Category Archives: Active Directory

Simple business case for #MIM2016 SSPR

Posted on February 8, 2018 by bobbradley1967

It occurs to me that perhaps we don’t always do due diligence when it comes to establishing a credible business case for IAM intiatives, and this only comes back to bite us later.  One of the easiest metrics is the … Continue reading →

Posted in Active Directory, MIM (Microsoft Identity Manager) 2016, SSPR | Tagged , , | Leave a comment

Active Directory is NOT an IdM Technology (without #MIM2016 or similar)

Posted on February 15, 2017 by bobbradley1967

It continues to frustrate me that publications such as this recent white paper from the Microsoft EMS (Enterprise Mobility and Security) team still underplay the need for organisations to get their on-premises identity management under control before turning on AAD Connect. … Continue reading →

Posted in Active Directory, Azure Active Directory, MIM (Microsoft Identity Manager) 2016 | 2 Comments

Managing Office 365 Licenses with #MIM2016 and #AzMan – Part 2

Posted on June 27, 2016 by bobbradley1967

In my last post I introduced the concept of using Windows Authorisation Manager (AzMan) to manage the automation of Office 365 licenses.  In this post I will go into detail on how the solution hangs together. Complementing AAD Connect with … Continue reading →

Posted in FIM (ForeFront Identity Manager) 2010, MIM (Microsoft Identity Manager) 2016, Windows AzMan | Tagged , , | 9 Comments

Managing Office 365 Licenses with #MIM2016 and #AzMan – Part 1

Posted on June 26, 2016 by bobbradley1967

One of the things we Microsoft FIM/MIM folks find ourselves doing of late is having to find ways of automating Office 365 license assignment for our “hybrid” (AD+AAD) customers, initially as part of provision the initial Exchange Online mailbox which … Continue reading →

Posted in Active Directory, FIM (ForeFront Identity Manager) 2010, MIM (Microsoft Identity Manager) 2016, Windows AzMan | Tagged , | 1 Comment

Building in #MIM2016 Solution Resilience

Posted on April 6, 2016 by bobbradley1967

Disasters can happen for all sorts of reasons, and when we’re automating we risk large-scale mishaps. What sort of precautions do you take to disaster-proof (or at least contain) your IAM solution? Continue reading →

Posted in Active Directory, FIM (ForeFront Identity Manager) 2010, MIM (Microsoft Identity Manager) 2016, Uncategorized | Tagged , , | 2 Comments

Replay your #FIM2010 ADDS MA

Posted on July 4, 2014 by bobbradley1967

An interesting take on the Replay MA idea came to me that I want to share today. So far the published use cases for this idea have been restricted to the ‘replaying’ of the FIM Service MA alone – such … Continue reading →

Posted in Active Directory, FIM (ForeFront Identity Manager) 2010, ILM (Identity Lifecycle Manager) 2007 | Tagged , , , , | 4 Comments

A midsummer LITE dream

Posted on June 12, 2014 by bobbradley1967

With our own personal identity details being proliferated on the web at an unprecedented rate, many of us are finally taking steps of our own to protect ourselves. But it is a daunting proposition to reign in what has already become a runaway train in many … Continue reading →

Posted in Active Directory, FIM (ForeFront Identity Manager) 2010, UNIFY Broker PLUS | Tagged , , | 2 Comments

Managed Service Accounts

Posted on April 28, 2013 by bobbradley1967

A friend posted a link to the latest edition of a document entitled Best Practices for Securing Active Directory from Microsoft IT. Nice document – full of useful tips on the subject. One thing that I noticed was missing, however, … Continue reading →

Posted in Active Directory, FIM (ForeFront Identity Manager) 2010, ILM (Identity Lifecycle Manager) 2007 | Tagged , | 6 Comments