How to sync users and groups SID using MIM?

Question

Hi,

I want to know, how to sync users and groups SID using MIM in between source to target forest?

Thanks!

Answer 1

To sync users and groups SID (Security Identifiers) between source and target forests using Microsoft Identity Manager (MIM), you can set up a synchronization solution using MIM's synchronization engine. Here's a general approach to achieve this:

Install and Configure MIM: Ensure that MIM is installed and configured in both the source and target forests. Configure MIM to establish connectivity with Active Directory in both forests.

Set Up Management Agents: In MIM, create management agents (MAs) for both the source and target forests. Each management agent should be configured to connect to the corresponding Active Directory domain controllers in the source and target forests.

Configure Synchronization Rules: Define synchronization rules in MIM to synchronize user and group objects between the source and target forests. These rules should include mappings for attributes such as SID, objectGUID, SamAccountName, and other relevant attributes.

SID History Synchronization: If you need to sync SID history along with user and group objects, ensure that your synchronization rules are configured to handle SID history. You may need to map attributes such as msDS-SourceObjectDN and msDS-SourceObjectSID in the synchronization rules.

Run Synchronization: Once the synchronization rules are configured, run the synchronization process in MIM to synchronize user and group objects between the source and target forests. Monitor the synchronization process for any errors or issues.

Handle Conflict Resolution: In case of conflicts or inconsistencies during synchronization, implement conflict resolution mechanisms in MIM to resolve conflicts automatically or through manual intervention.

Monitor and Maintain: Continuously monitor the synchronization process in MIM and perform regular maintenance tasks to ensure the ongoing integrity and consistency of synchronized user and group objects between the source and target forests.

Test and Validate: Before deploying the synchronization solution in a production environment, thoroughly test and validate the synchronization process in a test or staging environment to ensure its effectiveness and reliability.

By following these steps and configuring synchronization rules appropriately, you can sync users and groups SID between source and target forests using MIM. Keep in mind that MIM offers flexibility and customization options, so you may need to tailor the solution to fit your specific requirements and environment.

Answer 2

Thanks for the information we are in process of implementing the same in lab environment and will update you once it is done.