Extracting data from multiple Active Directory Domains

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm In this blog I will describe the steps which will simplify SSIS package design, when dealing with environments where data needs to be extracted from multiple Active Directory domains. …

0

Extracting data from FIM Synchronization Service Run Profile log

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm Analyzing run history logs is an essential tasks in ensuring proper operation of your FIM environment. Often we need to go beyond analysis by creating scripts to detect and…

0

Correlating Active Directory accounts with their corresponding HR records in the absence of unique identifiers

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm The question of how the records stored in various repositories could be linked together inevitably comes up in most identity management related projects. For a variety of reasons (see…

0

Establishing Federation Trust

  Conceptually within a Federation Trust configuration one party holds accounts of the participating users and another party serves applications to such users. The party holding the accounts is typically referred to as account domain and the ADFS server residing in this domain is referred to as Account STS (STS-A). The party serving the application…

0

Building a test claims-aware ASP.NET application and integrating it with ADFS 2.0 Security Token Service (STS)

  We will need an ADFS (STS) in order to provide authentication services for our application. Follow this link for instructions on setting up ADFS server. Install IIS on the application server In addition to the defaults add ASP.NET and accept the required prerequisite services to be added. Also select IIS 6 Management Compatibility required…

0

Installing a stand-alone ADFS Service

  In general installation of ADFS Service is a very straight forward process, nevertheless there are a couple of points worth paying special attention to: Registration of the SPN for the ADFS Service Granting access to the private key of the SSL certificate to the ADFS Service account Steps outlined below should help you avoid…

0

Publishing Claims Aware Web Applications via Unified Access Gateway (UAG) SP1

  This walkthrough outlines the process of publishing a claims aware application through UAG SP1. Links to building pre-requisite components How to install and configure ADFS Service How to create a test claims-aware application follow this link The publishing process consists of the following: 1. Configure UAG with ADFS 2.0 Authentication Server 2. Creating UAG…

0

Active Directory Data from Extract Load and Transform (ETL) perspective

Ensuring consistency of the data stored in Active Directory should be one of the top priorities in achieving the overall security of an enterprise. By consistency in this context I imply how well the organization structure of a company is represented inside Active Directory, i.e. how accurately group memberships are mapped to the business tasks assigned…

0

Installing AD Connection Manager and AD Source components

Two DLLs make up the content of the package which you will need to deploy on your SQL Server: ADSource.dll – Active Directory Source Component ADSourceUI.dll – UI for the Source Component Placement of the components I am assuming that SQL 2008 was deployed using the default location of "C:\Program Files\Microsoft SQL Server\”, and that…

0

Imaging Windows 2008 Server

Since I often need to quickly load Windows Server 2008 OS in my lab environment, I decided to invest some time into automating this procedure. In the process of doing so, I ran into some interesting challenges, hence this blog. Objective In my scenario, I would like to be able to create and restore an…

0