I am seeing the following warning:Unable to resolve resource:Microsoft.ResourceManagement.Workflow.Activities.PWResetActivity.rules.and error:mscorlib: System.Runtime.InteropServices.COMException (0x80070721): A security package specific error occurred. (Exception from HRESULT: 0x80070721)On FIMportal/service server when trying to reset password. Anyone seen this before?Mattmatthew

do you have a complete trace (possibly include stack)?The FIM Password Reset Blog http://blogs.technet.com/aho/

Hey Anthony, I probably should have included in original post, but I thought it must be a common error.Does below shed any light? matthew<E2ETraceEvent xmlns="http://schemas.microsoft.com/2004/06/E2ETraceEvent"><System xmlns="http://schemas.microsoft.com/2004/06/windows/eventlog/system"><EventID>2</EventID><Type>3</Type><SubType Name="Warning">0</SubType><Level>4</Level><TimeCreated SystemTime="2010-02-10T01:11:05.6394199Z" /><Source Name="Microsoft.ResourceManagement" /><Correlation ActivityID="{a760246c-bccd-4b01-9eff-fecce1035554}" /><Execution ProcessName="Microsoft.ResourceManagement.Service" ProcessID="2436" ThreadID="3" /><Channel /><Computer>FIMPORTAL1</Computer></System><ApplicationData>Unable to resolve resource:Microsoft.ResourceManagement.Workflow.Activities.PWResetActivity.rules.<System.Diagnostics xmlns="http://schemas.microsoft.com/2004/08/System.Diagnostics"><LogicalOperationStack></LogicalOperationStack><Timestamp>10099981745</Timestamp><Callstack> at System.Environment.get_StackTrace() at System.Diagnostics.TraceEventCache.get_Callstack() at System.Diagnostics.XmlWriterTraceListener.WriteFooter(TraceEventCache eventCache) at System.Diagnostics.TraceSource.TraceEvent(TraceEventType eventType, Int32 id, String message) at Microsoft.ResourceManagement.Utilities.LoggingManager.EmitTrace(TraceEventType type, String message, String source, String warningCode) at Microsoft.ResourceManagement.Utilities.LoggingManager.ReportWarning(String msg, String source, String warningCode, String stackTrace) at Microsoft.ResourceManagement.Utilities.LoggingManager.ReportWarning(String msg) at Microsoft.ResourceManagement.Utilities.ExceptionHandler.ResourceResolveEventHandler(Object sender, ResolveEventArgs args) at System.AppDomain.OnResourceResolveEvent(String resourceName) at System.Reflection.Assembly._GetResource(String resourceName, UInt64&amp; length, StackCrawlMark&amp; stackMark, Boolean skipSecurityCheck) at System.Reflection.Assembly.GetManifestResourceStream(String name, StackCrawlMark&amp; stackMark, Boolean skipSecurityCheck) at System.Reflection.Assembly.GetManifestResourceStream(Type type, String name) at System.Workflow.Activities.Rules.ConditionHelper.GetRuleDefinitionsFromManifest(Type workflowType) at System.Workflow.Activities.Rules.ConditionHelper.Load_Rules_RT(Activity declaringActivity) at System.Workflow.Activities.Rules.RuleConditionReference.InitializeProperties() at System.Workflow.ComponentModel.DependencyObject.System.Workflow.ComponentModel.IDependencyObjectAccessor.InitializeDefinitionForRuntime(DependencyObject parentDependencyObject) at System.Workflow.ComponentModel.DependencyObject.System.Workflow.ComponentModel.IDependencyObjectAccessor.InitializeDefinitionForRuntime(DependencyObject parentDependencyObject) at System.Workflow.ComponentModel.CompositeActivity.OnInitializeDefinitionForRuntime() at System.Workflow.ComponentModel.DependencyObject.System.Workflow.ComponentModel.IDependencyObjectAccessor.InitializeDefinitionForRuntime(DependencyObject parentDependencyObject) at System.Workflow.ComponentModel.CompositeActivity.OnInitializeDefinitionForRuntime() at System.Workflow.ComponentModel.DependencyObject.System.Workflow.ComponentModel.IDependencyObjectAccessor.InitializeDefinitionForRuntime(DependencyObject parentDependencyObject) at System.Workflow.ComponentModel.CompositeActivity.OnInitializeDefinitionForRuntime() at System.Workflow.ComponentModel.DependencyObject.System.Workflow.ComponentModel.IDependencyObjectAccessor.InitializeDefinitionForRuntime(DependencyObject parentDependencyObject) at System.Workflow.Runtime.WorkflowDefinitionDispenser.LoadRootActivity(String xomlText, String rulesText, Byte[] xomlHashCode, Boolean createDefinition, Boolean initForRuntime) at System.Workflow.Runtime.WorkflowDefinitionDispenser.MruCache.GetOrGenerateDefinition(Type type, String xomlText, String rulesText, Byte[] md5Codes, Boolean initForRuntime, Boolean&amp; exist) at System.Workflow.Runtime.WorkflowDefinitionDispenser.GetRootActivity(String xomlText, String rulesText, Boolean createNew, Boolean initForRuntime) at System.Workflow.Runtime.WorkflowRuntime.InitializeExecutor(Guid instanceId, CreationContext context, WorkflowExecutor executor, WorkflowInstance workflowInstance) at System.Workflow.Runtime.WorkflowRuntime.Load(Guid key, CreationContext context, WorkflowInstance workflowInstance) at System.Workflow.Runtime.WorkflowRuntime.GetWorkflowExecutor(Guid instanceId, CreationContext context) at System.Workflow.Runtime.WorkflowRuntime.InternalCreateWorkflow(CreationContext context, Guid instanceId) at System.Workflow.Runtime.WorkflowRuntime.CreateWorkflow(XmlReader workflowDefinitionReader, XmlReader rulesReader, Dictionary`2 namedArgumentValues, Guid instanceId) at Microsoft.ResourceManagement.Workflow.Hosting.WorkflowManager.StartWorkflowInstance(Guid workflowInstanceIdentifier, KeyValuePair`2[] additionalParameters) at Microsoft.ResourceManagement.Workflow.Hosting.WorkflowManagerSignaled.StartWorkflowInstanceSignaled(IWorkflowManager workflowManager, Guid signaledWorkflowIdentifier, SignalOnMatch signalOnMatch, Guid[] workflowInstanceIdentifiers, KeyValuePair`2[] additionalWorkflowStartParameters) at Microsoft.ResourceManagement.Workflow.Hosting.WorkflowManagerSignaled.StartWorkflowInstanceSignaled(IWorkflowManager workflowManager, Guid signaledWorkflowIdentifier, SignalOnMatch signalOnMatch, Guid[] workflowInstanceIdentifiers, KeyValuePair`2 templateWorkflowStartParameters) at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteBeginEffects(RequestType request) at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request, Guid requestIdentifier, Object redispatchSingleInstanceKey, Boolean isRedispatch) at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request) at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest(RequestType request) at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Put(Message request) at SyncInvokePut(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs) at System.ServiceModel.Dispatcher.ServiceOperationInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet) at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(RequestContext request, Boolean cleanThread, OperationContext currentOperationContext) at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(RequestContext request, OperationContext currentOperationContext) at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(IAsyncResult result) at System.ServiceModel.Diagnostics.Utility.AsyncThunk.UnhandledExceptionFrame(IAsyncResult result) at System.ServiceModel.AsyncResult.Complete(Boolean completedSynchronously) at System.ServiceModel.Channels.SecurityChannelListener`1.ReceiveItemAndVerifySecurityAsyncResult`2.InnerTryReceiveCompletedCallback(IAsyncResult result) at System.ServiceModel.Diagnostics.Utility.AsyncThunk.UnhandledExceptionFrame(IAsyncResult result) at System.ServiceModel.AsyncResult.Complete(Boolean completedSynchronously) at System.ServiceModel.Channels.InputQueue`1.AsyncQueueReader.Set(Item item) at System.ServiceModel.Channels.InputQueue`1.Dispatch() at System.ServiceModel.Channels.InputQueue`1.OnDispatchCallback(Object state) at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.WorkItem.Invoke2() at System.Security.SecurityContext.Run(SecurityContext securityContext, ContextCallback callback, Object state) at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.WorkItem.Invoke() at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.ProcessCallbacks() at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.CompletionCallback(Object state) at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.ScheduledOverlapped.IOCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* nativeOverlapped) at System.ServiceModel.Diagnostics.Utility.IOCompletionThunk.UnhandledExceptionFrame(UInt32 error, UInt32 bytesRead, NativeOverlapped* nativeOverlapped) at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* pOVERLAP)</Callstack></System.Diagnostics></ApplicationData></E2ETraceEvent>-------------------------------------------------------------<E2ETraceEvent xmlns="http://schemas.microsoft.com/2004/06/E2ETraceEvent"><System