Book Image

Microsoft Identity Manager 2016 Handbook

By : David Steadman, Jeff Ingalls
Book Image

Microsoft Identity Manager 2016 Handbook

By: David Steadman, Jeff Ingalls

Overview of this book

Microsoft Identity Manager 2016 is Microsoft’s solution to identity management. When fully installed, the product utilizes SQL, SharePoint, IIS, web services, the .NET Framework, and SCSM to name a few, allowing it to be customized to meet nearly every business requirement. The book is divided into 15 chapters and begins with an overview of the product, what it does, and what it does not do. To better understand the concepts in MIM, we introduce a fictitious company and their problems and goals, then build an identity solutions to fit those goals. Over the course of this book, we cover topics such as MIM installation and configuration, user and group management options, self-service solutions, role-based access control, reducing security threats, and finally operational troubleshooting and best practices. By the end of this book, you will have gained the necessary skills to deploy, manage and operate Microsoft Identity Manager 2016 to meet your business requirements and solve real-world customer problems.
Table of Contents (22 chapters)
Microsoft Identity Manager 2016 Handbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Index

Post-installation configuration


Before we can start to use our new MIM environment, we need to perform some post-installation tasks.

Granting the MIM service access to MIM Sync

In order for the MIM service to manage the MIM Synchronization service, we need to add the MIM Service service account to the MIMSyncAdmins group. If you are implementing Password Reset, you also need to add the MIM Service service account to the MIMSyncPasswordSet group.

After adding the MIM Service service account to the new groups, you need to restart the MIM Service service in order for the new group membership to take effect.

Securing the MIM Service mailbox

This is not required, but it is best practice to take a look at the mailbox used by the MIM service (if you're running Exchange). A few things you might consider are as follows:

  • Secure the mailbox, making sure only internal users can send a mail to it.

  • Configure the mailbox quota to make sure the MIM Service mailbox does not get blocked by default quota settings...