Groups default MVobjectID export objectID
I get this following the 'introduction to user and group management' With groups, just like person, there are some default atribute flows, however one of these of causing an error with me. I get an failed-modification-via-web-services. I believe its trying to export objectID of a group to MVobjectID, but its not working. Groups and members seem to sync fine, so I'm wondering what the atribute is for, since simply deleting it from the atribute flow solves it, but I dont wanna trigger any other problems doing this.
April 14th, 2010 3:13pm

Please do not remove any of the pre-defined attribute flow mappings!Have you looked at Troubleshooting: failed-modification-via-web-services yet? Cheers,MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
April 14th, 2010 3:46pm

the problem was 2 MPR's that needed to be enabled: Synchronization: Synchronization account can read group resources it synchronizes Synchronization: Synchronization account controls group resources it synchronizes I went for a compleet reinstall after making some mistakes and forgot to enable them. I did follow the post installation and configuration guide and its not in there anymore. Was it deleted from there ? I can remember enabling these the last time and reading somewhere that that was needed, but cant find it in the guides anymore.
April 14th, 2010 4:38pm

How Do I Synchronize Groups from Active Directory Domain Services to FIM - Initializing Your Environment, Step 7 Introduction to User and Group Management - Enabling the required MPRs Using PowerShell to check your MPR configuration for synchronization Cheers,MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
April 14th, 2010 6:42pm

I used the last link to check the mpr configuration. It gives me the following:Missing attributes of Synchronization: Synchronization account controls group resources it synchronizes: -MemberCaution: Your current MPR configuration requires your attention!I cannot add this group to the selected attributes of this group.On the FIMMA i have an import and export of member and and outbound syc rule to AD where I pass the members to AD, like in the'introduction to user and group management'. I assume this is whats causing this ?I'm not experiencing any problems, though it does make me think: If I have members of this group, who are not in active directory yet, you dont want these memberships exported to AD since they dont have an account it wouldnt make sence ? I dont see this happening so thats probebly good, but it made me wonder how that works and mabe if it would be related. Trying to get the full picture.
April 15th, 2010 12:38pm

You can ignore the message about the Member attribute. This is a bug in the script that will be fixed soon. Cheers, MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation
Free Windows Admin Tool Kit Click here and download it now
April 29th, 2010 6:53pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics