Importing Dynamic Distribution Groups in FIM
Has anyone made an attempt at importing existing dynamic distribution groups (DDG) in FIM via an inbound sync rule? Instead of trying to parse the msExchDynamicDLFilter in an inbound rule, it may be best to create the corresponding group in FIM via Powershell such as in the example: http://technet.microsoft.com/en-us/library/ff720142(WS.10).aspx Then join the new FIM criteria based group using an outbound rule to the existing AD DDG by accountName to sAMAccountName. However, this approach may overwrite msExchDynamicDLBaseDN, msExchDynamicDLFilter, and msExchQueryFilter in different formats.
January 24th, 2011 5:31pm

What are you trying to accomplish ultimately with putting DDGs in FIM? IMO it seems like a dynamic group in FIM and Exchange DDGs are mutually exclusive. If it were me I'd opt for the FIM dynamic groups option.My Book - Active Directory, 4th Edition My Blog - www.briandesmond.com
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2011 6:14pm

Brian, It was a customer request to have them managed through FIM, however, I see what you're saying. If the dynamic group was already created using the E2K7 management console, it is already essentially managed and un-necessary to set it up in FIM. I believe the customer would like to see them available in the FIM portal to subsequently be able to change the filter criteria if required. However, I'm not sure what impact that may have from the E2K7 management console perspective for existing dynamic groups. Steve
January 24th, 2011 6:25pm

Brian, It was a customer request to have them managed through FIM, however, I see what you're saying. If the dynamic group was already created using the E2K7 management console, it is already essentially managed and un-necessary to set it up in FIM. I believe the customer would like to see them available in the FIM portal to subsequently be able to change the filter criteria if required. However, I'm not sure what impact that may have from the E2K7 management console perspective for existing dynamic groups. Steve Steve- Editing those attributes with anything other than the Exchange cmdlets isn't going to be a supported scenario so if I were you I'd leave it there. In terms of performance and flexibility, the FIM groups are going to get your customer way further.My Book - Active Directory, 4th Edition My Blog - www.briandesmond.com
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2011 6:27pm

Brian, I haven't tried it much, but as per my understanding FIM support managing dynamic groups using the FIM portal using a self service interface. Now, I've got this question from one of my customers that, through the FIM they can actually create the Dynamic distribution groups, but they can't see it on Exchange(2010, Enterprise) at the same time. Do you have any link, where I can refer the same, as to how, we can sync up the FIM provisioned DDG(Dynamic Distribution group) on the AD to reflect thier existance on the Exchange Server 2010. Regards, Ankit Yadav
March 12th, 2012 10:21am

Brian, I haven't tried it much, but as per my understanding FIM support managing dynamic groups using the FIM portal using a self service interface. Now, I've got this question from one of my customers that, through the FIM they can actually create the Dynamic distribution groups, but they can't see it on Exchange(2010, Enterprise) at the same time. Do you have any link, where I can refer the same, as to how, we can sync up the FIM provisioned DDG(Dynamic Distribution group) on the AD to reflect thier existance on the Exchange Server 2010. Regards, Ankit Yadav Are these Exchange dynamic distribution groups? Those are implemented entirely differently from FIM's groups, and there's not going to be any clear cut way to migrate them to FIM if you want to take advantage of FIM's functionality around group membership management. As far as the groups created in FIM appearing in Exchange, you're going to need to make sure they're getting exported to AD and mail enabled.My Book - Active Directory, 4th Edition My Blog - www.briandesmond.com
Free Windows Admin Tool Kit Click here and download it now
March 12th, 2012 1:54pm

Actually, dynamic distribution groups in Exchange are almost identical to criteria-based groups in FIM. The only difference is where the cirteria is maintained. You cannot import the dynamic distribution group. However, you just redefine it in FIM.
July 24th, 2012 11:04pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics