The Curious Engineer

All blogs / Security

Solve your Identity crisis without therapy

learn.microsoft.com/en-us/archive/blogs/ms-identity-support

This blog is designed to cover information that the Security Identity Support Team encounteres and is able to share.

SecurityDevOps / SRE / infrastructureMicrosoft blogsMSDN archive

’10’15’20’25
Posts
204 from 18 May 2009 to 14 Jul 2016
Posting
archived, read-only
Kind
company blog
Feed
https://learn.microsoft.com/en-us/archive/blogs/ms-identity-support/feed.xml

2016 2

  1. FAQ for FIM 2010 to support SHA2, KSP/CNG and v3 certificate templates for issuing user and agent certificates and MIM 2016 upgrade
  2. FAQ for FIM 2010 to MIM 2016 upgrade and SHA2 support

2015 4

  1. KB: Microsoft Azure AD Management Agent hangs during Full Import or Delta Import
  2. HOWTO: How to loop through proxyAddresses and update the primary SMTP
  3. Support-Tip (MIISACTIVATE.EXE): Logon failure: the user has not been granted the requested logon type at this computer
  4. [HOTFIX] A new hotfix rollup package is available for Microsoft Forefront Identity Manager 2010 R2 SP1

2014 12

  1. [HOTFIX] A FIM 2010 R2 hotfix rollup is now available for the Generic LDAP connector
  2. [HOTFIX] New hotfix available to fix PowerShell connector issue in FIM 2010 R2
  3. [HOTFIX] New FIM 2010 R2 hotfix for the WebServices connector
  4. [HOTFIX] A new hotfix rollup (build 4.1.3559.0) is available for Forefront Identity Manager 2010 R2
  5. INFO: FIM Service stops intermittently - FIM Service fails to start
  6. [HOTFIX] A hotfix rollup package (build 4.1.3510.0) is available for Forefront Identity Manager 2010 R2
  7. [HOTFIX] Hotfix rollup (build 4.3.1082.0) is available for the Generic LDAP connector for Forefront Identity Manager
  8. [INFO] Certificate Services fail to start after installing CM CA Modules
  9. [Troubleshooting] GalSync MA: Exchange 2010 Provisioning - “extension-dll-timeout” error on export
  10. [Troubleshooting] Windows Azure Active Directory Connector - User Objects Not Provisioned to Azure MA Connector Space
  11. [Troubleshooting] Connectors: Azure Active Directory Connector: stopped-extension-dll-exception
  12. Reference: How to have bidirectional flow for EmployeeEndDate and AccountExpires

