FIM PCNS Two Way Password sync between two distinct forests

Hello Everyone,
i was wondering if anyone had any idea on a way to synchronize passwords with PCNS for 2 AD Forests both ways (from forest 1 to forest 2 and from forest 2 to Forest 1)
thanks !
Hitch Bardawil

Hi Hitch,
There is a setting on the AD management agent that limits the number of resets that will be performed against a given target, i.e.
Specify maximum number of password changes for a 24 hour period.  You could try setting that down to 1 on both of your AD MAs so that it interrupts the looping behaviour. 
You'd obviously have to test this out, and consider that if the user changes their password a second time in the same day, it won't get synchronized.  Setting the Minimum Password Age password policy to 2 days could alleviate this risk. 
Have fun testing!
Marc
Marc Mac Donell, VP Identity and Access Solutions, Avaleris Inc.
http://www.avaleris.com

Similar Messages

  • How does one do a two way contacts sync between an iphone and outlook? Most of the community has answered as this to be "always so", but it does not work! Changes made on outlook get done in my iPhone, but it does not work the other way around!

    How does one do a two way contacts sync between an iphone and outlook? Most of the community has answered as this to be "always so", but it does not work! Changes made on outlook get done in my iPhone, but it does not work the other way around!

    Close the tab the web page is loaded in (command - W).

  • How to keep playlists in sync between two computers?

    I have a MacBook Pro and a regular desktop Windows 7, and I have all of my music on both of them. However, I constantly keep adding new songs to different playlists all the time, and this makes it hard to keep everything in sync with both computers and my iPod because I usually sync from my Mac.
    Right now I export the updated playlists on one of the computers and import it on the other, but it's quite the hassle just to keep some playlists in sync. I tried using home sharing, but it just keeps downloading duplicates everytime I try to import, I would've thought it was smarter by just adding the new songs but appearently it isn't.
    So, anyways, is there any easy way for me to automatically keep playlists in sync between two computers?

    I am indeed subscribed to iTunes Match.  Are you saying that with Match, it will sync my playlists?  I will have to check this when I get home.  That would really be a nice surprise!
    I sync my iPod to iTunes on my Windows 7 box, but use iTunes on my Mac for synching my iPhone 6 and iPad 2.  Normally, I'd be modifying a playlist on the Win 7 box, adding or rearranging songs.  However, occasionally, I might download a song to the iPhone while out and about.  Then, when I'm back at the Mac, I'd do a sync and add that new song to one of the playlists.  Should Match then be keeping the playlists on the two machines in sync?
    As for the library replication, I had to do that when I first signed up for Match.  I was WAY over the 25k song limit, so I made a copy of the library, and in that copy deleted enough songs to get me under the limit.  Also discovered scripting and did some really neat things with that tool.  Still have the option when I start iTunes to use the old library, just in case there's something there I need to copy to the smaller lib.

  • Sucsessful sync between two libraries w ChronoSync?

    I've read in various places that you can sync between two Aperture Libraries by using ChronoSync with "Dissect packages" turned on - the one major caveat is the sync can only be one way - which library has the newest information has to be written to the other - no two way syncing.
    Anyone have this working? It's not one direction sync as I understand it, but which ever direction you select, those changes overwrite anything done since the last time Aperture's database was updated, right?
    Thanks for any feedback.

    WIthin my Aperture Library I have both professional and family related work. The way I share family stuff with family is pretty simple. I export the selected family pictures in a project as JPEG files. I import them by reference (don't generate a second copy) into iPhoto. From iPhoto, I have three paths to share: export to my Kodakgallery account, create an album and share on Mobileme and finally, once I have created an album in iPhoto I open iTunes and sync the pictures to my AppleTV. Other family members anywhere in the world can readily see my kodakgallery site as well as my mobileme account.
    At home, when family is over, the AppleTV has become the absolute most favorite viewing station, live with music of my selection or theirs!
    Hope this helps.
    Steven

  • Can Muse sync between two separate computers?

    I have a desk top that stays at home and a laptop that travels with me. I will need to update the web site during times that I am traveling. Is there a way to sync the two computers so I can make changes on the laptop when traveling?

    Re: Can you edit a Muse website form multiple computers?

  • Problem with config sync between two CSM-S modules

    Hi everybody,
    I have a problem with config sync between two CSM-S modules.
    I am using CSM-S software version 2.1(8).
    The acitve module is used in a 6509 with WS-SUP720-BASE supervisor running software version 12.2(18)SXF12a.
    The standby module is used in a 6509-V with VS-S720-10G supervisor (no VSS setup) running software version 12.2(33)SXI3.
    Failover seems to work fine:
    switch-active#sh modu csm 2 ft                                      
    FT group 1, vlan 398
    This box is active
    Configuration is out-of-sync
    priority 150, heartbeat 3, failover 40, preemption is on
    switch-standby# sh modu csm 2 ft
    FT group 1, vlan 398
    This box is in standby state
    Configuration is out-of-sync
    priority 80, heartbeat 3, failover 40, preemption is on
    The command (on active side) "hw-module contentSwitchingModule 2 standby config-sync" leads to following result:
    switch-active:
    2010-04-14T16:21:45+02:00 srz16-1b.net.dsh.at/srz16-1b.net.dsh.at 56042: Apr 14 16:21:44.223: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Active: Bulk sync started
    2010-04-14T16:21:45+02:00 srz16-1b.net.dsh.at/srz16-1b.net.dsh.at 56043: Apr 14 16:21:44.251: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Active: Sending configurations to Standby CSM, this may take several minutes!
    2010-04-14T16:21:46+02:00 srz16-1b.net.dsh.at/srz16-1b.net.dsh.at 56044: Apr 14 16:21:45.995: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Active: Sending configuration to Standby CSM
    2010-04-14T16:21:51+02:00 srz16-1b.net.dsh.at/srz16-1b.net.dsh.at 56045: Apr 14 16:21:50.831: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Active: Sending configuration to Standby CSM
    2010-04-14T16:21:57+02:00 srz16-1b.net.dsh.at/srz16-1b.net.dsh.at 56046: Apr 14 16:21:56.151: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Active: Sending configuration to Standby CSM
    2010-04-14T16:22:59+02:00 srz16-1b.net.dsh.at/srz16-1b.net.dsh.at 56047: Apr 14 16:22:58.791: %CSM_SLB-3-REDUNDANCY: Module 2 FT error: Active: Manual bulk sync timed out
    2010-04-14T16:22:59+02:00 srz16-1b.net.dsh.at/srz16-1b.net.dsh.at 56048: Apr 14 16:22:58.803: %CSM_SLB-3-REDUNDANCY: Module 2 FT error:
    2010-04-14T16:22:59+02:00 srz16-1b.net.dsh.at/srz16-1b.net.dsh.at 56049:  FT CONFIG SYNC: Failed config sync entity send
    switch-standby:
    2010-04-14T16:21:45+02:00 srz31-5a.net.dsh.at/srz31-5a.net.dsh.at 2475: Apr 14 16:21:44.232: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Standby: Bulk sync started
    2010-04-14T16:21:45+02:00 srz31-5a.net.dsh.at/srz31-5a.net.dsh.at 2476:
    2010-04-14T16:21:45+02:00 srz31-5a.net.dsh.at/srz31-5a.net.dsh.at 2477: Apr 14 16:21:44.240: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: STANDBY:Configuration is being received, This may take several minutes!
    2010-04-14T16:21:49+02:00 srz31-5a.net.dsh.at/srz31-5a.net.dsh.at 2478: Apr 14 16:21:48.824: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Standby: Receiving configuration from Active CSM
    2010-04-14T16:21:54+02:00 srz31-5a.net.dsh.at/srz31-5a.net.dsh.at 2479: Apr 14 16:21:53.964: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Standby: Receiving configuration from Active CSM
    2010-04-14T16:21:59+02:00 srz31-5a.net.dsh.at/srz31-5a.net.dsh.at 2480: Apr 14 16:21:58.852: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Standby: Started clearing configuration
    2010-04-14T16:21:59+02:00 srz31-5a.net.dsh.at/srz31-5a.net.dsh.at 2481: Apr 14 16:21:59.400: %CSM_SLB-4-REDUNDANCY_WARN: Module 2 FT warning: Standby: Config Sync does not save running-config to startup-config
    2010-04-14T16:22:00+02:00 srz31-5a.net.dsh.at/srz31-5a.net.dsh.at 2482: Apr 14 16:21:59.400: %CSM_SLB-6-REDUNDANCY_INFO: Module 2 FT info: Standby: Previous configuration are being deleted from supervisor
    The last log message on standby device seems to be correct - there is no CSM configuration after the attempted config sync.
    Our configuration includes about 3500 lines and it is really uncomfortable to keep in sync manually.
    Maybe someone has the same problem?
    kind regards,
    Christoph

    Hi Christoph,
    I am running into the exact same issue. Upon further investigation I've discovered that this is a known bug, CSCtd09117.  You can read more about it here: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtd09117 .   Apparently this is fixed in ver 12.2(32.8.11)SX323 .
    I haven't had a chance to upgrade yet, so I can't verify the fix, but if it works for you please let me know.
    Regards,
    Brandon

  • HT1202 If I only have an IPod and a IPad (new) is tree any way to sync the two.  My old computer which the IPod was synced with is toast.

    V

    No. You can download much or most of the content that you have already purchased as long as you use the same Apple ID. There is no way to sync the two devices.
    Download Past Purchases

  • Trouble with two way calendar sync

    Recently my two way calendar sync stopped working?  Any ideas why?

    Its hard to tell.. Maybe some setting got thrown off during the update
    Please click the Thumbs Up icon if this comment has helped you!
    If your issue is resolved, please click the solution button on the resolution!
    Every BlackBerry should have BlackBerry Protect, get it now! | Follow me on Twitter | Bring Back BBM Music!

  • Sync between two macs?

    I have 2 macs at home. iMac G5 and a PowerBook. Is there a way to sync the two computers?
    Here's why I ask this question.
    I was working on my iMac G5 thinking that when I open iweb on my powerbook it will open the same files. Nope...there's no way to even import (or none that I know of anyway). Is there a easy way or is this function not available yet.
    I would love to take my powerbook out and update my iweb pages and be able to go home and work on the same pages on my iMac.
    Patrick

    I wish Apple would implement a "login"
    function next so that we can just "login" to our
    account and be able to make modifications to our
    files.
    I haven't tried it, but you might be able to keep the latest version of the Domain file on .Mac, copy it to whatever machine you were using, and then replace it each time with the modified version. This process might even be automated via some kind of backup or sync program.

  • Can Lion server keep my photos in sync between two macs?

    can Lion server keep my photos in sync between two macs?  Where should I keep them, we have Aperture 3 and my wife still likes iphoto '11.  I've already tried plenty of 3rd party solutions with little success.  I simply want my MBP to "mirror" the imac with the exception of iMovie footage.  Is this what the server app can do?  I am bad enough with computers, but even thinking about a server gives me migraines!

    discussing this right now at this link...
    http://discussions.apple.com/message.jspa?messageID=1473705#1473705

  • Any way to sync between computers?

    I can't sync my Tungsten E2 to my Vista 64 computer.  But I can sync to my XP Pro computer (32).  Is there a way to sync between the computers?  Or to use the files on the XP on the Vista 64?
    Thanks,
    Chas
    Post relates to:
    This question was solved.
    View Solution.

