Manager Approved AD User account through FIM.....How to do this?

i am new in FIM......please provide the simplest Answer
Any step by step guide....
and do i need Echange Server for that...i just want the communication between FIM & AD.

A far I understand, during user creation you would choose manager?
It can be done by, for example, adding one attribute in schema. And as long this attribute would not be filled out by manager, user would not be provisioned to AD. But provisioning has to be realized through Synchronization Rules or Metaverse rules extensions
-> provision user only if this attribute is filled (or "true" if boolean).
So it's rather simple:
1. Add new boolean attribute to FIM schema and add this attribute as user's attribute,
2. Make "manager" field in FIM Portal as obligatory when creating user (via RCDC).
3. Make MPR that manager can update such attribute.
3.1. If wanted, add MPR that notifies manager that new user is waiting for acceptance.
4. Make provisioning rules extension - in code or Synch Rule.
Exchange is not needed. Exchange is only useful if you want FIM to create mailboxes automatically when creating user or if you want FIM to manage mailboxes.
Keep trying

Similar Messages

Creating windows user account through java

Hi,
Is it possible to manage(create/edit/delete) windows user account through java.
Where in the java program is used to create windows accouunt on the same machine.....
I did that with the net command and running the net command in java.... is there any better approch to this problem
Regds
sandy

I have heard something about the JDesktop, will it be
possible if i use the JDesktop,How would I know, it's not a standard library. Go and have a look at it.

My computer wont recognize my iphone 4. when i plug it into any computer it doesnt charge. i followed the procedure on the website but the device manager still says unknown device. any ideas how to fix this???

My computer wont recognize my iphone 4. when i plug it into any computer it doesnt charge. i followed the procedure on the website but the device manager still says unknown device. any ideas how to fix this??? the weird thing is it use to work until yesterday. thanks

Will it charge when connected to a wall outlet? The USB port on your computer must be 2.0
Powering Apple and third party peripherals through USB

I have bought used I phone 4s. I cloud fails to accept my apple ID, which is accepted by I tunes. In fact it says that I have used maximum number of user accounts. Kindly help me in this matter.

I have bought used I phone 4s. I cloud fails to accept my apple ID, which is accepted by apple store and I tuned.
It says that I have already used maximum number of user accounts. Kindly help to resolve this problem.

Hello Renvin29,
It sounds like you need to disable your iPhone remotely. I'm sorry to hear about your phone! The only way to do this with is Apple services is if you had Find my iPhone enabled. You have 2 options:
You can use this article to put the phone into Lost Mode and preserve your data on it, but prevent access to it:
iCloud: Use Lost Mode
http://support.apple.com/kb/PH2700
Or you can just erase it remotely outright:
iCloud: Erase your device
http://support.apple.com/kb/PH2701
You should also take a look at this article for additional info on what to do about this situation:
If your iPhone, iPad, or iPod touch is lost or stolen
http://support.apple.com/kb/HT5668
Thank you for using Apple Support Communities.
Take care,
Sterling

I unregistered my iphone but still am having issues getting texts from iphone users. Anyone know how to fix this?

I unregistered my iphone but still am having issues getting texts from iphone users. Anyone know how to fix this?

Turn off iMessage on the old iPhone.
Restore the iPhone as new.
Have the other iPhone users delete the current message thread, and start a new messae to you.
Have the other iPhone users delete your contact, then re-add it.
Go to ww.icloud.com and remove the device from your Find My iPhone.
Go to appleid.apple.com and change your primary email address and/or password.
Contact Apple Support at getsupport.apple.com for further assistance if these steps don't work.
Wait about 30 days for the iMessage server to self-correct the issue.

How can users add their devices to Profile Manager without a user account?

We would like to allow company devices to be tracked, inventoried and managed in Profile Manager without creating a user account for each person so they can log into /MyDevices to download the mobile profiles. We aren't staffed to have someone manage user accounts as quickly as iPads are being purchased.
If we can't do some kind of guest access, can one user, maybe called Enroll, have literally one thousand devices attached to them?
The other alternative is to have the profiles on a small webpage with a password to download.

the easiest way is to use apple configurator
using apple configurator
enable enrollment in PM
un tick restrict to users in device library
apple configurator should pick up your server certs
and the PM auto enrollment profile
setup a enrolment wifi lan
configure your IOS devices with apple configurator adding the
server cert and your enrolment wifi lan
you'll still have to handle each device tapping yes to install each profile
but you should end up with the ipads in PM with no users
from there you can set which wifi you wish them to connect to
eg staff wifi, email setings, VPN etc.
open the correct ports on firewalls to allow PM to work internaly and externaily
and pr any port forwading as nessessary and you'll be able to wipe lock change settings outside on your network, providing the device is online.

Always used 1 main account. Started using individual user accounts. So how do I use software or applications with a lot of data like Quicken under my own user account?