2013 93

  1. [TROUBLESHOOTING] The Synchronization Service Engine Crashes
  2. [REFERENCE] Installing Forefront Identity Manager Certificate Management Components on Windows Server Certificate Authority
  3. [REFERENCE] HOW TO: PowerShell Workflow: Execute PowerShell with an account other than FIMService
  4. [Reference] Suppress SSPR Registration Page at Logon
  5. [Troubleshooting] SSPR Reset Portal - Error attempting to reset password
  6. Reference: New Connectors Available: Windows Azure Active Directory, Generic LDAP, SharePoint User Profile Store
  7. [Troubleshooting-BHOLD] There is a problem with this Windows Installer package.
  8. [Troubleshooting] DirSync FIM Sync Service would not start
  9. [Troubleshooting] CheckSharepointFarmAdministratorWithOpenPermission
  10. [Troubleshooting] The FIM server you have entered does not exist or is not running.
  11. Support-Info:(SYNC SERVICE): stopped-server: msidmCompositeType or Asynchronous Processing Scenario
  12. [Reference] ETW tracing for Microsoft.ResourceManagement.Service
  13. [Reference:] Refreshing the Interfaces of an ECMA 2.0-based Version of the Lotus Domino Connector
  14. [Troubleshooting] BHOLD Core installation: Contact your support personnel or package vendor. Custom action CA_CoreProductGetWebsiteExists script error -2147217394,
  15. [Troubleshooting] Forefront Identity Manager Server Database could not be successfully deployed.
  16. [Reference] Steps to enable tracing in the Directory Synchronization Password Synchronization component
  17. [Troubleshooting] Failed to retrieve schema - Event ID 6331 - A update on the configuration of a MA or MV failed to replicate
  18. [Reference] Quick Guide to installing BHOLD Core
  19. [Reference] Setting Manager Attribute from Text-File MA
  20. [Troubleshooting] FIM CM – Attempts to Retire Smart Card Receive Error 0x80072116
  21. [Reference] Improve FIM CM Search Performance When Using Custom or AD Attributes
  22. [Reference] Increasing the Max Pool Size in FIM CM
  23. [Troubleshooting] FIM CM Certificate Request Error: Denied by Policy Module
  24. [Reference] Discovery Errors
  25. [Troubleshooting] Install FIM Data Warehouse Support Scripts when the Data Warehouse SQL database resides on a Remote SQL Server
  26. [Reference]: How to easily export a connector space list to excel
  27. [Troubleshooting] Event ID 10016 - The application-specific permission settings do not grant Local Activation permission for the COM Server application
  28. [Troubleshooting] Password reset is successful but still throws an error 3000
  29. [Troubleshooting] FIM Service upgrade fails on 'GetCertThumbprintFromName'
  30. [Troubleshooting] BHOLD Increase session lifetime for BHOLD core
  31. [Troubleshooting] FIM Reporting Installation using System Center Service Manager 2012 Sp1
  32. [Troubleshooting] FIM Reporting - A Transport-level error has occurred during Initial Sync
  33. [Troubleshooting] BHOLD SP1 - Users are getting added to other user's personal roles
  34. [Troubleshooting] Refresh Schema on FIM MA fails: Event ID 6331
  35. Troubleshooting FIM: Event ID: 6152 – stopped-extension-dll-load
  36. [Troubleshooting] FIM Service Polling the Exchange Web Service (EWS) fills the Application Event Log
  37. [Troubleshooting] Failed to connect to specified database. The extension operation aborted due to an internal error in FIM Synchronization Service:
  38. [Troubleshooting] Synchronization Console Hangs When Modifying a Lotus Notes Management Agent
  39. [Troubleshooting] BHOLD: Self-Service module fails to load due to Unauthorized Login
  40. [TROUBLESHOOTING] SSPR Registration: You or somebody else attempted to reset your password
  41. [TROUBLESHOOTING] FIM Portal access: Invalid Token for impersonation
  42. [TROUBLESHOOTING] Full Import: no-start-bad-ma-config Error 6009
  43. [TROUBLESHOOTING] Failed-Creation-Via-Web-Services: The endpoint could not dispatch the request
  44. [TROUBLESHOOTING] Failed-Creation-Via-WebServices Troubleshooter
  45. [TROUBLESHOOTING] Failed-Creation-Via-Web-Services: InvalidRepresentationException: ValueViolatesUniqueness
