Identity and Access Management Support Team Blog
learn.microsoft.com/en-us/archive/blogs/iamsupport
SecurityDevOps / SRE / infrastructureMicrosoft blogsMSDN archive
- Posts
- 198 from 29 May 2010 to 11 Jan 2019
- Posting
- archived, read-only
- Kind
- company blog
- Feed
- https://learn.microsoft.com/en-us/archive/blogs/iamsupport/feed.xml
2019 1
2018 21
- Support-Tip: (INSTALLATION): EXO Configuration Failure during installation
- Support-Release: (MIM2016): Microsoft Identity Manager 2016 SP1 hotfix (4.5.26.0) Released
- Support-Info: (CONNECTORS): Failed to create ADMA (Receiving error 80230910)
- Support-Info: (INSTALLATION): Error 1722. There is a problem with this Windows Installer package
- Support-Tip: (INSTALLATION): Installation Companion - Accounts Reference
- Support-Tip: (AADCONNECT): How to insert the TargetAddress Attribute Value into the ProxyAddresses list
- Support-Info: (FIMMA): failed-creation-via-web-services
- Support-Info: (GROUP MANAGEMENT): Group information is not being synchronized to/from Active Directory
- Support-Info: (PCNS): PCNS is not sending passwords to the Synchronization Service Engine
- Support-Info: (SSPR) : Troubleshooting SSPR 3001 and 3008
- Support-Info: (INSTALLATION): Troubleshooting MIM Service/Portal Install/Upgrade IsSharepointAdminServiceRunning Error
- Support-Info: (INSTALLATION): Sync Engine fails uninstall: Microsoft Identity Manager Synchronization Service was not successfully installed
- Support-Info: (CM): Renew Certificate for the CMAGENT Fails with One or more signatures did not include the required application or issuance policies
- Support-Info: (CONNECTORS): Full Import on SQL Server MA is showing a large number of deletes
- Support-Info: (INSTALLATION): Exception has been thrown by the target of an invocation. System.UnauthorizedAccessException: Access is denied.
- Support-Info: (CONNECTORS): How to work around the "Replicate Directory Changes" to connect to AD for the ADMA or GalSync MA
- Support-Info: (CONNECTORS): Supported Active Directory (AD) Version for Active Directory Management Agent (AD MA)
- Support-Release: (CONNECTORS): Release of Generic Connectors v1.1.830.0
- Support-Tip: (AADCONNECT): 0x80230307 (The dimage indicates an add operation, but the image already exists
- Support-Info: (SharePoint UPA) FIM Services don't start: Error creating com objects. Error code: -2147467259
- Support-Tip (INSTALLATION): Failed to connect to the specified database
2017 52
- FIM SP1 R2 4.1.3766 Upgrade to MIM SP1 4.4.1302 In-place Direct Upgrade
- Support-Release: (MIM2016): Microsoft Identity Manager 2016 SP1 hotfix (4.4.1749.0) Released
- Support-Info: (FIM Service MA): RunStatus: Stopped-Server Troubleshooter Resources
- Support-Tip: (FIM Service MA): Stopped-Server: The export session has timed out waiting for responses
- Support-Release: (BHOLD): MIM 2016 SP1 BHOLD Suite Release 6.0.36.0
- Support-Tip: (AADCONNECT): Provisioning non-mail enabled user when joining on mail
- Support-Tip: (AADCONNECT): Object reference not set to an instance of an object when adding a new sync rule
- Support-Release: (AADCONNECT): New Version Release 1.1.614.0
- Support-Tip: (FIM Service MA): stopped-server - Error: 15517: State: 1. Cannot execute as the database principal because the principal "dbo" does not exist this type of principal cannot be impersonated or you do not have permission.
- Support-Release: (MIM2016): Microsoft Identity Manager 2016 SP1 hotfix (4.4.1642.0) Released
- Microsoft Identity Manager 2016 SP1 Portal (4.4.1642.0 or Later) – Support for IME from Registration and Reset portal & Immediate password masking
- Microsoft Identity Manager 2016 SP1 Portal (4.4.1642.0 or Later) – Support Add-ins and Extensions language default language
- Microsoft Identity Manager 2016 SP1 Portal (4.4.1642.0 or Later) – Support for SSPR Reset from pre-registered user in sync connected untrusted domain.