I recently upgraded our family's mac to OS X. I thought this was the perfect time to create and use "user accounts". We had always used 1 main account. So how do I use software or applications with a lot of data like Quicken under my own user account? I wanted to be able to manage my own itunes library, iphone apps, messages. But I still really need to use the Stuff I have in Quicken essentials. I don't want to have to restart all my work done in Quicken already.

I haven't used Quicken in a while, but most applications store your files in your Documents folder. Is that where your Quicken data file is? What you do next depends on how many family members need to get at that data.
If multiple family members need to use the Quicken data file, try moving it to the Documents folder in the Shared account. That is an account that all accounts can see. It's at the same level as the other accounts. In other words, Shared is one level up from your Home account, or Hard Drive/Users/Shared.
If you're the only one allowed to see that Quicken data, move the Quicken data file from the old main account to your account, and don't leave a copy behind. You can use the Shared folder as a way station for the transfer since you won't be able to see both accounts' Documents folders at the same time (because you're not allowed to peek into other people's accounts). Or you can use another disk or server for the transfer, as long as you can get to it when logged into either account.

One computer, two user accounts, two libraries - how to share??

My husband and I each have an account on our Dell computer. We each have an iTunes library and would like to have the two libraries shared with each other. We've put them in the shared documents, shared music folder. We also set our preferences in each of our iTunes accounts the location of the library. My library updated to the shared account, but without any of the music purchased from his account. His library shows no music at all - it won't update to the shared file. When we open the shared music folder - all the music is there. It just doesn't come through to iTunes. Help!!!

Hi Lou18,
Welcome to the Apple Discussions
If you have used iChat to enter two .mac account screen names then you have to view it as one iChat. Whichever settings one of you sets then that will be the settings the other sees.
However if you mean you have set up two Mac User Accounts on the Mac you will need to check that she is actually opening her Mac user account and has not added her .mac details to your iChat.
There is a possibility that you are talking about Family Accounts or a email Alias for one .mac account in which case one of you will need to use a different screen name for iChat.
Now this new Name can be AIM or a trial .mac.com name as these will work after the 60 days is up. It is the Linked .mac accounts that do not work for iChat.
Links and stuff
8:01 PM Tuesday; June 19, 2007

Creating user accounts through ARD3 on client machines

Hello. I am trying to create a secondary local admin account on some machines that are running ARD3/OS X 10.4.8. Right now, I am using only one machine as a test before attempting this on the several hundred machines I need to do this on.
I used this old thread as a reference:
http://discussions.apple.com/thread.jspa?messageID=1112351&#1112351
Using these instructions, I am able to connect to the ARD client machines and send them the UNIX commands as root. Here are the commands I am using in order:
echo 'admin2::512:512::0:0:admin2:/Users/admin2:/bin/bash' | niload -v passwd /
echo 'admin2:*:512:admin2' | niload -v group /
niutil -appendprop / /groups/admin users admin2
Using these commands, I can successfully create a user account named "admin2", with no password, create a group named admin2, and also make user admin2 a member of the admin group.
The problem I am having is using the passwd command through ARD. The passwd username command requires you to type the password in twice and you get the following output:
New password:
Changing password for admin2.
Password unchanged.
I have also attempted to add the password in the first command that is sent in Field 2, like so:
echo 'admin2:password:512:512::0:0:admin2:/Users/admin2:/bin/bash' | niload -v passwd /
However, when I try to login, it will not let me login using the pasword I specified the above command. The only way this works is if I execute the passwd command.
Is there any way in ARD that I can change a user password on another machine -or- is there a syntax for the passwd command that I can use to change the password without entering it twice?
Any help would be greatly appreciated. I would email the author of the solution "shayaan", but an email address is not listed and the original thread is locked.
Thanks,
Jason

found answer in another thread.

New user/account in Mail - how do I get Set-up assistant off?

Hi,
I am helping a friend set up their new Mac Pro. They have never owned a computer - and they are using Leopard.
The outgoing mail server, etc... isn't working. I want to just get him into Mail Preferences and set up the accounts there.
However the Set-up assistant keeps saying "Welcome to Mail" and he can't seem to get past this (according to him on the phone)...
Suggestions?
Thanks!

Please clarify: if he can't get past Welcome to Mail, how does he know the outgoing server will not work?
If there is one account set up, you can hold down the Option key when clicking on the + to add an account, and bypass the account setup assistant.
You could create a New User Account on your Mac, and as that New User setup one account, and then email him the com.apple.mail.plist file from that New User Home Directory/Library/Preferences -- archived to properly email I would expect would be needed. If he then replaced that file, if one exists, in his Home directory/same location, then at least one account should be ready to go when he next launches Mail.
More info, please.
Ernie

I want to give my macbook pro to someone, but i have forgotten my computer user account password. How do I remove myself?

i have forgotten my users account password.iam not able to change any thing without the password

Forgot Your Account Password
For Lion, Mountain Lion, or Mavericks
    Boot to the Recovery HD:
Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
     When the menubar appears select Terminal from the Utilities menu.
     Enter resetpassword at the prompt and press RETURN. Follow
     instructions in the dialog window that will appear.
     Or see:
       Reset a Mac OS X 10.7 Lion Password
       OS X Mountain Lion- Reset a login password,
       OS X Mavericks- Solve password problems,
       OS X Lion- Apple ID can be used to reset your user account password.
Then do the following: What to do before selling or giving away your Mac.