    You cannot sync between computers, What can be done though, to get the data from your E2 to the Vista 64 bit PC is to sync by bluetooth. You can check in your device manager to see if the PC already has bluetooth installed. If it does just find the bluetooth port on your PC, put the E2 a couple of inches away from the PC and in hotsync manager choose to hot sync by bluetooth. If you don't have bluetooth already installed on your PC you will need to purchase a USB bluetooth dongle, install the drivers that come with it and then sync. The first time you sync it could take a little while depending on how much data you have on the device.  Hope this helps.....
    Post relates to: Centro (Sprint)

  • Password synchronization between two domains

    Hey everybody,
    we have currently the situation, where we comes to password synchronization between Domain A and Domain B. Trust relationships are not possible caused we need separated authentications between productive network and user tools.
    So we would sync from Domain A (windows 2008 R2) --> Domain B (windows 2008 R2)
    Domain B would also replicate per Okta to Office365 Cloud.
    Now my question, could anyone point me in the right direction, what tools are usefully on the market to accomplish these issues.
    Sorry for my limited english.
    Best and thanks

    You can try using FIM with PCNS to sync passwords from Domain A to Domain B: https://technet.microsoft.com/en-us/library/jj590203(v=ws.10).aspx
    As for Office 365, you can simply implement an ADFS platform and federate it so that your users will be using their AD passwords. It is also possible to sync passwords with DirSync.
    This posting is provided AS IS with no warranties or guarantees , and confers no rights.
    Ahmed MALEK
    My Website Link
    My Linkedin Profile
    My MVP Profile

  • Blackberry Link Two Way Outlook Sync

    Hi,
     I was wondering if anyone knew the ETA on the two way syncing between Blackberry Link and Outlook. We are a small business that does not have Exchange and is not overly thrilled about cloud services. That said, all of our contacts and calendar events are synced through USB between our devices and local Outlook profiles.
    Sadly, I was told that the new phones would have this capability. However, they do not. Until this software is developed and implemented, we are unable to sync our information.
    Thank you for any help you can give,
    Preston

    No one here knows of the ETA. I hope it is sooner than later, but BlackBerry has not stated.
    I'm like you and was performing the wired sync, however I have been quite pleased with the OTA sync workaround using outlook.com, it's not perfect, but it cerainly works.
    1. If any post helps you please click the below the post(s) that helped you.
    2. Please resolve your thread by marking the post "Solution?" which solved it for you!
    3. Install free BlackBerry Protect today for backups of contacts and data.
    4. Guide to Unlocking your BlackBerry & Unlock Codes
    Join our BBM Channels (Beta)
    BlackBerry Support Forums Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • ICal Sync between two macs

    Is there a way to sync iCal between two macs without having a .Mac account?
    Thanks,
    "D"

    As far as backing up your calendars, I use the A/S below (scheduled daily) to backup my calendars. It places a copy of (~/Library/Calendars) in your (~/Library) folder.
    Can be modified to locate the backup to an external drive if desired.
    --pick up directory path
    set WhoAmI to ((path to library folder from user domain) as string)
    set the_date to date string of (current date)
    tell application "Finder"
         --make our backup folder if necessary
         if not (exists folder (WhoAmI & "CalBackup")) then
              make new folder with properties {name:"CalBackup"} at folder WhoAmI
         end if
         delete every folder of folder (WhoAmI & "CalBackup")
         delay 3
         make new folder with properties {name:the_date} at folder (WhoAmI & "CalBackup")
         duplicate files of folder (WhoAmI & "Calendars") to folder (WhoAmI & "CalBackup:" & the_date)
         --check file sizes
         set FileList to every file of folder (WhoAmI & "CalBackup:" & the_date)
         repeat with ThisFile in FileList
              set TheSize to (size of ThisFile) / 1024
              if TheSize < 0.2 then display dialog ((name of ThisFile) as string) & " may be empty" with icon caution
         end repeat
    end tell
    Copy the script and paste it into your Script Editor. I saved it as an app called "iCal Backup" which I schedule to run daily.

