I am trying to rename an object in Active Directory. Obviously it can be done, because I did it in MIIS 2003. The question is how to do it in FIM 2010. I provision the user from FIM to AD just fine. I then try a rename on the accountName in the portal but get modify-naming-attribute : The attribute cannot be modified because it is owned by the system on the export to AD. As part of my DN string in the synch rule it is on initial flow only.

You need to change your flow on DN by unchecking initial flow only. Once you update the DN attribute the attribute flow should rename the object Issam Andoni Best Regards Issam http://www.zevainc.com/andoni

Almost :-) You need to add an additional flow mapping for the dn. One mapping must have the initial flow flag set; the other flow doesn't. If you don't have a dn flow with the initial flow flag set, provisioining will fail. Cheers, MarkusMarkus Vilcinskas, Knowledge Engineer, Microsoft Corporation

Thank you for the replies. I found that it did work with the two entries. The only thing I do not really get is the error is still thrown on the export that takes care of the rename.

Are you sure the error is generated from the rename or maybe you are trying to change the CN directly not through DN attribute flow. The CN attribute is owned by AD and thus cannot be changed through an attribute flow. You need to perform a rename through DN flow to adjust your CN attribute Hope that help Best Regards, Issam Andoni http://zevainc.com/andoni

Thank you guys. The two entries did the rename and the I was sending over the CN.