any help appreciate, thanks.

IT Support/Everything

↧

Identity and password stolen by spouse

December 21, 2014, 12:41 pm

≫ Next: Cannot Create Windows Azure Active Directory Managment Agent...

≪ Previous: SSPR Automatic User Registration - Encoding Issue

Marrried 38 years and need help getting rid of hacker that knows everything about me

↧

Cannot Create Windows Azure Active Directory Managment Agent...

December 22, 2014, 8:55 am

≫ Next: XPath Resource Count

≪ Previous: Identity and password stolen by spouse

Greetings,

I'm having difficulty creating a Windows Azure Active Directory Management Agent. When I select Windows Azure Active Directory (Microsoft) and click Next, I receive the following error (screenshot attached):

Unable to retrieve configuration parameters from the extension: Value does not fall within the expected range.

Also, if I try to simply install an Extensible Connectivity 2.0 agent, select Microsoft.Azure.ActiveDirectory.Connector.dll, refresh the interface, and select Next, I receive:

The extension could not be loaded.

I'm suspecting that the .dll is bad, but I've downloaded and installed the AADConnector.msi twice, so I'm not sure my next move.

Happy Holidays!

↧

XPath Resource Count

December 22, 2014, 3:02 pm

≫ Next: Malwarebytes

≪ Previous: Cannot Create Windows Azure Active Directory Managment Agent...

I've created a search scope, "My Users" which lists users managed by the current user. I am attempting to add a navigation bar resource with a resource count, I have placed the same XPath filter as I used in the search scope into the resource count attribute, however the count is not showing.

XPath: /Person[Manager='%LoginID%']

Am I doing something incorrectly?

Thanks!

↧

Malwarebytes

December 28, 2014, 3:58 am

≫ Next: manager Have wrong state on mirosoft account

≪ Previous: XPath Resource Count

السلام عليكم.. شكرا على تنزيل خدمة برنامج مالويربايتز ولكن عند تشغيل الرسائل حول حماية الفيروسات في مركز الصيانة يظهر زر مكتوب عليه البحث عن برنامج على الانترنت وعندما اضغط عليه ينقلني الى هذا الموقع: فابحث فيه عن البرنامج فلا اجده

↧

manager Have wrong state on mirosoft account

December 31, 2014, 11:31 am

≫ Next: manager Have wrong state on mirosoft account

≪ Previous: Malwarebytes

My mircosoft account has wrong state. Its California.

↧

manager Have wrong state on mirosoft account

December 31, 2014, 11:32 am

≫ Next: I've not been able to sign into the careers site for weeks now.

≪ Previous: manager Have wrong state on mirosoft account

My mircosoft account has wrong state. Its California.

↧

I've not been able to sign into the careers site for weeks now.

January 1, 2015, 10:57 am

≫ Next: A New Year, a New Challenge! Become the FIRST FIM Guru of 2015!

≪ Previous: manager Have wrong state on mirosoft account

I always get this error:

"Something went wrong and we can't sign you in right now. Please try again later. "

Anything I can do to fix this?

↧

A New Year, a New Challenge! Become the FIRST FIM Guru of 2015!

January 3, 2015, 3:34 pm

≫ Next: ILM to FIM 2010 Migration.

≪ Previous: I've not been able to sign into the careers site for weeks now.

Happy New Year!

"Guru 2014" is so 'last year'!

The real glory is to be the first Guru of 2015! :D

The birth of a new year, and a new hero?

Or the stamp of authority from long established Guru leaders?

The challenge is on, all eyes are watching, anyone could win this month.

The prize? Glory! Honor! Virtual medals! Unashamed love and worship from those within the community and those bloging about it (article spotlights, weekly awards). Published interviews and the chance to climb the TechNet social ladder. Become a true TNWiki Ninja and advance through to black belt... and beyond!

All you have to do is add an article to TechNet Wiki from your own specialist field. Something that fits into one of the categories listed on the submissions page. Copy in your own blog posts, a forum solution, a white paper, or just something you had to solve for your own day's work today.

Drop us some nifty knowledge, or superb snippets, and become MICROSOFT TECHNOLOGY GURU OF THE MONTH!

This is an official Microsoft TechNet recognition, where people such as yourselves can truly get noticed!

HOW TO WIN

1) Please copy over your Microsoft technical solutions and revelations toTechNet Wiki.

2) Add a link to it on THIS WIKI COMPETITION PAGE (so we know you've contributed)

3) Every month, we will highlight your contributions, and select a "Guru of the Month" in each technology.

If you win, we will sing your praises in blogs and forums, similar to the weekly contributor awards. Once "on our radar" and making your mark, you will probably be interviewed for your greatness, and maybe eventually even invited into other inner TechNet/MSDN circles!

Winning this award in your favoured technology will help us learn the active members in each community.

Feel free to ask any questions below.

More about TechNet Guru Awards

Thanks in advance!
Pete Laker

#PEJL
Got any nice code? If you invest time in coding an elegant, novel or impressive answer on MSDN forums, why not copy it over toTechNet Wiki, for future generations to benefit from! You'll never get archived again, and you could win weekly awards!

Have you got what it takes o become this month's TechNet Technical Guru? Join a long list of well known community big hitters, show your knowledge and prowess in your favoured technologies!

↧

ILM to FIM 2010 Migration.

January 4, 2015, 1:20 pm

≫ Next: What does IE browser do when the slug value in the request header has special characters?

≪ Previous: A New Year, a New Challenge! Become the FIRST FIM Guru of 2015!