xmlns="http://schemas.microsoft.com/2004/06/windows/eventlog/system"><EventID>3</EventID><Type>3</Type><SubType Name="Error">0</SubType><Level>2</Level><TimeCreated SystemTime="2010-02-10T01:11:07.7800449Z" /><Source Name="Microsoft.ResourceManagement" /><Correlation ActivityID="{a760246c-bccd-4b01-9eff-fecce1035554}" /><Execution ProcessName="Microsoft.ResourceManagement.Service" ProcessID="2436" ThreadID="9" /><Channel /><Computer>FIMPORTAL1</Computer></System><ApplicationData>mscorlib: System.Runtime.InteropServices.COMException (0x80070721): A security package specific error occurred. (Exception from HRESULT: 0x80070721) at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo) at System.Management.ManagementScope.InitializeGuts(Object o) at System.Management.ManagementScope.Initialize() at System.Management.ManagementObjectSearcher.Initialize() at System.Management.ManagementObjectSearcher.Get() at Microsoft.ResourceManagement.PasswordReset.ResetPassword.ResetPasswordHelper(String domainName, String userName, String newPasswordText)<System.Diagnostics xmlns="http://schemas.microsoft.com/2004/08/System.Diagnostics"><LogicalOperationStack></LogicalOperationStack><Timestamp>10107683374</Timestamp><Callstack> at System.Environment.get_StackTrace() at System.Diagnostics.TraceEventCache.get_Callstack() at System.Diagnostics.XmlWriterTraceListener.WriteFooter(TraceEventCache eventCache) at System.Diagnostics.TraceSource.TraceEvent(TraceEventType eventType, Int32 id, String format, Object[] args) at Microsoft.ResourceManagement.Utilities.LoggingManager.LogError(String formatString, Object[] arguments) at Microsoft.ResourceManagement.Utilities.LoggingManager.ReportError(Exception exception) at Microsoft.ResourceManagement.PasswordReset.ResetPassword.ResetPasswordHelper(String domainName, String userName, String newPasswordText) at Microsoft.ResourceManagement.Workflow.Activities.PWResetActivity.AttemptPasswordReset(Object sender, XmlDocumentValidationEventArgs e) at System.Workflow.ComponentModel.Activity.RaiseGenericEvent[T](DependencyProperty dependencyEvent, Object sender, T e) at Microsoft.ResourceManagement.Workflow.Activities.XmlInteractiveActivity.DocumentValidation(Object sender, EventArgs e) at System.Workflow.ComponentModel.Activity.RaiseEvent(DependencyProperty dependencyEvent, Object sender, EventArgs e) at System.Workflow.Activities.CodeActivity.Execute(ActivityExecutionContext executionContext) at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext) at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(Activity activity, ActivityExecutionContext executionContext) at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime) at System.Workflow.Runtime.Scheduler.Run() at System.Workflow.Runtime.WorkflowExecutor.RunScheduler() at System.Workflow.Runtime.WorkflowExecutor.RunSome(Object ignored) at System.Workflow.Runtime.Hosting.SynchronizationContextWorkflowSchedulerService.Schedule(WaitCallback callback, Guid workflowInstanceId) at System.Workflow.Runtime.WorkflowExecutor.RequestHostingService() at System.Workflow.Runtime.ScheduleWork.Dispose() at System.Workflow.Runtime.WorkflowExecutor.EnqueueItemOnIdle(IComparable queueName, Object item, IPendingWork pendingWork, Object workItem) at System.Workflow.Runtime.WorkflowInstance.EnqueueItemOnIdle(IComparable queueName, Object item, IPendingWork pendingWork, Object workItem) at System.ServiceModel.Dispatcher.WorkflowOperationAsyncResult.DoWork(Object state) at System.ServiceModel.Diagnostics.Utility.WaitThunk.UnhandledExceptionFrame(Object state) at System.Workflow.Runtime.Hosting.SynchronizationContextWorkflowSchedulerService.SynchronizationContextPostHelper.Callback(Object state) at System.ServiceModel.Diagnostics.Utility.WaitThunk.UnhandledExceptionFrame(Object state) at System.Threading.ExecutionContext.runTryCode(Object userData) at System.Runtime.CompilerServices.RuntimeHelpers.ExecuteCodeWithGuaranteedCleanup(TryCode code, CleanupCode backoutCode, Object userData) at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state) at System.Threading._ThreadPoolWaitCallback.PerformWaitCallbackInternal(_ThreadPoolWaitCallback tpWaitCallBack) at System.Threading._ThreadPoolWaitCallback.PerformWaitCallback(Object state)</Callstack></System.Diagnostics></ApplicationData></E2ETraceEvent>

