Home
%3CLINGO-SUB%20id%3D%22lingo-sub-974513%22%20slang%3D%22en-US%22%3EManagement%20Agent%20Configuration%20%E2%80%93%20Part%201%3A%20Active%20Directory%20Management%20Agent%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-974513%22%20slang%3D%22en-US%22%3E%0A%20%26lt%3Bmeta%20http-equiv%3D%22Content-Type%22%20content%3D%22text%2Fhtml%3B%20charset%3DUTF-8%22%20%2F%26gt%3B%3CSTRONG%3E%20First%20published%20on%20MSDN%20on%20Nov%2017%2C%202016%20%3C%2FSTRONG%3E%20%3CBR%20%2F%3E%3CP%3EHey%20party%20people%20%E2%80%93%20long%20time%2C%20no%20see!%20You%20may%20have%20noticed%20(or%20maybe%20you%20didn%E2%80%99t)%20that%20I%20took%20a%20hiatus%20from%20blogging%20for%20a%20while.%20Well%20I%E2%80%99m%20back%20and%20kicking%20off%20my%20return%20with%20another%20post%20series%2C%20this%20time%20about%20management%20agents.%20Although%20eventually%20I%E2%80%99d%20like%20to%20cover%20the%20configuration%20of%20all%20%3CEM%3E%20commonly%20used%20%3C%2FEM%3E%20management%20agents%2C%20I%E2%80%99m%20going%20to%20start%20with%20the%20few%20core%20MAs%20you%E2%80%99re%20probably%20going%20to%20need%20(ADMA%2C%20MIMMA%2C%20SQLMA).%20Bear%20with%20me%20as%20some%20of%20the%20screenshots%20I%E2%80%99m%20using%20are%20recycled%20and%20I%20will%20need%20to%20update%20them.%20That%20being%20said%2C%20all%20the%20technical%20details%20are%20the%20same%20and%20I%20want%20to%20go%20ahead%20and%20get%20this%20out%20there%20where%20it%20might%20help%20someone.%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3ESo%2C%20without%20further%20adieu%2C%20let%E2%80%99s%20get%20rollin%E2%80%99%E2%80%A6%3C%2FP%3E%0A%20%20%3CP%3E%3CSTRONG%3E%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%20%20%3CP%3EBefore%20we%20can%20manipulate%20users%20and%2For%20groups%20with%20the%20FIM%20Synchronization%20Engine%2C%20it%20is%20necessary%20that%20we%20create%20Management%20Agents.%20Here%2C%20we%20will%20create%20a%20Management%20Agent%20for%20connecting%20to%20Active%20Directory.%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EBegin%20by%20opening%20the%20Synchronization%20Engine%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image002%22%20border%3D%220%22%20height%3D%221031%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153781i050EC64258EC45B8%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image002%22%20width%3D%221445%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EIn%20the%20menu%20on%20the%20top%20right-hand%20corner%2C%20select%20%E2%80%9CCreate%E2%80%9D%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image004%22%20border%3D%220%22%20height%3D%22449%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153782i7ABE610508E622C7%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image004%22%20width%3D%22324%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EThis%20will%20open%20the%20%E2%80%9CCreate%20Management%20Agent%E2%80%9D%20wizard.%20For%20%E2%80%9CManagement%20agent%20for%3A%E2%80%9D%2C%20select%20%E2%80%9CActive%20Directory%20Domain%20Services%E2%80%9D.%20Enter%20a%20name%20for%20this%20MA%2C%20then%20click%20%E2%80%9CNext%E2%80%9D%20to%20continue%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image006%22%20border%3D%220%22%20height%3D%22785%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153783i2172C1B4E50DA44D%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image006%22%20width%3D%221058%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EEnter%20your%20Forest%20name%2C%20as%20well%20as%20an%20administrative%20user%20account%2C%20its%20password%20and%20domain%2C%20then%20click%20%E2%80%9CNext%E2%80%9D%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22801%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153784i095EDE8A9C65DDC9%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%221065%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3ESelect%20the%20partition%20you%20wish%20to%20manage.%20Next%2C%20click%20on%20%E2%80%9CContainers%E2%80%9D%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22801%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153785i8928A9419F966FFB%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%221069%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EThis%20will%20open%20a%20list%20of%20available%20containers.%20Select%20the%20ones%20you%20wish%20to%20manage%20with%20FIM%2C%20then%20click%20%E2%80%9COK%E2%80%9D%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image012%22%20border%3D%220%22%20height%3D%22674%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153786iE4EF1CF1813603A7%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image012%22%20width%3D%22706%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EThis%20will%20return%20you%20to%20the%20previous%20window.