Hi, Users should reside in different Organizational Units (OUs) in AD, based on their department(as in lab 4c, exercise 1 in the FIM A515 Basic course). The flow from MV to AD CS is as following for the “dn” attribute: · distinguishedName ->dn (initial flow only) · distinguishedName ->dn distinguishedName is a custom attribute on the form “CN= JACK JOHNSON,OU=Users1,DC=TEST,DC=COM”, generated in a custom workflow. Always pointing to an existing OU. When distinguishedName change from e.g. “CN= JACK JOHNSON,OU=Users1,DC=TEST,DC=COM” to “CN= JACK JOHNSON,OU=Users2,DC=TEST,DC=COM” the user should be moved from OU Users1 to OU Users2. The new dn value flow to the AD CS as it should. However, after an export run on the ADMA(without any errors), an delta import run on the ADMA gives an “exported-change-not-reimportet”, pointing to the dn attribute, and the user has not changed OU in AD. I understand the “exported-change-not-reimportet” warning comes from an discrepancy between the AD CS memory and the connected AD controller, regarding the ad attribute. What should be done to move a user between two OUs? Additional parameter flow? Something else? Using FIM RC1 Update 2 (4.0.2574.0) Best regards Erlend

First, you always need to perform an import after an export. This type of import is known as confirming import. A confirming import is required to complete an export operation. My hunch is that you didn’t do a confirming import after you have initially provisioned your objects.As far as I can tell, you got it right.You need an initial flow for the DN attribute to provision new objects and an additional regular dn flow where the initial flow flag is not set.You need to tie your regular flow to your condition – in your case the department value. Cheers,Markus Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation

Thanks for your quick reply Markus, by confirming import do you meam a full import or delta import? Regards, Erlend

After an export, a delta import is required as confirming import.Cheers,MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation

Thanks for your reply markus. I will look more into it when my calendar is less busy. For now I will use a custom workflow to obtain the moving of users in AD. Regards Erlend.