FIM SSPR password reset fails with error PWReset Activity could not connect to the directory

Two primary reasons for the Forefront Identity Manager 2010 (FIM) or Forefront Identity Manager 2010 R2 Self Service Password Reset (SSPR) password reset action workflow (WF) failing to successfully reset a password after a user has successfully authenticated via the QA Gate or one of the new R2 gates have been posted on this blog.  This post is just a quick table of contents for the two posts.  In both cases the error message logged by the action workflow is the same: PWReset Activity could not connect to the directory.

When we get this error we can rule out membership in FIMSyncBrowse and FIMSyncPasswordSet groups, DCOM and WMI permissions.  It’s possible this error can be thrown for other reasons, but I haven’t seen any others personally and haven’t got round to simulating major Active Directory issues yet.

One thing that might be of interest however is the new feature in FIM 2010 R2 build 4.1.2548.0:

FIM Service

New feature

When the FIM password reset activity does not connect to Active Directory, the Windows Management Instrumentation (WMI) components return a code. The code explains the reason for this failure.

More information on that build can be found here (the quote above is taken from kb2750671).  That suggests we might get more info. bubbled up that helps with these silly layer-8 issues.

Advertisements

About Paul Williams

IT consultant working for Microsoft specialising in Identity Management and Directory Services.
This entry was posted in FIM, Self Service Password Reset, Troubleshooting and tagged , , , , , , , , , . Bookmark the permalink.

One Response to FIM SSPR password reset fails with error PWReset Activity could not connect to the directory

  1. Pingback: Forefront Identity Manager 2010 build 4.0.3644.2 released | Yet another identity management blog

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s