%20Click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22711%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153787iB8FBA581D0318D35%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%22949%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EFor%20the%20time%20being%2C%20we%20will%20leave%20this%20default.%20Click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image014%22%20border%3D%220%22%20height%3D%22706%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153788i1DD827051A195FF0%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image014%22%20width%3D%22954%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EProvisioning%20hierarchy%2C%20in%20case%20you%E2%80%99re%20wondering%2C%20gives%20us%20the%20ability%20to%20create%20OUs%20that%20currently%20do%20not%20exist%20and%20bring%20them%20into%20scope%20based%20on%20a%20defined%20path%20in%20the%20DN.%20For%20example%2C%20if%20I%20am%20attempting%20to%20build%20a%20user%20DN%20like%3A%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3E%3CEM%3E%20CN%3DAbe%20Lincoln%2COU%3DRepublicans%2COU%3DPresidents%2CDC%3DContoso%2CDC%3DLocal%20%3C%2FEM%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EAnd%20there%20is%20no%20%E2%80%9CRepublicans%E2%80%9D%20OU%20under%20%E2%80%9CPresidents%E2%80%9D%2C%20if%20I%20have%20provisioning%20hierarchy%20configured%20it%20will%20automagically%20create%20it%20and%20bring%20it%20into%20scope%20for%20me.%20While%20this%20can%20be%20very%20handy%20in%20certain%20circumstances%20(i.e.%2C%20acquisitions%20and%20mergers)%2C%20this%20can%20also%20get%20you%20into%20some%20seriously%20trouble%20if%20you%E2%80%99re%20building%20malformed%20DNs.%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EUnder%20%E2%80%9CObject%20Types%E2%80%9D%2C%20place%20a%20check%20in%20the%20box%20next%20to%20%E2%80%9Cuser%E2%80%9D%20and%20click%20%E2%80%9CNext%E2%80%9D%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image016%22%20border%3D%220%22%20height%3D%22729%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153790i02190AA312BDEBAF%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image016%22%20width%3D%22984%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3ESelect%20the%20attributes%20you%20wish%20to%20manage%2C%20then%20click%20%E2%80%9CNext%E2%80%9D%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image018%22%20border%3D%220%22%20height%3D%22663%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153791i63107C166AC9ADF0%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image018%22%20width%3D%22895%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EFor%20the%20%E2%80%9CConfigure%20Connector%20Filter%E2%80%9D%20tab%2C%20we%E2%80%99re%20going%20to%20leave%20these%20default%20(blank)%20and%20click%20%E2%80%9CNext%E2%80%9D.%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22684%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153792iA2AE54BC9B3D5D6C%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%22909%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EFor%20%E2%80%9CJoin%20and%20Projection%20Rules%E2%80%9D%2C%20select%20the%20%E2%80%9CUser%E2%80%9D%20and%20click%20%E2%80%9CNew%20Join%20Rule%E2%80%9D.%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22696%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153793iC220E9FAB9F5ABF2%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%22924%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EUnder%20%E2%80%9CData%20Source%20Attribute%E2%80%9D%20and%20%E2%80%9CMetaverse%20Attribute%E2%80%9D%2C%20select%20the%20corresponding%20(unique)%20values%20you%E2%80%99d%20like%20to%20attempt%20a%20join%20on.%20Here%2C%20we%20see%20I%20am%20mapping%20%E2%80%9CemployeeNumber%E2%80%9D%20in%20AD%20to%20the%20custom%20attribute%20%E2%80%9CPoliticianID%E2%80%9D%20in%20my%20myetaverse.%20Once%20you%20have%20made%20your%20selection%2C%20click%20%E2%80%9CAdd%20Condition%E2%80%9D%3A.%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22698%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153794iC6347B3218CF9D30%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%22933%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EYou%20may%20then%20receive%20the%20following%20warning%3A%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22733%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153795i466CA59CC45274FB%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%22975%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EClick%20%E2%80%9COK%E2%80%9D%20to%20continue.