Joe Bothwell’s Personal Blog https://docs.microsoft.com/archive/blogs/joeb/feed.xml Just another Developer Network site Tue, 16 Apr 2019 05:13:47 GMT en-US hourly 1 Powershell Pass by Reference and WPF Controls https://docs.microsoft.com/archive/blogs/joeb/powershell-pass-by-reference-and-wpf-controls Mon, 05 Feb 2018 19:45:00 GMT https://blogs.msdn.microsoft.com/joeb/?p=85 Running PowerShell from C# https://docs.microsoft.com/archive/blogs/joeb/running-powershell-from-c Mon, 04 Dec 2017 16:42:28 GMT https://blogs.msdn.microsoft.com/joeb/?p=65 using System.Collections.ObjectModel; using System.Management.Automation; using static System.Console; namespace InvokePS { class Program { static void Main(string[] args) { string message = "'does this work?'"; string script = $@"C:\Users\joe.bothwell\Desktop\HelloWorld.ps1 -a {message}"; PowerShell shell = PowerShell.Create(); shell.Commands.AddScript(script); Collection results = shell.Invoke(); foreach(PSObject result in results) { WriteLine(result.ToString()); } WriteLine("Press any key to continue..."); ReadLine(); } } }]]> After installing v4.4.1642, unable to elevate to PAM Roles https://docs.microsoft.com/archive/blogs/joeb/after-installing-v4-4-1642-unable-to-elevate-to-pam-roles Thu, 16 Nov 2017 17:57:34 GMT https://blogs.msdn.microsoft.com/joeb/?p=35 After installing v4.4.1642, we were unable to elevate.  Running Get-PAMUsers returned a not authorize error.  Steps that were taken to resolve the issue:  On the Sync server modify the object deletion run as below – this is done on the Person metaverse person object
  1. Delete the connector space of the CTRL MA
  2. Ran Full import on the CTRL MA, this step triggers the metaverse deletion rule and then FIM MA deprovisioning rule. Note: No sync profile was needed here. This action delete all the users in the metaverse.
  3. Ran Export on FIM MA deleting all the users in FIM Service . Except for the Bulit-In Syanchronization serviceand  dte.* accounts
  4. Reverted the change done in step 1
  5. Ran Full Import Full Sync on CTRL MA
  6. Ran Export on FIM MA
  7. Ran Full Import Full Sync on FIM MA
  8. Ran Export on FIM MA
  9. Ran powershell script to set each users ResourceSID in the CtrlPortal
  10. Removed and re-added Users into PAM Roles in the portal.
  11. Corrected DNS entry for ctrlpamportal (one address was correct and one was wrong
  12. In IIS removed host header for the MIM Privileged Access Management API (was ctrlportal.dte.ic.gov)
  13. Add ctrlpamportal as the host header for MIM Access Management Portal
  14. Change MIM Access Management Portal App Pool to PamRestApiAppPool
  15. Did iisreset
]]> Problem installing MIM v4.4.1642 - Access denied https://docs.microsoft.com/archive/blogs/joeb/problem-installing-mim-v4-4-1642-access-denied Thu, 16 Nov 2017 17:50:43 GMT https://blogs.msdn.microsoft.com/joeb/?p=26 When installing MIM 2016 v4.4.1542 Hotfix, we were getting the following error: Calling custom action Microsoft.IdentityManagement.ServerCustomActions.CustomActions.AddServiceToPerformanceMonitors Adding FIMService account to 'Peformance Monitor Users' group Property name = 'ServiceAccount', value = 'domain\msvc' DomainName='domain' AccountName='msvc' Domain AD Found Exception Thrown by custom action" System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation ---> System.UnauthorizedAccessException: Access is denied. 
We resolved this by temporary add the MIM Portal Machine account to Domain Admins.  This allowed us to successfully install v4.4.1642
]]>