Using the QuickStart Tool
Using the QuickStart Tool
The QuickStart tool is new for FIM 2010 R2 and will allow you to quickly setup Self-Service Password Reset pre-requisites. Namely this cmdlet will do the following programmatically:
Creates the FIM Management Agent
Creates an Active Directory Management Agent
Synchronizes an Active Directory OU that contains users into FIM.
Once these takes are complete, the Active Directory users that were in the OU specified, are able to use the Registration and Reset portals for SSPR.
Before you begin
The following pre-requisites are required before using the QuickStart cmdlet.
PowerShell 2.0 must be installed on the server running the Synchronization Service.
The “ActiveDirectoryManagementAgentCredential” account has DirSync permission on the domain that is specified.
QuickStart package is installed by the Synchronization Service setup and can only be run where the Synchronization Service is installed.
If the cmdlet is invoked with the “-verbose” parameter the status messages that is shown at the top of the command window in green will also be sent to the command line. This is useful if you are attempting to automate the process. With the status message on the command line you will be able to see which steps the cmdlet completed and which ones that may have failed.
Setting up the QuickStart Package
Use the following steps to setup the QuickStart Package:
The QuickStart package will be located in \Program Files\Microsoft Identity Manager\2010\Synchronization Service\Tools\QuickStartPackage.zip. This zipped package must be extracted to PowerShell modules path. By default this is C:\Windows\System32\WindowsPowerShell\v1.0\Modules.
You can type the following in PowerShell to get the path: $env:PSModulePath
Once the package is extracted, open a Powershell Command prompt and enter: Import-Module QuickStart
This may fail with a strong name validation error. If so, you can add the following registry keys to bypass it. [HKEY_LOCAL_MACHINE\Software\Microsoft\StrongName\Verification*,31bf3856ad364e35] and [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\StrongName\Verification*,31bf3856ad364e35]
Once the module has been imported, the QuickStart tool is ready to use. When you use the Invoke-QuickStart cmdlet you will see the following while it runs.
Once it has completed, you can open the Synchronization Service and see that it has successfully run the management agents. They will be named Fabrikam ADMA and Fabrikam FIMMA by default. Likewise, if you check the FIM Portal you will see your users populated.
For a complete example and the Syntax see the Invoke-QuickStart section of this guide.