Importing Dynamic Distribution Groups in FIM
Has anyone made an attempt at importing existing dynamic distribution groups (DDG) in FIM via an inbound sync rule?
Instead of trying to parse the msExchDynamicDLFilter in an inbound rule, it may be best to create the corresponding group in FIM via Powershell such as in the example:
http://technet.microsoft.com/en-us/library/ff720142(WS.10).aspx
Then join the new FIM criteria based group using an outbound rule to the existing AD DDG by accountName to sAMAccountName. However, this approach may overwrite msExchDynamicDLBaseDN, msExchDynamicDLFilter, and msExchQueryFilter in different
formats.
January 24th, 2011 5:31pm
What are you trying to accomplish ultimately with putting DDGs in FIM? IMO it seems like a dynamic group in FIM and Exchange DDGs are mutually exclusive. If it were me I'd opt for the FIM dynamic groups option.My Book - Active Directory, 4th Edition
My Blog - www.briandesmond.com
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2011 6:14pm
Brian,
It was a customer request to have them managed through FIM, however, I see what you're saying. If the dynamic group was already created using the E2K7 management console, it is already essentially managed and un-necessary to set it up in FIM. I believe the
customer would like to see them available in the FIM portal to subsequently be able to change the filter criteria if required. However, I'm not sure what impact that may have from the E2K7 management console perspective for existing dynamic groups.
Steve
January 24th, 2011 6:25pm
Brian,
It was a customer request to have them managed through FIM, however, I see what you're saying. If the dynamic group was already created using the E2K7 management console, it is already essentially managed and un-necessary to set it up in FIM. I believe the
customer would like to see them available in the FIM portal to subsequently be able to change the filter criteria if required. However, I'm not sure what impact that may have from the E2K7 management console perspective for existing dynamic groups.
Steve
Steve-
Editing those attributes with anything other than the Exchange cmdlets isn't going to be a supported scenario so if I were you I'd leave it there. In terms of performance and flexibility, the FIM groups are going to get your customer way further.My Book - Active Directory, 4th Edition
My Blog - www.briandesmond.com
Free Windows Admin Tool Kit Click here and download it now
January 24th, 2011 6:27pm
Brian,
I haven't tried it much, but as per my understanding FIM support managing dynamic groups using the FIM portal using a self service interface.
Now, I've got this question from one of my customers that, through the FIM they can actually create the Dynamic distribution groups, but they can't see it on Exchange(2010, Enterprise) at the same time.
Do you have any link, where I can refer the same, as to how, we can sync up the FIM provisioned DDG(Dynamic Distribution group) on the AD to reflect thier existance on the Exchange Server 2010.
Regards,
Ankit Yadav
March 12th, 2012 10:21am
Brian,
I haven't tried it much, but as per my understanding FIM support managing dynamic groups using the FIM portal using a self service interface.
Now, I've got this question from one of my customers that, through the FIM they can actually create the Dynamic distribution groups, but they can't see it on Exchange(2010, Enterprise) at the same time.
Do you have any link, where I can refer the same, as to how, we can sync up the FIM provisioned DDG(Dynamic Distribution group) on the AD to reflect thier existance on the Exchange Server 2010.
Regards,
Ankit Yadav
Are these Exchange dynamic distribution groups? Those are implemented entirely differently from FIM's groups, and there's not going to be any clear cut way to migrate them to FIM if you want to take advantage of FIM's functionality around group membership
management.
As far as the groups created in FIM appearing in Exchange, you're going to need to make sure they're getting exported to AD and mail enabled.My Book - Active Directory, 4th Edition
My Blog - www.briandesmond.com
Free Windows Admin Tool Kit Click here and download it now
March 12th, 2012 1:54pm
Actually, dynamic distribution groups in Exchange are almost identical to criteria-based groups in FIM. The only difference is where the cirteria is maintained. You cannot import the dynamic distribution group. However, you just redefine it in FIM.
July 24th, 2012 11:04pm