%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EHere%20we%20see%20our%20join%20rule%3A%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22735%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153796i6870C31A3842126B%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%22981%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EAt%20this%20point%2C%20you%20may%20follow%20the%20same%20steps%20to%20add%20additional%20join%20criteria%2C%20as%20such%3A%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22image%22%20border%3D%220%22%20height%3D%22745%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153797iBDC93CAF295F9213%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22image%22%20width%3D%22998%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EIt%20is%20worth%20noting%20that%20you%20may%20have%20any%20number%20of%20join%20conditions%20here%2C%20as%20we%20would%20prefer%20a%20join%20to%20a%20possible%20projection%20of%20a%20duplicate%20object.%20Also%20of%20interest%20is%20these%20become%20an%20%E2%80%9Cor%E2%80%9D%20where%20it%20starts%20with%20the%20first%20condition%20and%2C%20if%20a%20join%20is%20unable%20to%20occur%2C%20it%20continues%20down%20the%20list%20attempting%20joins%20until%20there%20is%20no%20more%20criteria.%20At%20that%20point%20a%20project%20happens.%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EFor%20%E2%80%9CAttribute%20Flow%E2%80%9D%2C%20you%20may%20leave%20this%20default%20and%20click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image028%22%20border%3D%220%22%20height%3D%22722%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153798i48ED889ABEC7ADF1%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image028%22%20width%3D%22974%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EFor%20%E2%80%9CDeprovisioning%E2%80%9D%2C%20you%20may%20leave%20this%20default%20and%20click%20%E2%80%9CNext%E2%80%9D%20to%20continue.%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image030%22%20border%3D%220%22%20height%3D%22685%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153799i13F62B3D788081F9%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image030%22%20width%3D%22926%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EFor%20an%20explanation%20of%20these%20options%2C%20please%20see%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%2F2015%2F04%2F14%2Fdeprovisioning-in-depth-part-1-disconnectors%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20this%20post%20%3C%2FA%3E%20for%20disconnections%2C%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%2F2015%2F04%2F15%2Fdeprovisioning-in-depth-part-2-explicit-disconnectors%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20this%20post%20%3C%2FA%3E%20for%20explicit%20disconnections%20and%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%2F2015%2F04%2F16%2Fdeprovisioning-in-depth-part-3-deletions%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20this%20post%20%3C%2FA%3E%20for%20deletions.%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3EFor%20%E2%80%9CExtensions%E2%80%9D%2C%20you%20may%20leave%20this%20default.%20Now%2C%20click%20%E2%80%9CFinish%E2%80%9D%3C%2FP%3E%0A%20%20%3CP%3E%3CIMG%20alt%3D%22clip_image032%22%20border%3D%220%22%20height%3D%22689%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F153800i1814875760A60986%22%20style%3D%22border-left-width%3A%200px%3Bborder-right-width%3A%200px%3Bborder-bottom-width%3A%200px%3Bpadding-top%3A%200px%3Bpadding-left%3A%200px%3Bpadding-right%3A%200px%3Bborder-top-width%3A%200px%22%20title%3D%22clip_image032%22%20width%3D%22931%22%20%2F%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%3E%3C%2FP%3E%0A%20%20%3CP%20align%3D%22center%22%3EQuestions%3F%20Comments%3F%20Love%20FIM%20so%20much%20you%20can%E2%80%99t%20%3CEM%3E%20even%20%3C%2FEM%3E%20stand%20it%3F%3C%2FP%3E%0A%20%20%3CP%20align%3D%22center%22%3E%3CA%3E%20%3CSTRONG%3E%20EMAIL%20US!%20%3C%2FSTRONG%3E%20%3C%2FA%3E%3C%2FP%3E%0A%20%20%3CP%20align%3D%22center%22%3E%3CSTRONG%3E%20%26gt%3BWE%20WANT%20TO%20HEAR%20FROM%20YOU%26lt%3B%20%3C%2FSTRONG%3E%3C%2FP%3E%0A%20%20%3CP%20align%3D%22center%22%3E%23%23%20%3CA%20href%3D%22https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3E%20https%3A%2F%2Fblogs.msdn.microsoft.com%2Fconnector_space%20%3C%2FA%3E%20%23%20%3CEM%3E%20%23%20%3C%2FEM%3E%3C%2FP%3E%0A%20%20%3CP%20align%3D%22center%22%3E%3CEM%3E%20%3C%2FEM%3E%3C%2FP%3E%0A%20%20%3CP%20align%3D%22center%22%3E%3C%2FP%3E%0A%20%0A%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-974513%22%20slang%3D%22en-US%22%3EFirst%20published%20on%20MSDN%20on%20Nov%2017%2C%202016%20Hey%20party%20people%20%E2%80%93%20long%20time%2C%20no%20see!%20You%20may%20have%20noticed%20(or%20maybe%20you%20didn%E2%80%99t)%20that%20I%20took%20a%20hiatus%20from%20blogging%20for%20a%20while.%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-974513%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3Econfiguration%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Emanagement%20agent%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Esynchronization%20service%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
Microsoft
First published on MSDN on Nov 17, 2016