  46. [REFERENCE] How to load pictures to Active Directory via FIM using an ECMA
  47. [TROUBLESHOOTING] Failure to install hotfix – VerifySharePoint2010ClaimsAuthenticationOff. Return value 3
  48. [TROUBLESHOOTING] Event ID 6309 - Connection is busy with results for another command
  49. [TROUBLESHOOTING] Error Code 9506 on ADMA When Trying to Connect to Domain
  50. [REFERENCE] SAP Management Agent General Information
  51. [TROUBLESHOOTING] FIM Service Management Agent - Failed to connect to the specified database
  52. [REFERENCE] Azure IaaS and FIM 2010 R2 SP1
  53. [Troubleshooting] Installing FIM reporting with warning: “You have entered an invalid System Center Service Management Name”
  54. [REFERENCE] In-Box Lotus Notes Connector no longer supported
  55. [REFERENCE] How to Use OOB Function Evaluator workflow to parse EMail for MailNickname:
  56. [TROUBLESHOOTING] SUN One MA Import stopped-connectivity
  57. [TROUBLESHOOTING] FIM Service Stopping Every Ten Minutes - Oracle MA
  58. [TROUBLESHOOTING] SSPR Rich client gets "an error was encountered:
  59. [TROUBLESHOOTING] SSPR - Could not connect to the password reset service.
  60. [TROUBLESHOOTING] . Password Change Notification Service received an RPC exception attempting to deliver :
  61. [TROUBLESHOOTING] Not able to create an Oracle Management Agent when using the Oracle 11g client
  62. [TROUBLESHOOTING] Provisioning users to AD returns Kerberos-no-logon-server
  63. [TROUBLESHOOTING] FIM Reporting - Performance issue with p_DiscoveryDataPurgingByBaseManagedEntity
  64. [REFERENCE] How to set AD permissions more granular than "replicating directory changes" on a source active directory so they can be read the ADMA
  65. [TROUBLESHOOTING] Receiving Event ID 1000 with Faulting Application mmsscrpt.exe
  66. [TROUBLESHOOTING] Event ID: 1000
  67. [REFERENCE] Latest hotfix for the Lotus Domino Connector is now available (build 5.3.259.0)
  68. Announcing ECMA 2.2, PowerShell, SharePoint User Profile and Generic LDAP Connector Beta available on Connect
  69. [Troubleshooting] Event ID: 6313: Unable to Load Performance Counters for a Given Management Agent
  70. [TROUBLESHOOTING] FIM Service and Portal Installation - The Web site address "/IdentityManagement" is already in use.
  71. [FIM-TROUBLESHOOTING](Discovery Errors) Sun One Management Agent - multi-single mismatch
  72. [FIM Service Troubleshooting] - Set creation fails when using negative conditions
  73. [FIM-TROUBLESHOOTING} : sync-rule-invalid-xml-attribute-flow
  74. FIM-TROUBLESHOOTING: Notification Workflows that send email from the FIM Service Account are not working
  75. A hotfix rollup package (build 4.1.3419.0) is available for Forefront Identity Manager 2010 R2
  76. [FIM-TROUBLESHOOTING] Service Is Not Available - Invalid SPN on the Application Pool Identity Account
  77. Support-Info: (SYNC SERVICE): Troubleshooting Stopped-Server Information and Links
  78. FIM-REFERENCE: FIM 2010 R2 SP1 Information
  79. [FIM-TROUBLESHOOTING-SSPR] Error 3000 - Value cannot be null.
  80. TROUBLESHOOTING: Active Directory Management Agent Troubleshooting
  81. [FIM-TROUBLESHOOTING] Event ID 6401 – management agent controller encountered an unexpected error
  82. [FIM2010-TROUBLESHOOTING-AD MA] Home Folder Attribute is not flowing correctly
  83. [FIMCM-TROUBLESHOOTING] 0x80092013: revocation function was unable to check revocation
  84. [FIMR2-TROUBLESHOOTING-SSPR] Error 3000 – an error has occurred. Please try again.
  85. [FIM2010R2-TROUBLESHOOTING-SSPR] Error 3000 when attempting to reset password
  86. [FIM-REFERENCE] FIM Portal, FIM Password Registration Portal, and FIM Password Reset Portal Software Requirements
  87. [FIM-TROUBLESHOOTING-RUN PROFILES] 0x8004100E - Invalid Namespace
  88. [FIM2010R2-TROUBLESHOOTING-SSPR] Error 3000 and Error 3004 - You are not authorized to register for password reset:
  89. [Troubleshooting] SSPR Error 3000 Troubleshooter
  90. [FIM2010R2-TROUBLESHOOTING-SSPR] Error 3000
  91. [FIM2010R2-TROUBLESHOOTING-SSPR] Error 3000 with 0x80131047
  92. Support-Info: (RUN HISTORY): Run History Information
  93. Support-Info: (RUN HISTORY): Script to dump the Run History to CSV file

