Hi All, We have a issue with one of our clients, with FIM 2010 in connection with AD 2008 R2. We had a installation of FIM 2010 with AD 2003 and it worked perfectly well. And when AD was upgraded to 2008 R2, problems begin to Arise. During export operation to AD in FIM , the FIM is trying to delete the 'useraccountcontrol' attribute in AD 2008 R2. I believe its some issue with Recycle Bin enabling and tried to install a hot fix from MS(http://support.microsoft.com/kb/979214/en-us), but got the below error Error Message: The update is not applicable to your computer. The hotfix is trying to update ntdsai.dll in version 6.1.7600.20621 The version that is today on AD is 6.1.7601.17514 – the server has ServicePack1 for windows 2008 R2 so this patch does not reply anymore. Am I missing something here? Or am I taking the wrong road? Please help! I need your help on this. Aravinth- IdM Specialist

Did you already install update 1, which supports the recycle bin: http://setspn.blogspot.com/2010/05/fim-2010-update-1-details-available.htmlNeed realtime FIM synchronization? check out the new http://www.traxionsolutions.com/imsequencer that supports FIM 2010 and Omada Identity Manager real time synchronization!

I did not install FIM Update 1 and since i could not install the hot fix, I stopped there. I will try installing the same. Also the issue is only during export operation. But I still dont understand the logic, why FIM is trying to delete the useraccountcontrol attribute?? Aravinth- IdM Specialist

Is there code behind the useraccountcontrol in de export flow? Maybe it is failing and exporting a empty (deleted) value, just my 2 cents. Need realtime FIM synchronization? check out the new http://www.traxionsolutions.com/imsequencer that supports FIM 2010 and Omada Identity Manager real time synchronization!

Two things: * You really need to update your FIM install to a recent build. This http://support.microsoft.com/kb/2502631 is what you want. * Can you post whatever flow rules are feeding userAccountControlMy Book - Active Directory, 4th Edition My Blog - www.briandesmond.com

Hi all, This was something to do with all the code behind useraccountcontrol, which i was unaware of. Thanks all for your time and help on this. Aravinth- IdM Specialist

Hi all, This was something to do with all the code behind useraccountcontrol, which i was unaware of. Thanks all for your time and help on this. Aravinth- IdM Specialist