  • Keychain syncing between two computers

    I'm not sure where this post belongs as the issues seems to span different aspects of my computers. Originally I thought it was a mobileme issue but support was unable to help and over the last year I've tried many internet searches and asked many people, the latest of which is here
    Basically, I'm trying to sync 2 computers and an iPhone with mobileme. I can sync 1 computer and the phone but never both computers and the phone. In fact the phone is always OK so I doubt that the problem is there. I've set up mobileme to sync various items but there are 2 issues that seem to relate to keychains being saved on only one or the other computers - never both:
    iCal on computer 1 is totally blank no calendars or events are loaded from mobileme. Setting up the mobileme server is fine but NEVER allows the password to be saved - the password field is always blank after closing and opening iCal prefs. iCal on computer 2 works perfectly and has been set up in exactly the same way as iCal on computer 1.
    I have 4 Mail accounts. Whenever I open Mail on computer 1 I need to reenter the passwords for Mail accounts a and b. Whenever I open Mail on computer 2 I need to reenter the passwords for Mail accounts c and d
    Other than this sync between the 2 computers will collapse completely after a few minutes, hours or days and I will get Keychain Error message....
    .... or sometimes a File Sync error relating to iDisk when I try to turn iDisk sync back on.
    One or other computer will log out of mobileme and I will get a mobileme password error saying I've entered the wrong one. I then log back in which breaks the sync on the other computer. The longest I've had the computers syncing is a couple of days, but the keychain issues with Mail and iCal mentioned above are constant. If I get bored (as I often do) and just leave one of the computers out of mobileme sync for a while the 2 Mail accounts will ALWAYS need to have there passwords reentered. If the Save to my keychain checkbox is checked the error message will NEVER go away - the only way to get the Mail account to work for that session is to leave the checkbox unchecked. Quitting and restarting Mail will result in the passwords having to be reentered.
    With both computers synced with mobileme I will get the error at some point and every time I get this error, I have to re-sync data with mobileme and restart iDisk sync.
    I have deleted iCal prefs on both computers, deleted me.com keychains on both computers, repaired keychains on both computers, opened iSync and reset sync history on both computers, but nothing has done it yet.
    Any help and suggestions will be much appreciated.

    Couple suggestions
    1. Disable Automatic Sync on both computers. So when you do connect it does not go into an auto sync right away and allows you to check all the proper tabs to ensure they are set correctly per computer.
    When you connect iPhone and get a summary screen you should see advanced options below with a box called automatically sync, uncheck and apply.
    2. On one computer if you go to the Music tab when Iphone is connected it should be set to sync music. Which will be fine for the computer you want music to go to and from.
    As far as when you connect to the second computer
    The music tab when iPhone is connected should be unchecked and should not really sync with music at all.
    You can keep automatically synced checked if you like and prefer. The un-checking just gives you more time to check areas before you do normal syncing.

Maybe you are looking for

  • Sent mail in wrong folder

    I use my Virgin Media mailboxes on two devices: a Windows 8 PC using Windows Mail and an iPad, both configured to use IMAP.  The messages I send from the PC show up in the "Sent Mail" folder on both devices but the messages sent from the iPad show up

  • Billing Doc from a Contract with WBS, how to ??

    Hello there !!! I need to make a billing doc from a rental contract MV against a WBS Element, i cant see the field on the position of the contract. Can you tell me if there is a way to make this field visible for the position of the contract? or what

  • Scrolling and page loading is very choppy...i've cleaned out my history, cache, etc..it isn't my computer cause it does not do it in IE

    Scrolling has become very frustrating--there is nothing smooth about it..the pages jump so when i try to click on a link, the page jumps and i click on another link that is close by....getting very annoying...there is nothing wrong with my machine ca

  • CD's not playing in iTunes (or Windows Media Player)

    Hey everyone. I recently put together a new PC, and installed the latest iTunes. I managed to transfer all of my music across from my laptop using iTunes' DVD backup method. So everything plays fine so far. But when I put new CD's into my drive to co

  • Mozilla Camino

    Easily the fastest Web Browser - ever! I cannot believe the difference between this and IE, Mozilla, Safari - and especially Opera. Bob