2012 71

  1. FIM-REFERENCE: Which Run Profile Do I run first?
  2. FIM-TROUBLESHOOTING: Installation Error: 25009: Cannot create more than one clustered index on table 'dbo.mms_connectorspace'
  3. FIM-HOWTO: how to install using a SQL Server Alias
  4. FIM-TROUBLESHOOTING: Could not load file or assembly
  5. FIM-TROUBLESHOOTING: Connecting to remote server failed with the following error message: Access is denied
  6. [REFERENCE]: A list of our hotfixes
  7. FIM-HELP REFERENCE: FIM WMI Namespace Provider
  8. FIM-REFERENCE: How to register the FIM WMI Provider
  9. FIM-HELP WMI: Provider Load Failure
  10. FIM-TROUBLESHOOTING: ORACLE MANAGEMENT AGENT: Full Import (Stage Only) completes with the message "Completed No Objects":
  11. FIM-HOW TO: Enabling Verbose Logging for the Lotus Notes Management Agent
  12. FIM-TROUBLESHOOTING: Attempted to perform an unauthorized operation.
  13. FIM-HOWTO: How to programmatically delete an orphaned Synchronization Rule using PowerShell
  14. FIM-TROUBLESHOOTING: FIM Synchronization Service loses connection with backend database
  15. FIM Troubleshooting: FIM Service Start-up Timeout
  16. TROUBLESHOOTING: FIM2010: Event ID 6028-The server encryption keys could not be accessed
  17. TROUBLESHOOTING: FIM CM: 400 errors from the Bulk Issuance Client
  18. TROUBLESHOOTING: FIM CM: While Trying to Search for Cards to Print with the Bulk Client You May Get a HTTP 404 Error (en-us)
  19. [NEW HOTFIX] A hotfix rollup (build 5.0.520.0) is available for Forefront Identity Manager 2010 Lotus Domino Connector
  20. [NEW HOTFIX] A hotfix rollup (build 5.0.520.0) is available for Forefront Identity Manager 2010 Lotus Domino Connector
  21. FIM Troubleshooting: Service 'Forefront Identity Manager Service' (FIMService) failed to start. Verify that you have sufficient privileges to start system services
  22. [TROUBLESHOOTING] Full Import on a SAP Web Services Management Agent Fails
  23. FIM CM Troubleshooting: Portal sporadically fails updating smart card
  24. FIM: TROUBLESHOOTING: FIM Services do not start during upgrade and/or new installation
  25. TROUBLESHOOTING: SSPR: The FIM Password and Authentication Extensions are not currently installed on this computer
  26. TROUBLESHOOTING: (No Display Name) in FIM Portal
  27. TROUBLESHOOTING: CCertRequest::GetCAPropertyFlags: The version of the OLE on the client and server machines does not match. 0x80010110:
  28. [Troubleshooting] Event ID: 1000: Faulting application name: miiserver.exe, version: 4.0.2592.0, time stamp: 0x4b6790ea
  29. FIM-TROUBLESHOOTING: FIM Synchronization Service Engine installation fails with 25009 error
  30. REFERENCE: Run Profiles
  31. TROUBLESHOOTING: FIM Installation: Converting representation of references
  32. TROUBLESHOOTING: FIMCM: No mapping between account names and security IDs was done
  33. FIM TROUBLESHOOTING: Error 25070 Error connecting to database FIMSynchronizationService. Invalid Class String
  34. REFERENCE: Monitoring FIM 2010 and/or FIM 2010 R2
  35. WebServices Connector For FIM 2010 Update 2 and FIM 2010 R2
  36. KB2688078: A hotfix rollup package (build 4.00.3617.2) is available for Forefront Identity Manager 2010
  37. TROUBLESHOOTING: extension-dll-exception: ObjectAlreadyExistsException (en-US)
  38. TROUBLESHOOTING: AD LDS Provisioning: unexpected-error with No Such Attribute ( en-US )
  39. REFERENCE: Mapping Type and Flow Direction Radio Buttons are not visible (en-us):
  40. TROUBLESHOOTING: 0x800700b7 Cannot create a file when that file already exists
  41. TROUBLESHOOTING: (FIM CM) The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
  42. FIM 2010 R2 - Installation Companion Documents
  43. Support-Tip:(SYNC SERVICE): stopped-server: Troubleshooting Event ID: 6311 and 6401
  44. HOW TO: Allow Group Administrators to Add/Remove Members to a Group they do not own
  45. FIM-HELP: Installation Companion & Troubleshooting Troubleshooter Resource
  46. TROUBLESHOOTING: Event ID: 6801: The Exchange server address list service failed to respond
  47. Service Is Not Available Troubleshooter
  48. [Reference] Enable Tracing (FIM MA, FIM SERVICE, FIM PORTAL, LOTUS NOTES)
  49. [Troubleshooting]: FIM Service Management Agent: Failed to retreive schema or Cannot connect to database when creating the FIM Service Management Agent
  50. Support-Info: (SYNC SERVICE): HOW TO Troubleshoot and Test the Export process
  51. REFERENCE: How to determine the build of FIM 2010
  52. Self-Service Password Reset (SSPR) Resources Wiki
  53. IPv6 support information for Forefront Identity Manager 2010, Microsoft Identity Lifecycle Manager 2007 and Microsoft Identity Integration Server 2003:
  54. TROUBLESHOOTING: FIM 2010 Update 2 fails immediately (Event ID: 7024) - DetectServiceAccount (en-US)
  55. TROUBLESHOOTING: stopped-dll-exception troubleshooter
  56. FIM-TROUBLESHOOTING: Failed to retrieve schema or cannot connect to database while creating a FIM MA
  57. Optimizing Initial Synchronization on Reinstall of Office 365 Directory Synchronization
  58. Troubleshooting: Not able to create enabled Active Directory accounts
  59. TROUBLESHOOTING: Sensitive Account cannot be delegated
  60. SYNC-HOW TO: Work with more than one partition in a management agent
  61. SYNC: Extension-DLL-Exception Overview
  62. FIM-TROUBLESHOOTING: MissingParentObjectException:
  63. FIM-MA EXPORT: failed-creation-via-web-services: PermissionDeniedException
  64. FIM 2010 – How to validate FIM Service Management Agent Account
  65. FIM 2010 Hotfix Installation - Error 25070 These workstations have sessions with open files on this server:
  66. FIM 2010 - Working with the Recycle Bin Feature in Windows Server 2008 R2 Active Directory
  67. FIM-REFERENCE: FIM 2010 - Installation Companion - Accounts
  68. FIM-SYNC: Novell eDirectory MA - Server Down
  69. O365DIRSYNC - Backend SQL Server Database is full
  70. How to re-index the backend FIMSynchronizationService Database
  71. How to clear the run history