Hey party people – long time, no see! You may have noticed (or maybe you didn’t) that I took a hiatus from blogging for a while. Well I’m back and kicking off my return with another post series, this time about management agents. Although eventually I’d like to cover the configuration of all commonly used management agents, I’m going to start with the few core MAs you’re probably going to need (ADMA, MIMMA, SQLMA). Bear with me as some of the screenshots I’m using are recycled and I will need to update them. That being said, all the technical details are the same and I want to go ahead and get this out there where it might help someone.

So, without further adieu, let’s get rollin’…

Before we can manipulate users and/or groups with the FIM Synchronization Engine, it is necessary that we create Management Agents. Here, we will create a Management Agent for connecting to Active Directory.

Begin by opening the Synchronization Engine

clip_image002

In the menu on the top right-hand corner, select “Create”

clip_image004

This will open the “Create Management Agent” wizard. For “Management agent for:”, select “Active Directory Domain Services”. Enter a name for this MA, then click “Next” to continue

clip_image006

Enter your Forest name, as well as an administrative user account, its password and domain, then click “Next”

image

Select the partition you wish to manage. Next, click on “Containers”

image

This will open a list of available containers. Select the ones you wish to manage with FIM, then click “OK”

clip_image012

This will return you to the previous window. Click “Next” to continue.

image

For the time being, we will leave this default. Click “Next” to continue.

clip_image014

Provisioning hierarchy, in case you’re wondering, gives us the ability to create OUs that currently do not exist and bring them into scope based on a defined path in the DN. For example, if I am attempting to build a user DN like:

CN=Abe Lincoln,OU=Republicans,OU=Presidents,DC=Contoso,DC=Local

And there is no “Republicans” OU under “Presidents”, if I have provisioning hierarchy configured it will automagically create it and bring it into scope for me. While this can be very handy in certain circumstances (i.e., acquisitions and mergers), this can also get you into some seriously trouble if you’re building malformed DNs.

Under “Object Types”, place a check in the box next to “user” and click “Next”

clip_image016

Select the attributes you wish to manage, then click “Next”

clip_image018

For the “Configure Connector Filter” tab, we’re going to leave these default (blank) and click “Next”.

image

For “Join and Projection Rules”, select the “User” and click “New Join Rule”.

image

Under “Data Source Attribute” and “Metaverse Attribute”, select the corresponding (unique) values you’d like to attempt a join on. Here, we see I am mapping “employeeNumber” in AD to the custom attribute “PoliticianID” in my myetaverse. Once you have made your selection, click “Add Condition”:.

image

You may then receive the following warning:

image

Click “OK” to continue.

Here we see our join rule:

image

At this point, you may follow the same steps to add additional join criteria, as such:

image

It is worth noting that you may have any number of join conditions here, as we would prefer a join to a possible projection of a duplicate object. Also of interest is these become an “or” where it starts with the first condition and, if a join is unable to occur, it continues down the list attempting joins until there is no more criteria. At that point a project happens.

For “Attribute Flow”, you may leave this default and click “Next” to continue.

clip_image028

For “Deprovisioning”, you may leave this default and click “Next” to continue.

clip_image030

For an explanation of these options, please see this post for disconnections, this post for explicit disconnections and this post for deletions.

For “Extensions”, you may leave this default. Now, click “Finish”

clip_image032

Questions? Comments? Love FIM so much you can’t even stand it?

EMAIL US!

>WE WANT TO HEAR FROM YOU<

## https://blogs.msdn.microsoft.com/connector_space # #