- Support-Tip: (GALSYNC): Exchange 2010 Provisioning: extension-dll-timeout on Export
- Support-Warning (LIFECYCLE): Support ends for ILM 2007, 2007 FP1, 2007 FP1 SP1
- Support-Info: (DATABASE): What SQL Server is hosting my FIM/MIM database
- Support-Info: (INSTALL): SharePoint was not detected
- Support-Info(UPA2010): Failed to configure ILM MA
- Support-Release:(CONNECTORS): New Connectors Update 1.1.551.0
- Support-Info: (AADCONNECT): Provisioning with Non-AD Connector
- SUPPORT-TIP: (INSTALL): Custom Action DetectServiceAccount causes install to fail
- Support-Tip: (SYNC): Unable to connect to the Synchronization Service" error when you attempt to open the MIISCLIENT.EXE
- Support-Info: (INSTALL-UPGRADE): MIM 2016 Upgrade Issues on builds 4.1.3646 / 4.1.3634 / 4.1.3627 / 4.1.3733 / 4.1.3766
- Support-Tip:(CM): FIM/MIM Certificate Management (CM) and Certificate Management Agent (cmAgent) certificate issued by a Foreign Certification Authority (CA)
- Support-Release: New Release of Azure AD Connect (AADCONNECT)
- Support-Tip:(SYNC): stopped-server status during a synchronization
- Support-Info:(GALSYNC): How to flow the thumbnailPhoto in a GalSync Solution
- Support-Tip: (FIM MA): App-Store-Import-Exception Run Status
- Support-Tip: (SYNC): Unexpected Error - 0x8023044d (SQL operation fails because of data overflow.)
- Support-Info: (DOCS): Documentation Update for MIMPAM CMDLETS
- Support-Info: (SYNC SERVICE): Export Run Profile: Information, Testing, Troubleshooting
- Support-Tip: (PAM) MIM PAM SAMPLE Portal | HTTP Error 500.19 - Internal Server Error
- Support-Preview: Microsoft Identity Manager Hybrid Reporting with Audit activity reports in the Azure Active Directory portal now in Public Preview (Refresh)
- Support-Tip: (PCNS) Passwords stopped synchronizing, Passwords stopped working
- Support-Info: Criteria Based Groups (Negative Conditions vs. Positive Conditions)
- Support-Tip (Connectors): Creating SharePoint Profile Store Management Agent
- Support-Info: MIM 2016 SP1 Certificate Manager Modern Application (1.0.225.104) Release
- Support-Info: (INSTALLATION) Troubleshooting Installation Error 25009
- Support-Release (MIM2016): Microsoft Identity Manager 2016 SP1 hotfix (4.4.1459.0) Released
- Microsoft Identity Manager 2016 SP1 Portal (4.4.1459.0 or Later) - Approval Justification Entry Enhancement
- Microsoft Identity Manager 2016 SP1 Portal (4.4.1459.0 or Later) – Support for CustomObject (ExplicitMember) Membership Management
- Microsoft Identity Manager 2016 SP1 Portal (4.4.1459.0 or Later) - Support for FIMService Dynamic Logging
- Microsoft Identity Manager 2016 SP1 Portal (4.4.1459.0 or Later) – Support for SCSM 2016 Reporting
- Using Microsoft Identity Manager 2016 SP1 Portal / Self Service Password Reset with Web Application Proxy
- Microsoft Identity Manager 2016 SP1 (4.4.1459.0 or Later) – Support for SQL 2016 Always On Availability Groups
- Support-Info: (AADCONNECT): Azure AD Connect Sync Security Groups
- Support-Tip: (AADCONNECT): Sync Rules - Precedence
- Support-Tip: (AADCONNECT): Custom Synchronization Rules - (Testing)
- Support-Release: (Connectors): Management Agents New Release for MIM and FIM 2010 R2
- Support-Warning (LIFECYCLE): Forefront Identity Manager (FIM) mainstream support is ending 10/10/2017
- Support-Tip: (AADCONNECT): How to deprovision an Azure AD CS object
- Support Tip: BHOLD–Attestation Portal stops working
2016 27
- [Support Tip] :: MIM 2016 SP1 Slip Stream build is now available
- KB: SQL Server availability solutions for Microsoft Identity Manager services databases
- Support-Info: (AADCONNECT): How to merge a group object with a contact object
- On startup a system with the SSPR Rich client installed posts "Unable to Launch Web Browser"
- Support-Release: (MIM2016): Microsoft Identity Manager 2016 Service Pack 1 update package
- Support Tip: MIM SP1 PAM install failure: CreateAuthenticationPolicyAndSilo Error The user has insufficient access rights.
- Tuning FIM Service MA Export Processing
- Support-Info: (GalSync) GalSync Related Information
- [SUPPORT TIP]: How to get Sync Statistics using WMI
- Support Tip: Troubleshooting Synchronization Error: ambiguous-import-flow-from-multiple-connectors
- [SUPPORT TIP]: FIM CM 2010 / MIM CM 2016 Admin Key Diversification and Certificate Renewal
- Support-Info: (RUN HISTORY): How to use the MIIS_RunHistory WMI Class
- [SUPPORT TIP] How to delete a single group from the Identity Management Portal using PowerShell
- A hotfix rollup package (build 4.3.2266.0) is available for Microsoft Identity Manager 2016
- A hotfix rollup package (build 4.1.3765.0) is available for Forefront Identity Manager 2010 R2
- Now Available: MIM 2016 June Preview
- [FIM Portal Access] The server principal is “S-1-9-3….” is not able to access the database. “FIMService” under the current security context
- [SUPPORT TIP] How to manipulate the email suffix on Primary SMTP proxyAddress
- [SUPPORT TROUBLESHOOTING] Group Objects Sync Error: Error in evaluation of expression - securityEnabled
- Support-Tip: (AADCONNECT): Filtering - Control which groups sync to O365
- [SUPPORT TROUBLESHOOTING] Duplicated Contact Objects
- [NOTESCONNECTOR-INFO] Full Import returns stopped-extension-dll-exception
- Support-Tip: (AADCONNECT): Filter Provisioned CNF Objects
- [INFO-SYNCSERVICE] Export with Exchange Provisioning Enabled
- [FIM SYNC RULE - INFO] Dealing with the Null Function in a Sync Rule
- Support-Tip: (AADCONNECT) How to create a custom sychronization rule for attribute flow (transformation flow)
- FAQ for FIM 2010 to MIM 2016 upgrade and SHA2 support
2015 46
- [SUPPORT TROUBLESHOOTING] Forefront Identity Manager Synchronization Service Not Starting - Error creating com objects
- KB: Microsoft Azure AD Management Agent hangs during Full Import or Delta Import
- INFO: Azure AD Connector Troubleshooting Resources
- [INFO] Provisioning a Mail Enabled User
- [INFO] Service account is not secure in its current configuration
- [INFO] Warning 25051
- [AZURE AD CONNECT SYNC SERVICES] HOWTO: Control which attribute flows to UPN
- Support-Info: (Sync): Run Profile Optimization
- We Have Moved : https://blogs.technet.com/b/iamsupport/
- [INFO] Installing the Microsoft Identity Manager 2016 Service and Portal (With SSPR) - Clean Install
- [INFO] Installing the Microsoft Identity Manager 2016 Synchronization Service - Clean Install
- [HOWTO]: How to loop through proxyAddresses and update the primary SMTP
- [INFO] Configuration of the Privileged Access Management (PAM) feature
- Managing ActiveSync and OWA Natively in FIM
- [INFO]: MIISACTIVATE - Logon failure: the user has not been granted the requested logon type at this computer
- [INFO] Updating the FIMMA to include Custom Attributes in the FIM Portal.
- Backing up the Synchronization Service Encryption Key
- MIM 2016 Upgrade : Database upgrade tool has encountered at least one error when upgrading FIM configuration objects
- MIM 2016 Upgrade issues on builds 4.1.3646.0 or 4.1.3634.0 or 4.1.3627.0
- Installing the Microsoft Identity Manager 2016 (4.3.1935.0) Service and Portal - Upgrade from FIM 2010 R2
- Performing an In-Place Upgrade of FIM 2010 R2 to Microsoft Identity Manager 2016 - Service and Portal
- Installing the Microsoft Identity Manager 2016 (4.3.1935.0) Synchronization Service - Upgrade from FIM 2010 R2
- Introduction to Troubleshooting
- Understanding Workflows
- What do you want to see in this Blog
- Understanding the MPR Explorer
- Quickly and Easily Managing FIM Portal Administrators
- Understanding userAccountControl management with FIM.
- Configuring the FIM Management Agent
- Creating and Binding Custom Portal Attributes
- ExternalAuthenticationHandler.Process() exception: System.Net.WebException: The request failed with HTTP status 405: Method Not Allowed
- A new hotfix rollup package is available for Microsoft Forefront Identity Manager 2010 R2 SP1
- Which Device Registration Service (DRS)
- Workplace Join failed 0x10dd (a.k.a. how to properly change/set your #ADFS certificates)
- Portal Customization - Creating Search Scopes
- Portal Customization - Understanding Search Scopes
- Deprovisioning In-Depth: Part 3 - Deletions
- Deprovisioning In-Depth: Part 2 - Explicit Disconnectors
- Deprovisioning In-Depth: Part 1 - Disconnectors
- the Joiner Tool (aka, the scary button on the end)
- Portal Customization - Updating Attributes for All Users Search (Column Headers)
- Changing A Value Used By Join Logic
- Understanding User Management - Inbound User Synchronization
- Understanding Group Management - Outbound Group Synchronization
- Understanding Group Management - Inbound Group Synchronization
- Changing the look of FIM SSPR portals: an example style sheet for password reset portal
2014 17
- Forefront Identity Manager 2010 R2 build 4.1.3613.0 released
- A FIM 2010 R2 hotfix rollup is now available for the Generic LDAP connector
- [SUPPORT TROUBLESHOOTING] RPC Error 8453 Replication access was denied in Azure AD Sync Services #AADSync
- [SUPPORT NEWS] New version of #AADSync released
- Support-Release: (CONNECTORS): Hotfix rollup build 1.0.419.911 of the Generic LDAP Connector for Forefront Identity Manager 2010 R2 (#FIM2010) has been released
- Support-Release: (CONNECTORS): Hotfix rollup build 1.0.419.911 for the Web Services Connector for Forefront Identity Manager 2010 R2 (#FIM2010) has been released
- New hotfix available to fix PowerShell connector issue in FIM 2010 R2
- New FIM 2010 R2 hotfix for the WebServices connector
- A new hotfix rollup (build 4.1.3559.0) is available for Forefront Identity Manager 2010 R2
- [SUPPORT TROUBLESHOOTING]: FIM Service stops intermittently - FIM Service fails to start
- A hotfix rollup package (build 4.1.3510.0) is available for Forefront Identity Manager 2010 R2
- Hotfix rollup (build 4.3.1082.0) is available for the Generic LDAP connector for Forefront Identity Manager
- [Troubleshooting] Certificate Services fail to start after installing CM CA Modules
- [Troubleshooting] GalSync MA: Exchange 2010 Provisioning - “extension-dll-timeout” error on export
- [Troubleshooting] Windows Azure Active Directory Connector - User Objects Not Provisioned to Azure MA Connector Space
- [SUPPORT TROUBLESHOOTING] Connectors: Azure Active Directory Connector: stopped-extension-dll-exception
- Reference: How to have bidirectional flow for EmployeeEndDate and AccountExpires
2013 11
- [TROUBLESHOOTING] The Synchronization Service Engine Crashes
- [REFERENCE] Installing Forefront Identity Manager Certificate Management Components on Windows Server Certificate Authority
- [REFERENCE] HOW TO: PowerShell Workflow: Execute PowerShell with an account other than FIMService
- [Reference] Suppress SSPR Registration Page at Logon
- [Troubleshooting] SSPR Reset Portal - Error attempting to reset password
- Reference: New Connectors Available: Windows Azure Active Directory, Generic LDAP, SharePoint User Profile Store
- [Troubleshooting-BHOLD] There is a problem with this Windows Installer package.
- [SUPPORT TROUBLESHOOTING] DirSync FIM Sync Service would not start
- [Troubleshooting] CheckSharepointFarmAdministratorWithOpenPermission
- [Troubleshooting] The FIM server you have entered does not exist or is not running.
- stopped-server: msidmCompositeType or Asynchronous Processing Scenario
2011 8
- TechEd USA sessions starting to show up
- FIM 2010 R2 Community Evaluation Program
- SAML-P support in Windows Identity Foundation coming
- FIM 2010 Updates via RSS Feed
- Identity cloud service released–Windows Azure Appfabric Access Control service
- New Article: Understanding FIM Service Partitions
- Identity and Access coming to MMS 2011
- New rollup hotfix package for Forefront Identity Manager released
2010 15
- TechEd Europe – Identity and Access Sessions
- Race to the Cloud – IDA summit hosted by Oxford Computer Group
- FIM Management Agents from partners now a WIKI page
- Software as a Service demo available
- Set of TechNet articles on AD Federation Services
- New Books on Identity and Access (FIM 2010 and WIF)
- FIM 2010 Online Training
- FIM custom activity walkthrough published on MSDN
- Microsoft IT using AD FS 2.0 case study
- FIM Management Agents from Partners
- Guide on how to integrate ADFS 2.0 and CA Federation Manager
- Visio stencil and what is a FIMster?
- Technical overview whitepaper on FIM 2010
- FIM Community Knowledge Box
- Forefront Identity Manager 2010 – What is new in Update 1