2011 20

  1. How To: Move the backend SQL Server Synchronization Service Database without having to uninstall/reinstall
  2. Understanding creating a mail-enabled user object for Exchange 2007/2010
  3. [Troubleshooting]: Exchange 2007 and Exchange 2010 Provisioning
  4. How to: Check and Configure Attribute Precedence
  5. How to: Script for clearing the run history:
  6. Synchronization Error: Event ID 6301 - Export-Flow Failed 0x80230304:
  7. FIMCM: EnvelopedCMS decryption failed. Fall back to AES Method
  8. FIM 2010 Hotfix Installation Companion
  9. FIM-HOWTO: Refresh the schema of the FIM Service Management Agent
  10. FIM Synchronization Rules: Dropdowns Contain No Data or Missing Data
  11. HTTP Error 401. The requested resource requires user authentication
  12. FIM CM: Object reference not set to an instance of an object
  13. Migrating from MIIS or ILM to FIM 2010
  14. MIIS/ILM/FIM Versions of SQL Server as backend
  15. Full Import (Stage Only) causes FIM Synchronization Service (miiserver.exe) to crash
  16. Things to think about when deleting a connector space
  17. FIM CM: There is no object on the server
  18. PCNS: Event ID 6025 - target could not be authenticated
  19. [FIM-HELP-INSTALLATION] hot fix update rolls back without warning or error
  20. SSPR - Password Reset Registration: An error was encountered. Please call helpdesk or your system.

2009 2

  1. clmAgent certificate renewals
  2. MIIS / ILM is slow when running an Import