Hello All,

We are planning to upgrade ILM 2007 to FIM 2010 and plan is to use existing ILM database.

--Restore it to the new DB server with the name “FIMSynchronizationService”,
--Install FIM Sync, telling it to use the restored DB, and providing the encryption keys,

This is will be my first time upgrading from ILM to FIM 2010, I have done previously couple of new FIM 2010 installation and upgrade it FIM 2010 R2 with the encryption key.

As ILM and FIM 2010 ,the platform requirement is quite different and inplace upgrade is not possible, so we are planning to build a new server for FIM rather than in place upgrade.

I never show FIM 2010 ask for encryption key in new installation in a new server. As we are planning to use the existing database , I need guidance how can i use the encryption key of ILM while upgrading to FIM 2010.

Kindly share your thought.

Regards,
Raja Village

↧

What does IE browser do when the slug value in the request header has special characters?

January 5, 2015, 2:19 am

≫ Next: Add users to a group from another Active Directory domain

≪ Previous: ILM to FIM 2010 Migration.

Hi ,

I would like to know how does IE browser handle slug if the value field has certain special characters.

For example if the slug header has special characters while posting the http request (say "äøéëåæ")

Then I see using http watch under the "Stream"tab , the slug value is getting converted to a different value(now the value for the above mentioned slug is " Ã¤Ã¸Ã©Ã«Ã¥Ã")

Could someone please explain how does this happen in IE browser?

Thanks alot,

Neelaja

↧

Add users to a group from another Active Directory domain

January 5, 2015, 4:56 am

≫ Next: Getting "stopped-ma" error on Delta Import of FIM Management Agent.

≪ Previous: What does IE browser do when the slug value in the request header has special characters?

Hi Folks,

I need add users in a group the active directory through the FIM 2010 R2.

My scenery it is:

Domain A with FIM 2010 R2 provisioning users for Domain B;

I need get users the Domain B and add in group in Domain C.

What's better way, create FIM portal for them, or create aditional script/development for FIM 2010 R2.

Thanks a lot!

Wilsterman Fernandes

↧

Getting "stopped-ma" error on Delta Import of FIM Management Agent.

January 5, 2015, 5:25 am

≫ Next: Add users to a group from another Active Directory domain

≪ Previous: Add users to a group from another Active Directory domain

Hi,

In our environment, we have scheduled the run profiles(using Powershell script) to execute Import/Export profiles for every half an hour.It is working fine. But, every day in the morning, the Delta Import is failing which inturn does not sync the new/old users with AD. So, for this i am manually doing Delta Import on FIM MA using FIM Sync Service console. It is giving"stopped-ma" error on "Delta Import". After i do a full Import every thing is working fine. Even scheduled Run Profiles are also working fine.

This is happening daily. Every day morning, the scheduled run profiles are not working due to falied Delta Import. Once i manually do Full Import, then every thing is working fine. But this solution can't be an appropriate solution in Production environment.

Could you please provide an appropriate solution for this issue.

Thanks

Prasanthi.

↧

Add users to a group from another Active Directory domain

January 5, 2015, 7:11 am

≫ Next: Get all Persons via Database select

≪ Previous: Getting "stopped-ma" error on Delta Import of FIM Management Agent.

Hi Folks,

I need add users in a group the active directory through the FIM 2010 R2.

My scenery it is:

Domain A with FIM 2010 R2 provisioning users for Domain B;

I need get users the Domain B and add in group in Domain C.

What's better way, create FIM portal for them, or create aditional script/development for FIM 2010 R2.

Thanks a lot!

Wilsterman Fernandes

↧

Get all Persons via Database select

January 5, 2015, 7:33 am

≫ Next: Computer administrator

≪ Previous: Add users to a group from another Active Directory domain

Hello all,

if you ever need to get all Persons and its string values in an easy way directly from your database such as the xpath select

" Select * from /Person" use following Database select against your FimService Database:

--determine dynamically the columns for pivot

DECLARE @cols AS NVARCHAR(MAX),
@query AS NVARCHAR(MAX)

select @cols = STUFF((SELECT ',' + QUOTENAME(Name)
                    FROM [fim].[ObjectValueString] AS [o]
                   INNER JOIN [fim].[AttributeInternal] AS [ai]
                   ON [ai].[Key] = [o].[AttributeKey]
                   WHERE
                   [o].[ObjectTypeKey] = 24
                   group by Name FOR XML PATH(''), TYPE).value('.', 'NVARCHAR(MAX)'),1,1,'')

set @query = N'SELECT ' + @cols + N' from
             (SELECT
               [ai].[Name],
               CAST ([o].[ValueString] AS NVARCHAR(MAX)) as Value,
               ROW_NUMBER() over(partition by [ai].Name order by [o].[ValueString]) rn
               FROM [fim].[ObjectValueString] AS [o]
               INNER JOIN [fim].[AttributeInternal] AS [ai]
               ON [ai].[Key] = [o].[AttributeKey]
               WHERE
               [o].[ObjectTypeKey] = 24 --Type for Persons
             ) x
             pivot
             (
                Max(Value)
                for Name in (' + @cols + N')
             ) p '

exec sp_executesql @query;

↧

Computer administrator

January 5, 2015, 12:28 pm

≫ Next: BHOLD-B1Service not starting after bhold core installation

≪ Previous: Get all Persons via Database select

My Administrator authority has been changed in my control panel and I am unable to change back from Standard which I did not do. Each time I change the box and think I have made the change, the standard stays the same. How do I change this?

↧