Manage Cedentials in User Accounts

While looking around my User Account information I noticed a Generic Credential in Manage Credentials. It is named virtualapp/didlogical complete with a user name and password. Also is entered on the Local Machine and I am wondering what this is for. Some searches show as part or from Windows Messenger and or Windows Live. Also it as being from a Update from a FAKE Microsoft Update Website. From what other users have said it returns automatically after being reomoved sort of like the Google updater so does anybody have a clue about this?
This is for a Toshiba NB255-N245 mini netbook with Windows 7 Starter

mini notebook NB255-N245
Virtualapp/Didlogical is a credential that is stored when you use any of the Windows Live applications (and some other Microsoft services).
This thread has more.
Windows Credentials - Where to get more details?
-Jerry

Access Denied creating user accounts through vba

Hello,
I have a MS-Access application that runs on a Windows 2012 server. My customer logs into the server using RDP. The MS-Access application is started up automatically by means of the environment variable in the user settings. The customer needs to be able
to create new windows users for this application, simply by clicking a button.
The VBA script to create users works, because when I start up the MS-Access application with my own logged on Administrators account, the new users get created. If my customer tries it, he gets 'Access Denied' error. I have added his user account to
the Power Users group, but that did not solve the problem. I also tried to make him member of the DCOM Users Group, the 'Access Denied' error remains...
I do not want to give him administrator priviliges, because he is 'just a customer'...
What do I need to do for this setup to work? I tried altering some DCom settings, but frankly I do not have enough knowledge to feel comfortable with this. Hope anybody can help me out here...
best regards, Rob

Is this a standalone server? Only administrators can create user accounts, so there is no work around for that. You could look at something that has the administrator account/password stored and launch PSEXEC or something else in an elevated session behind
the scenes but that is a security volunerability because the credentials are stored.
If the account is being created in an Active Directory environment you could delegate permissions to the appropriate OU for your customer.
Mark B. Cooper, President and Founder of PKI Solutions Inc., former Microsoft Senior Engineer and subject matter expert for Microsoft Active Directory Certificate Services (ADCS). Known as “The PKI Guy” at Microsoft for 10 years.

User Accounts on an external drive - is this possible

I am planning to purchase a Mac Mini (with a 60 gig drive) for our household. There will be multiple user accounts set up, and I would like to have the user accounts on an external 500 gig LaCie drive (to allow for separate, potentially large iTunes and iPhoto libraries).
Is it possible to have the user accounts on an external drive, perhaps with shortcuts on the startup volume, if necessary? I will have my administrator account on the startup volume. My hope is that as people log in or use account switching, the Mini would look to the LaCie drive for the user's documents, media, etc. The intent is to perserve as much space on the startup disk as possible.

Log in from each account and then copy that account's home folder to the external drive. Once all of the home folders have been copied, open the NetInfo Manager in the /Applications/Utilities/ folder and change the home property for each of the accounts you created on the system to point to the external drive; this will look like /Volumes/volumename/Users/username/. After all of the home folders have been moved, create a new administrator account in the Accounts pane of System Preferences for troubleshooting purposes, and then verify that everything works properly from each of the other accounts. Don't delete or alter any accounts which you didn't create or don't recognize.
(18462)

I received the following error when attempting to use HP SimplePass Identity Protection to manage my passwords; Firefox doesn't know how to open this address, because the protocol (dpql) isn't associated with any program. How can I correct this?

I use HP SimplePass Identity Protection to control my passwords. Everything was fine until I updated to Firefox 4. Can I remove version 4 or is there a solution to my problem. I received the following error message; Firefox doesn't know how to open this address, because the protocol (dpql) isn't associated with any program.

You'll have to downgrade to the previous secure version I regret to say. See https://support.mozilla.com/en-US/questions/799388
Go to [http://www.mozilla.com/en-US/firefox/all-older.html Download Firefox v3.6.17] and download it to the desktop. 
Then go to Add/Remove Programs, scroll down to "Mozilla Firefox" and remove it, choosing to keep your bookmarks, customizations etc., (don't checkmark the box). 
Then reboot and delete the folder called "Mozilla Firefox" at this location: C:\Program Files\Mozilla Firefox 
Finally run the installation file you downloaded to the desktop earlier. 
Your bookmarks, customizations etc., are maintained in a different location and will become available to you again once you complete the installation. 
After you complete the installation, go to the [http://www.mozilla.com/en-US/plugincheck/ Plugins Check] page and update those where necessary.
Here's a free open source password manager: http://keepass.info/

Manager Approved AD User account through FIM.....How to do this?

Similar Messages

Maybe you are looking for