The document discusses configuring and managing user profile synchronization in SharePoint Server 2010. It provides background on the evolution of Microsoft identity management solutions, from Zoomit Via and Microsoft Metadirectory Services to the current Forefront Identity Manager. It then outlines the key components of the user profile subsystem in SharePoint 2010 and provides recommendations for configuring the user profile synchronization process, including to not use the same account for the sync service and operations, to validate Active Directory permissions, and to have patience during setup.

1. Configuring and managing User Profile Synchronization IT114 Spencer HarbarEnterprise Architect harbar.net

2. About Spencer www.harbar.net | spence@harbar.net | @harbars General SharePoint Dogsbody Microsoft Certified Master | SharePoint 2007 Microsoft Certified Master | SharePoint Instructor & Author Most Valuable Professional | SharePoint Server SharePoint Patterns & Practices Advisory Board Member 16 years in Enterprise IT ISPA Vice President Enterprise Architect working with Microsoft’s largestcustomers deploying SharePoint Server. Works with SharePoint Product Group on 2010 Readiness Author for MSDN & TechNet

3. Agenda Problem Space “Metaverse” Evolution of Microsoft Identity Management Configuring User Profile Sync

4. Problem Space

5. User Attributes Are stored all over the place! Active Directory HR System LOB System Legacy Web apps Even (shudder!) Novell And of course, SharePoint User Profiles

6. Key request “Write Back” Change AD attributes based on changes to User Profile Properties

7. “Metaverse” A really good Sci-Fi book  Snow Crash Metadirectory

8. Identity management Evolution Microsoft

9. Microsoft Identity Management Zoomit Via Microsoft Metadirectory Services (MMS) Identity Integration Server (MIIS) Identity Lifecycle Manager (ILM) Forefront Identity Manager (FIM)

10. Zoomit Via

11. User profile sync SharePoint Server 2010

12. User Profile Subsystem

13. Configuring User profile Sync That’s enough chat

14. Recommendations Don’t try and workaround the Farm Account Issue Don’t use the same account to run the service and perform the sync Validate Active Directory Permissions before you start Patience, Patience, Patience!

15. Thank you for attending!

16. Patrick, we miss you