none
Rename of FIM Security Groups RRS feed

  • Question

  • Hi,

    While installing the FIM, 5  security groups needs to be created on the active directory. Are these five groups needs to created same as mention in the FIM documents

    FIMSyncAdmins
    FIMSyncOperators
    FIMSyncJoiners
    FIMSyncBrowse
    FIMSyncPasswordSet

    Can we add prefix or suffix any word in the above groups to follow the naming convention.

    Like FIMGroup-FIMSyncAdmins-abc. Will it impact if  rename the 5 security groups name before installation  of FIM?

    Can we rename the security groups after installation and again run the FIM setup to replicate the new security groups?

    Thanks

    Harry

     

    Friday, July 18, 2014 2:17 PM

Answers

  • Hello Harry,

    Of course you can rename this group before installing FIM, with no impacts.

    And yes you can rename it after installation: you MUST run the install again.Ensure that you will backup the FIM encryption key before doing any actions!

    Regards,


    Sylvain

    • Proposed as answer by Robin Westgaard Monday, July 21, 2014 8:34 AM
    • Marked as answer by Harry-Harry Monday, July 21, 2014 10:17 AM
    Friday, July 18, 2014 2:54 PM
  • You also need to use DOMAIN\FimSyncAdmins in front of your groups during the installation so that the installer will use domain groups instead of server local ones.

    • Proposed as answer by Robin Westgaard Monday, July 21, 2014 8:34 AM
    • Marked as answer by Harry-Harry Monday, July 21, 2014 10:17 AM
    Friday, July 18, 2014 3:15 PM

All replies

  • Hello Harry,

    Of course you can rename this group before installing FIM, with no impacts.

    And yes you can rename it after installation: you MUST run the install again.Ensure that you will backup the FIM encryption key before doing any actions!

    Regards,


    Sylvain

    • Proposed as answer by Robin Westgaard Monday, July 21, 2014 8:34 AM
    • Marked as answer by Harry-Harry Monday, July 21, 2014 10:17 AM
    Friday, July 18, 2014 2:54 PM
  • You also need to use DOMAIN\FimSyncAdmins in front of your groups during the installation so that the installer will use domain groups instead of server local ones.

    • Proposed as answer by Robin Westgaard Monday, July 21, 2014 8:34 AM
    • Marked as answer by Harry-Harry Monday, July 21, 2014 10:17 AM
    Friday, July 18, 2014 3:15 PM