Adventures in identity management
Following on from my recent post about Upgrading MIIS/ILM to FIMÂ I’ve now posted the helper scripts mentioned in that post (and demo’d in my TEC session) on the brand new FIM Team Community site. We’ll be putting various goodies on this site that we want to make publicly available and the other thing you’ll find…
A long time ago I wrote up a method that could be used to archive the MIIS import and export logs, while also making them more readable with a stylesheet. I’ve now implemented this on a FIM 2010 server, and it works, so I’m going to write it up again.
Another off-topic post today, because lately it’s all been migrations – Exchange migrations, data migrations, printer migrations…. I think I might have to rename this blog Miss Migrations! As part of an enourmous data migration involving server name and drive letter changes, I was tasked with repairing links in thousands of Excel spreadsheets. We trialled…
In some implementations, it makes sense (usually by improving performance) to separate your user and group provisioning into seperate MAs. One downside of this approach, however, is that you can run into export errors when trying to update a group with a member who doesn’t exist in the external directory – and this includes delete…
As promised, I am now making my ILM_Scheduler service source code available for download. In brief, the notion is to optimise ILM/MIIS scheduling through the use of a queue. You add jobs to the queue and they are executed, one at a time, and in order of priority. You can schedule a job by adding…
Function RunProfile – run a MA run profile Sub ArchiveLog – copy import and export logs to a timestamped version, while modifying them to work with a XML stylesheet Function ExportsPending – check if the MA has pending exports Function DeltaImportsPending – check if a Delta table has any lines to import Function RunSSIS – call a SQL 2005…
A truly effective IdM system should be able to tidy up user data as part of the user-decommissioning process. This might include zipping up home folders and, in the case of email, archiving mailboxes to something like a PST file. My old method of archiving mailboxes with Exmerge when disabling Exchange users won’t work with…
You don’t always have access to a proper IdM system. At the moment I’m at an organisation which still uses the old, manual ways of updating AD. I was asked if I knew an easy way to update the mobile phone numbers of a list of users, the data having been sent to Helpdesk in…
Follwing on from yesterday’s post, where I wrote about hanging on to your import and export logs, I now present a way to view them using an xml stylesheet. The first problem with this approach is that the xml files produced by MIIS don’t work with a stylesheet. The stylesheet name must be included in…
As I’ve mentioned before, I don’t think there’s a lot of value in keeping days of Run History. Far more useful are the Import and Export logs that you should be dumping from your Run Profiles. Using these files you can track exactly what went in and out, and more importantly, when it happened. This…