ManuPug

SON OF B@#%$!! WORKS!! Thanks anyway man! I found out that the error message is negligible. Cheers. Manu

I have been setting things here and there and I managed to have the domain controller to give me the message that the password has been delivered to all targets, but on the ILM Server I get from the event viewer these messages: "The management agent "Hosted" completed run profile "Delta Import (Stage Only)" with a delta import or delta synchronization step type. The rules configuration has changed since the last full synchronization. User Action To ensure the updated rules are applied to all objects, a run with step type of full synchronization should be completed." for MIIS and this for OLMA: "The following error occurred while reporting client data. The root cause may be that the server has not been upgraded to the latest version. Error: System.Management.Automation.RemoteException: A parameter cannot be found that matches parameter name 'ClientData'. at System.Management.Automation.PowerShell.CoreInvoke[TOutput](IEnumerable input, PSDataCollection`1 output, PSInvocationSettings settings) at System.Management.Automation.PowerShell.Invoke[T](IEnumerable input, IList`1 output, PSInvocationSettings settings) at System.Management.Automation.PowerShell.Invoke[T](IEnumerable input) at Microsoft.PowerShell.HostingTools.PowerShellProxy.InternalInvoke[T]() at Microsoft.PowerShell.HostingTools.PipelineProxyBase.Invoke[T]() at Microsoft.Exchange.XmaConnector.ElmaPSCommand.Invoke() at Microsoft.Exchange.XmaConnector.PSDataProvider.InvokeCmdlet(PSCommand cmd) at Microsoft.Exchange.XmaConnector.PSDataProvider.ReportScorecard()" Have you seen anything like this? Let me know. Manu

I noticed through verbose logging that my Pass Sync was using the wrong target, but the password is still not working. I am still trying to figure it out. Thanks Manu

Well that is the funny part I do not get errors I just can't get the password to sync. At this point I'm thinking that ILM is not configured right, even though I followed the instructions and check all the checkbox that they told me to. Tomorrow I'll send you the screen shot of the ILM settings. Thanks Pal. Manu

Is all this correct? C:\Users\Administrator>setspn.exe -L OLsync Registered ServicePrincipalNames for CN=OLSync,CN=Users,DC=adtest,DC=**** PCNSCLNT/DCTEST.ADTEST.****.EDU C:\Program Files\Microsoft Password Change Notification>pcnscfg.exe -LIST The service configuration is not set. Defaults will be used by the servic Default Service Configuration MaxQueueLength........: 0 MaxQueueAge...........: 259200 seconds MaxNotificationRetries: 0 RetryInterval.........: 60 seconds Targets Target Name...........: PCNSCLNT Target GUID...........: 9C3B135D-1B14-4666-949D-41AACC3EE2BC Server FQDN or Address: DCTEST.ADTEST.****.EDU Service Principal Name: PCNSCLNT/DCTEST.ADTEST.****.EDU Authentication Service: Kerberos Inclusion Group Name..: ADTEST\Domain Users Exclusion Group Name..: Keep Alive Interval...: 0 seconds User Name Format......: 3 Queue Warning Level...: 0 Queue Warning Interval: 30 minutes Disabled..............: False Total targets: 1 C:\Program Files\Microsoft Password Change Notification> Is seems that ILM doesn't like me!

Hello RabbieBurns. I ran these commands the first time that I created the OLSync account. It seems to be configured correctly. I still think that the password sync did not work somehow.

I probably missed those I only run the .\startsync. Do you have them? it might be it. thx

I have set up the ILM, for pass sync, and I entered the right credentials for the Admin Account. Exchange is installed on the DC, we are testing it to migrate all the staff and faculty in the next few months. When I installed ILM I selected the "exchange option" but I never configured it to work with ILM. Do I need to do something on that end? Later Manu

How can I access the PCNS log? I can't login to live@edu with the new password.

When I run the command .\startSync I get this results: PS C:\Program Files\Microsoft Identity Integration Server\SourceCode\Scripts> .\StartSync Hosted [Delta Import (Stage Only)] success OnPremise [Delta Import (Stage Only)] success OnPremise [Delta Sync] success Hosted [Delta Sync] success Hosted [Export] success Hosted [Delta Import (Stage Only)] success It creates new accounts in WLive for users that I create in the AD, when I reset the password on AD it shows a message that says that the password for that user has been changed, nothing more. So I'm assuming that the password sync is still not working properly. Manu

I fixed all the misspellings and now everything looks like it should be, but still can't synchronize the passwords. Any other clues? I get this message from the event viewer: " The management agent "Hosted" completed run profile "Delta Import (Stage Only)" with a delta import or delta synchronization step type. The rules configuration has changed since the last full import or full synchronization. User Action To ensure the updated rules are applied to all objects, a run with step type of full import and full synchronization should be completed." I appreciate your help. Manu

