Book Image

Microsoft Forefront Identity Manager 2010 R2 Handbook

By : Kent Nordstrom
Book Image

Microsoft Forefront Identity Manager 2010 R2 Handbook

By: Kent Nordstrom

Overview of this book

Microsoft's Forefront Identity Manager simplifies enterprise identity management for end users by automating admin tasks and integrating the infrastructure of an enterprise with strong authentication systems. The "Microsoft Forefront Identity Manager 2010 R2 Handbook" is an in-depth guide to Identity Management. You will learn how to manage users and groups and implement self-service parts. This book also covers basic Certificate Management and troubleshooting. Throughout the book we will follow a fictional case study. You will see how to implement IM and also set up Smart Card logon for strong administrative accounts within Active Directory. You will learn to implement all the features of FIM 2010 R2. You will see how to install a complete FIM 2010 R2 infrastructure including both test and production environment. You will be introduced to Self-Service management of both users and groups. FIM Reports to audit the identity management lifecycle are also discussed in detail. With the "Microsoft Forefront Identity Manager 2010 R2 Handbook" you will be able implement and manage FIM 2010 R2 almost effortlessly.
Table of Contents (21 chapters)
Microsoft Forefront Identity Manager 2010 R2 Handbook
Credits
About the Author
About the Reviewers
www.PacktPub.com
Preface
8
Using FIM to Manage Office 365 and Other Cloud Identities
Afterword
Index

Extending the schema


Before we can do anything, we need to extend the Active Directory schema to support FIM CM.

Note

All schema changes in Active Directory should be planned carefully.

If we don't, Configuration Wizard will stop and tell us to extend the Active Directory schema if we try to run it.

Note

Remember that all modifications to the Schema require Schema Admins permissions.

If you look at the FIM 2010 R2 media in the \Certificate Management\x64 folder, you will find a Schema folder where you can run the script ModifySchema.vbs.

If you just run that script, you will get a Success message:

However, this hasn't made any changes; it's a false Success message.

In order to actually change your schema, you need to modify the script and the files it used to match your environment before running the script.

  1. Copy the Schema folder from the FIM R2 2010 media to a local folder, C:\Temp\FIM CM Schema for example.

  2. If you look at the content of the folder, you will see four files.

  3. What we need to do...