try ignore the first error for now for second error, add FIMService service account to the FIMSyncPasswordSet group (default is a local group on the FIM Sync box) restart FIMSync and FIMService (in that order), and try againThe FIM Password Reset Blog http://blogs.technet.com/aho/

I realized that group membership was missing some time ago, so added it and rebooted all the machines at once. This didn't fix it so I moved on. Does the FIMservice need to be up while the FIMSync comes up?

>>Does the FIMservice need to be up while the FIMSync comes up? No, doesn't really matter oh, sorry, taking a closer look that might not be a group membership issue have you followed the step by step doc to config WMI/DCOM security settings?The FIM Password Reset Blog http://blogs.technet.com/aho/

I neglected to mention in previous post that that message was not being displayed anymore, I was just surprised that rebooting the machines all together didn't fix the problem, however rebooting first the FIMsync, followed by the FIMservice did.If you are referring to the steps in the "Introduction to Password Reset", then yes I have followed them.I am now getting a WS:Put: fault message:<E2ETraceEvent xmlns="http://schemas.microsoft.com/2004/06/E2ETraceEvent"><System xmlns="http://schemas.microsoft.com/2004/06/windows/eventlog/system"><EventID>0</EventID><Type>3</Type><SubType Name="Verbose">0</SubType><Level>16</Level><TimeCreated SystemTime="2010-02-11T04:25:01.3031013Z" /><Source Name="Microsoft.ResourceManagement" /><Correlation ActivityID="{00000000-0000-0000-0000-000000000000}" /><Execution ProcessName="Microsoft.ResourceManagement.Service" ProcessID="2052" ThreadID="7" /><Channel /><Computer>FIMPORTAL1</Computer></System><ApplicationData>WS: Put: fault<System.Diagnostics xmlns="http://schemas.microsoft.com/2004/08/System.Diagnostics"><LogicalOperationStack></LogicalOperationStack><Timestamp>80271862927</Timestamp><Callstack> at System.Environment.get_StackTrace() at System.Diagnostics.TraceEventCache.get_Callstack() at System.Diagnostics.XmlWriterTraceListener.WriteFooter(TraceEventCache eventCache) at System.Diagnostics.TraceSource.TraceEvent(TraceEventType eventType, Int32 id, String message) at Microsoft.ResourceManagement.Utilities.LoggingManager.EmitTrace(TraceEventType type, String message, String source, String warningCode) at Microsoft.ResourceManagement.Utilities.LoggingManager.TraceMessage(String msg, String source) at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Put(Message request) at SyncInvokePut(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs) at System.ServiceModel.Dispatcher.ServiceOperationInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage4(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet) at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(RequestContext request, Boolean cleanThread, OperationContext currentOperationContext) at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(RequestContext request, OperationContext currentOperationContext) at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(IAsyncResult result) at System.ServiceModel.Diagnostics.Utility.AsyncThunk.UnhandledExceptionFrame(IAsyncResult result) at System.ServiceModel.AsyncResult.Complete(Boolean completedSynchronously) at System.ServiceModel.Channels.SecurityChannelListener`1.ReceiveItemAndVerifySecurityAsyncResult`2.InnerTryReceiveCompletedCallback(IAsyncResult result) at System.ServiceModel.Diagnostics.Utility.AsyncThunk.UnhandledExceptionFrame(IAsyncResult result) at System.ServiceModel.AsyncResult.Complete(Boolean completedSynchronously) at System.ServiceModel.Channels.InputQueue`1.AsyncQueueReader.Set(Item item) at System.ServiceModel.Channels.InputQueue`1.Dispatch() at System.ServiceModel.Channels.InputQueue`1.OnDispatchCallback(Object state) at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.WorkItem.Invoke2() at System.Security.SecurityContext.Run(SecurityContext securityContext, ContextCallback callback, Object state) at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.WorkItem.Invoke() at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.ProcessCallbacks() at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.CompletionCallback(Object state) at System.ServiceModel.Channels.IOThreadScheduler.CriticalHelper.ScheduledOverlapped.IOCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* nativeOverlapped) at System.ServiceModel.Diagnostics.Utility.IOCompletionThunk.UnhandledExceptionFrame(UInt32 error, UInt32 bytesRead, NativeOverlapped* nativeOverlapped) at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* pOVERLAP)</Callstack></System.Diagnostics></ApplicationData></E2ETraceEvent>have you encountered this before?

not this one either i assume registration is successful but u are failing at reset? may i ask what operation are you performing when you hit this error? (pick a step described in http://blogs.technet.com/aho/archive/2009/10/01/forefront-identity-manager-credential-management-part-1.aspx) The FIM Password Reset Blog http://blogs.technet.com/aho/

Screenshot 4 on your blog - resetting password. The original errors are back.

what's ur topology for AD, Sync and FIM? all on same box? all on different boxes? what're the service accounts for Sync and FIM?The FIM Password Reset Blog http://blogs.technet.com/aho/