'Twas the night before Christmas, when all through the internet
Not an identity was stirring, not even a Passport .NET
The user accounts requests were submitted with care
Hoping that their access would soon be there
The users were nestled all snug in their beds
While visions of being able to do their jobs danced in their heads
The servers and computers were in sleep mode
Awaiting someone to move a mouse and send the wake up code
An urgent email pinging my iPhone created a vibration
I sprang to my Surface to see what was the perturbation.
Opening up Windows 8.1, I signed in to the computer
I ran AD Users and Computers and Event Viewer
User accounts had been created and added to groups
All while I had slept after eating my soups
As I looked at my network, what should appear?
But a brand new Identity Management System so nice and clear
On Sync Engine, on Management Agent! Now MPRs and Workflows!
On Metaverse on Sync Rules! On PowerShell and Data flows!
To the web service! To Self Service Password Resets!
Provision, Deprovision and Synchronize all the sets!
Ok, ok so maybe I am just a bit eager for the release of Microsoft Identity Manager (due out 1st half of 2015).
Wednesday, December 24, 2014
Friday, December 12, 2014
Speaking at 2015 Redmond Summit (Jan 27-29 '15)
I will be speaking at the 2015 Redmond Summit: Where Identity Meets Enterprise Mobility.
This summit is put on by my friends at Oxford Computer Group.
I will be speaking on Password Sync vs. ADFS. Then the next day I will speak on the Business track about How Identity Management Impacts the Bottom Line.
See you there
This summit is put on by my friends at Oxford Computer Group.
I will be speaking on Password Sync vs. ADFS. Then the next day I will speak on the Business track about How Identity Management Impacts the Bottom Line.
See you there
January
27-29, 2015 in Redmond, WA on the Microsoft Campus
Join OCG, Microsoft, and industry experts for two and
a half days of networking and talks on the latest thinking on identity and
enterprise mobility. If you’re overwhelmed by devices, have a hybrid
environment, wish to simplify access, or manage identity in an increasingly
complex digital world then you won’t want to miss this event. Sessions will
assess and look in detail at the largest release of new identity products in
Microsoft’s history, including Enterprise Mobility Suite, Intune, Azure Active
Directory, Hybrid Identity, and more! Discover how other organizations have
tackled the same problems you face through case studies and get technical
insight from Microsoft product managers and engineers. Registration is $800 per
delegate. Find our more and
register!
Thursday, December 4, 2014
What AD Attributes are indexed? ANR? Tuple? PowerShell
Import-Module ActiveDirectory
Write-Host "Tuple Index Enabled Attributes"
Get-ADObject -SearchBase ((Get-ADRootDSE).schemaNamingContext) -SearchScope OneLevel -LDAPFilter "(searchFlags:1.2.840.113556.1.4.803:=32)" -Property objectClass, name, whenChanged, whenCreated, LDAPDisplayNAme | Out-GridView
Write-Host "ANR Enabled Attributes"
Get-ADObject -SearchBase ((Get-ADRootDSE).schemaNamingContext) -SearchScope OneLevel -LDAPFilter "(searchFlags:1.2.840.113556.1.4.803:=4)" -Property objectClass, name, whenChanged, whenCreated, LDAPDisplayNAme | Out-GridView
Write-Host "Indexed Enabled Attributes"
Get-ADObject -SearchBase ((Get-ADRootDSE).schemaNamingContext) -SearchScope OneLevel -LDAPFilter "(searchFlags:1.2.840.113556.1.4.803:=1)" -Property objectClass, name, whenChanged, whenCreated, LDAPDisplayNAme | Out-GridView
The above script is something I use to quickly look and see what is indexed in an AD environment
Write-Host "Tuple Index Enabled Attributes"
Get-ADObject -SearchBase ((Get-ADRootDSE).schemaNamingContext) -SearchScope OneLevel -LDAPFilter "(searchFlags:1.2.840.113556.1.4.803:=32)" -Property objectClass, name, whenChanged, whenCreated, LDAPDisplayNAme | Out-GridView
Write-Host "ANR Enabled Attributes"
Get-ADObject -SearchBase ((Get-ADRootDSE).schemaNamingContext) -SearchScope OneLevel -LDAPFilter "(searchFlags:1.2.840.113556.1.4.803:=4)" -Property objectClass, name, whenChanged, whenCreated, LDAPDisplayNAme | Out-GridView
Write-Host "Indexed Enabled Attributes"
Get-ADObject -SearchBase ((Get-ADRootDSE).schemaNamingContext) -SearchScope OneLevel -LDAPFilter "(searchFlags:1.2.840.113556.1.4.803:=1)" -Property objectClass, name, whenChanged, whenCreated, LDAPDisplayNAme | Out-GridView
The above script is something I use to quickly look and see what is indexed in an AD environment