Adventures in identity management
I’ve been having a bit of a play with the powershell interface to the FIM Portal. I wanted to pre-populate a demo environment with an interesting set of criteria-based Securoity and Distribution groups, but they get a bit tedious to create by hand, and I wanted to see if powershell was the answer. I’m pretty…
Another off-topic post today, because lately it’s all been migrations – Exchange migrations, data migrations, printer migrations…. I think I might have to rename this blog Miss Migrations! As part of an enourmous data migration involving server name and drive letter changes, I was tasked with repairing links in thousands of Excel spreadsheets. We trialled…
The most popular post on this blog continues to be Adding Exchange 2003 Mailboxes to Existing Accounts so I’m guessing this is something a lot of people need to do. ATTENTION: PLEASE SEE this post INSTEAD for the basic method. I hadn’t posted an Exchange 2007 method earlier because I haven’t needed to do it in production, and the ongoing…
Note June 2011: This post gets a lot of hits but is very old now. I haven’t revisited the powershell-Excel story since writing this post and it may well be a lot easier now. I would love nothing better than to do one ILM project after another, but it doesn’t always pan out like that,…
In some implementations, it makes sense (usually by improving performance) to separate your user and group provisioning into seperate MAs. One downside of this approach, however, is that you can run into export errors when trying to update a group with a member who doesn’t exist in the external directory – and this includes delete…
As promised, I am now making my ILM_Scheduler service source code available for download. In brief, the notion is to optimise ILM/MIIS scheduling through the use of a queue. You add jobs to the queue and they are executed, one at a time, and in order of priority. You can schedule a job by adding…
Function RunProfile – run a MA run profile Sub ArchiveLog – copy import and export logs to a timestamped version, while modifying them to work with a XML stylesheet Function ExportsPending – check if the MA has pending exports Function DeltaImportsPending – check if a Delta table has any lines to import Function RunSSIS – call a SQL 2005…
A truly effective IdM system should be able to tidy up user data as part of the user-decommissioning process. This might include zipping up home folders and, in the case of email, archiving mailboxes to something like a PST file. My old method of archiving mailboxes with Exmerge when disabling Exchange users won’t work with…
You don’t always have access to a proper IdM system. At the moment I’m at an organisation which still uses the old, manual ways of updating AD. I was asked if I knew an easy way to update the mobile phone numbers of a list of users, the data having been sent to Helpdesk in…
Follwing on from yesterday’s post, where I wrote about hanging on to your import and export logs, I now present a way to view them using an xml stylesheet. The first problem with this approach is that the xml files produced by MIIS don’t work with a stylesheet. The stylesheet name must be included in…