Hi, In order for the FIM Service account to send any email notifications, what settings do we need to enable in Exchange 2010 please? Anonymous relay? thanks, SK

The FIM Service account needs to be mailbox enabled on Exchange. Once you do that, you plug in your load balanced URL to Exchange in the FIM Service config file, as well as the exact email address on the FIM service account. Finally, bounce the FIM service.My Book - Active Directory, 4th Edition My Blog - www.briandesmond.com

OK thanks Brian - and there is no special Exchange relay settings we need to enable?

OK thanks Brian - and there is no special Exchange relay settings we need to enable? No. It all goes through Exchange Web Services not SMTP.My Book - Active Directory, 4th Edition My Blog - www.briandesmond.com

SK, Brian is correct. If you have not installed FIM then just do the install specify the correct Exchange Server, indicate that it is Exchange and give it the right mailbox. You will also need to ensure that the FIM Server trusts the SSL cert used by exchange. If you have already installed FIM then you will need to make the following changes to the C:\Program Files\Microsoft Forefront Identity Manager\2010\Service\Microsoft.ResourceManagement.Service.exe.config file on all of your FIM Service Servers (see http://technet.microsoft.com/en-us/library/ff800821(WS.10).aspx) configuration/ appSettings/ add[@key='mailServer'] <string> (None, and not required) The URL that points to the Exchange 2007 Web service, for example, http://server/ews/exchange.asmx /configuration/ appSettings/ add[@key='isExchange'] <string> 1 String literals 1 or 0 indicating whether the mail sender should instantiate an SMTP client or Exchange client. Note that the strings true and false are both treated as false. David Lundell, Get your copy of FIM Best Practices Volume 1 http://blog.ilmbestpractices.com/2010/08/book-is-here-fim-best-practices-volume.html