Thanks very much Rabbie. I get this message when I ran the command though: "C:\Program Files\Microsoft Password Change Notification>pcnscfg.exe addtarget /n :PCNSCLNT /a:DCTEST.ADTEST.byuh.EDU /s:PCSNCLNT/DCTEST.ADTEST.byuh.EDU /fi:"Doma in Users" /f:3 Warning: The Service Principal Name you specified could not be found on any accounts in this domain. This target configuration will not be able to deliver passwords if the Service Principal Name is not configured properly. Target Name...........: PCNSCLNT Target GUID...........: CF420837-BDB5-4D69-98D4-D8197C0CAA33 Server FQDN or Address: DCTEST.ADTEST.byuh.EDU Service Principal Name: PCSNCLNT/DCTEST.ADTEST.byuh.EDU Authentication Service: Kerberos Inclusion Group Name..: ADTEST\Domain Users Exclusion Group Name..: Keep Alive Interval...: 0 seconds User Name Format......: 3 Queue Warning Level...: 0 Queue Warning Interval: 30 minutes Disabled..............: False" So I typed the command "setspn -L OLSync" and I get this message: "Usage: setspn [modifiers switches data] computername Where 'computername' can be the name or domain\name Modifiers: -F = perform the duplicate checking on forestwide level -P = do not show progress (useful for redirecting output to file) Switches: -R = reset HOST ServicePrincipalName Usage: setspn -R computername -A = add arbitrary SPN Usage: setspn -A SPN computername -S = add arbitrary SPN after verifying no duplicates exist Usage: setspn -S SPN computername -D = delete arbitrary SPN Usage: setspn -D SPN computername -L = list registered SPNs Usage: setspn [-L] computername -Q = query for existence of SPN Usage: setspn -Q SPN -X = search for duplicate SPNs Usage: setspn -X Examples: setspn -R daserver1 It will register SPN 'HOST/daserver1' and 'HOST/{DNS of daserver1}' setspn -A http/daserver daserver1 It will register SPN 'http/daserver' for computer 'daserver1' setspn -D http/daserver daserver1 It will delete SPN 'http/daserver' for computer 'daserver1' setspn -F -S http/daserver daserver1 It will register SPN 'http/daserver' for computer 'daserver1' if no such SPN exi sts in the forest" How is that possible it was working the other day? I ran the command to delete it and recreate it and this is what I get: "C:\>setspn.exe -A PCNSCLNT/DCTEST.ADTEST.BYUH.EDU ADTEST.BYUH.EDU\OLSync Registering ServicePrincipalNames for CN=OLSync,CN=Users,DC=adtest,DC=byuh,DC=ed u PCNSCLNT/DCTEST.ADTEST.BYUH.EDU Updated object" I thought I was done and instead I'm back to square 1! I want to cry! What am I doing wrong? nothing has changed the environment is the same. Manu

Thanks! I had it installed but I was looking in the wrong folder. This is the message that I got: C:\Program Files\Microsoft Password Change Notification>pcnscfg.exe addtarget /n :PCNSCLNT /a: DCTEST.ADTEST.byuh.EDU /s:PCSNCLNT/DCTEST.ADTEST.xxx.EDU /fi:"Doma in Users" /f:3 Warning: The Service Principal Name you specified could not be found on any accounts in this domain. This target configuration will not be able to deliver passwords if the Service Principal Name is not configured properly. Target Name...........: PCNSCLNT Target GUID...........: CF420837-BDB5-4D69-98D4-D8197C0CAA33 Server FQDN or Address: DCTEST.ADTEST.xxx.EDU Service Principal Name: PCSNCLNT/DCTEST.ADTEST.xxx.EDU Authentication Service: Kerberos Inclusion Group Name..: ADTEST\Domain Users Exclusion Group Name..: Keep Alive Interval...: 0 seconds User Name Format......: 3 Queue Warning Level...: 0 Queue Warning Interval: 30 minutes Disabled..............: False Is this how should it look like at this point? There is another step to be completed, will that fix the message that says that is not configured right? Thanks very much for your help. Cheers Manu

Thanks Rabbieburns now I get the correct code for setspn, but no matter what I write I get the same error for the PCNSCFG, I tried to change folder from where I executed it but still the same. I tried to do a search for the actual file on the computer but I could not find it. I believe not to be installed, where do I get it and install it? Thanks Manu

This is the command that I ran:setspn.exe -A PCNSCLNT/DCTEST.ADTEST.xxx.EDU\OLSync DCtest is the test domain controller adtest.xxx.edu is the domain and OLSync is the account that I created to run OLsync. What am I doing wrong? Is this why the 'Pcnscfg.exe' is not working? Thanks Manu

Hello can't figure out the syntax to configure the Pcnscfg.exe I get this error: 'Pcnscfg.exe' is not recognized as an internal or external command, operable program or batch file. I followed these instructions: Implementing the Automated Password Synchronization Solution - Step-by-Step and tried also not putting the extension .exe, but I still get the same issue. When I finish step 2 I checked if the installation went thru fine and this is the out put to the setspn -L OLSync command: "Registered ServicePrincipalNames for CN=OLSync,CN=Users,DC=adtest,DC=byuh,DC: " Seems to be configured correctly but now I'm stuck because when I go to the next step I that message that PCNSCFG is not recognized. Can some one help please? Thanks Manu P.S. I wrote the same question on the Outlook live answers website but I keep getting ignored...very frustrating.