Tag Archives: MIIS

Delegating the minimum set of permissions for mailbox-enabled user and linked mailbox provisioning

Posted on December 14, 2011 by

In my previous post I described the minimum set of permissions required by the ADMA account to provision an AD DS user object.  In this post I’d like to expand on that and provide the minimum set of permissions required … Continue reading →

Posted in Active Directory, FIM, FIM 2010, FIM 2010 R2 | Tagged , , , , , , , , , , , , , , , , , , , | 2 Comments

Delegating the minimum set of permissions for user provisioning

Posted on December 7, 2011 by

The purpose of this post is to provide information on the permissions required by the user account that the Active Directory Domain Services (AD DS) Management Agent (MA) or ADMA uses when it interfaces with an AD domain.  I’ve seen … Continue reading →

Posted in Active Directory, FIM, FIM 2010, FIM 2010 R2 | Tagged , , , , , , , , , , , , , , , | 2 Comments

exported-change-not-reimported error when provisioning a linked mailbox

Posted on November 21, 2011 by

When provisioning a linked-mailbox using Forefront Identity Manager (FIM) 2010, Identity Lifecycle Manager (ILM) 2007 or Identity Integration Server (MIIS) 2003 the Active Directory Management Agent (ADMA) throws an exported-change-not-reimported error for each new mailbox-enabled user. Upon closer inspection you … Continue reading →

Posted in Active Directory, FIM, FIM 2010 | Tagged , , , , , , , , , , , , , , , | 2 Comments

This security ID may not be assigned as the owner of this object

Posted on November 1, 2011 by

The scenario: provisioning linked mailboxes in an Exchange resource forest (with the FIM Synchronization Service, Identity Lifecycle Manager, or Identity Integration Server). The error: “This security ID may not be assigned as the owner of this object.” The problem: It … Continue reading →

Posted in FIM, FIM 2010, Troubleshooting | Tagged , , , , , , , , , | 1 Comment