Hello, Our company has just started to look at onboardign and password managment products. We have access to the ForeFront suite as part of our EA with Microsoft. I've been tasked to implement a POC of FIM. I have a few questions. We are running on a Windows 2003 R2 AD Schema. All of our domain controllers are 2003. We do not have any Windows 2008 controllers. We are running Exchange 2003. I've setup ForeFront Synch, ForeFront Management Service, and the Portal on three different servers. I have successfully created the ADMA and FIMMA and imported data into the portal. I am looking to test the password reset functionality of ID Manager. Is FIM compatible with a Windows 2003 AD? Thanks, Akash

Fim is compatible with 2003 AD and Exchange 2003. You do lose the Outlook Client Add-in because your not on Exchange 2007. So no approvals through outlook. Joe Stepongzi - Identity Management Consultant - ILM MVP - www.microsoftIdM.com,ilmXframework.codeplex.com

Thanks Joe. I'm trying: To assign rights in AD DS to allow the Active Directory management agent account to reset passwords and unlock accounts I add the account, then click advance, then look for the Descendant User objects, I cannot find it? Is it labelled differently in a Windows 2003 AD? Thanks, Akash

I usually put the AD MA account into the Account Operators group.

Try this: http://social.technet.microsoft.com/Forums/en-US/ilm2/thread/ebaed165-4fd3-473a-a0d4-98bea4916f27Joe Stepongzi - Identity Management Consultant - ILM MVP - www.microsoftIdM.com,ilmXframework.codeplex.com