Re: [ActiveDir] Quest Migration manager(OT)

[Tom Kern]

MIIS cost $$$

The Identity Intergration Feature pack is free which can sync 2 AD forests and Exchange2k/2k3 orgs.

 

MIIS can do that and a whole lot more.

 

I'm assuming IIF pack is a little easier to manage but with a SQL 2k backend, it still seems like overkill to me.

 

I wish there was some way to script this to keep it in sync.

 

Also, I have to say it again, I don't understand why for the $$$, Quest can't do this in both directions.

 

Thanks again, everyone!!

 

On 11/23/05, Medeiros, Jose <[EMAIL PROTECTED]> wrote:

I forgot about that product. What threw me off was the fact that he stated free. However the term free is relative since it is a free eval for 180 days.

I watched a webcast on this product when it was first released, it did not appear to be very intuitive and seemed very complex to configure and manage, at least from a systems administrator stand point.

Sincerely,
Jose Medeiros
ADP | National Account Services
ProBusiness Division | Information Services
925.737.7967 | 408-449-6621 CELL

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jackson Shaw
Sent: Wednesday, November 23, 2005 10:37 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Quest Migration manager(OT)

The Intelligent Integration Feature Pack (IIFP) from Microsoft will do the password sync. Free download.

 

http://www.microsoft.com/windowsserversystem/miis2003/downloads/default.mspx

 

Cheers,

 

jackson

 

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Wednesday, November 23, 2005 10:20 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] Quest Migration manager(OT)

 

Thanks.

 

I'm pretty sure Quest can't do this. I'm not sure why it only goes one way for pw's or if there is anyway to enable 2-way sync just for certain attribs..

 

I don't think management wants to not expire passwords which is why i'm here bugging you guys :(

 

I guess using Identity Intergration Feature pack would be overkill as well....

 

 

Thanks again

 

On 11/23/05, Medeiros, Jose < [EMAIL PROTECTED]> wrote:

Hi Tom,

 

I know of no script that can do this. Why don't you just not expire the password in the source domain? The other option is to use a tool that will dump the passwords into a text file such a pwdump. However Joe may have a better solution.

Sincerely,
Jose Medeiros
ADP | National Account Services
ProBusiness Division | Information Services
925.737.7967 | 408-449-6621 CELL

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Wednesday, November 23, 2005 9:54 AM
To: activedirectory
Subject: [ActiveDir] Quest Migration manager(OT)

Hi all, I'm currently running the Quest DSA to sync 2 forests in one direction- source to target.

 

However our source forest contains Exchange and OWA access and will for a few months till this is complete.

 

The issue I'm running into is that a users's password will expire in the target domain and they will change it but since password dynch is only one way, it will never get updated on the source user object and when they try to log into my front end owa server, which is in the target domain, they get all confused.

 

My question is- is there a free(Script?) way to synch passwords in the other direction for OWA or some way through Quest that I don't know about?

 

Thanks.

Apologies for the OT